./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/email_spec1_product12.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 30f4e4ab Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/email_spec1_product12.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash d8be154d3e1e3530184c878a0d9a3b350197adb1 ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.24-30f4e4a [2019-11-28 00:13:48,267 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-11-28 00:13:48,270 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-11-28 00:13:48,289 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-11-28 00:13:48,290 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-11-28 00:13:48,292 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-11-28 00:13:48,294 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-11-28 00:13:48,305 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-11-28 00:13:48,310 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-11-28 00:13:48,314 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-11-28 00:13:48,315 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-11-28 00:13:48,318 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-11-28 00:13:48,318 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-11-28 00:13:48,321 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-11-28 00:13:48,322 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-11-28 00:13:48,324 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-11-28 00:13:48,327 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-11-28 00:13:48,329 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-11-28 00:13:48,332 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-11-28 00:13:48,336 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-11-28 00:13:48,341 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-11-28 00:13:48,346 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-11-28 00:13:48,348 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-11-28 00:13:48,350 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-11-28 00:13:48,355 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-11-28 00:13:48,356 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-11-28 00:13:48,356 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-11-28 00:13:48,358 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-11-28 00:13:48,359 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-11-28 00:13:48,360 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-11-28 00:13:48,360 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-11-28 00:13:48,362 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-11-28 00:13:48,363 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-11-28 00:13:48,364 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-11-28 00:13:48,366 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-11-28 00:13:48,366 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-11-28 00:13:48,367 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-11-28 00:13:48,368 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-11-28 00:13:48,368 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-11-28 00:13:48,369 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-11-28 00:13:48,371 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-11-28 00:13:48,372 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2019-11-28 00:13:48,412 INFO L113 SettingsManager]: Loading preferences was successful [2019-11-28 00:13:48,412 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-11-28 00:13:48,414 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-11-28 00:13:48,417 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2019-11-28 00:13:48,417 INFO L138 SettingsManager]: * Use SBE=true [2019-11-28 00:13:48,418 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-11-28 00:13:48,418 INFO L138 SettingsManager]: * sizeof long=4 [2019-11-28 00:13:48,418 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-11-28 00:13:48,420 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-11-28 00:13:48,420 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-11-28 00:13:48,420 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-11-28 00:13:48,421 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-11-28 00:13:48,421 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-11-28 00:13:48,422 INFO L138 SettingsManager]: * sizeof long double=12 [2019-11-28 00:13:48,422 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-11-28 00:13:48,424 INFO L138 SettingsManager]: * Use constant arrays=true [2019-11-28 00:13:48,424 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-11-28 00:13:48,424 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-11-28 00:13:48,424 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-11-28 00:13:48,425 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-11-28 00:13:48,425 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-11-28 00:13:48,425 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-11-28 00:13:48,425 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-11-28 00:13:48,426 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-11-28 00:13:48,426 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-11-28 00:13:48,426 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2019-11-28 00:13:48,426 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-11-28 00:13:48,427 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-11-28 00:13:48,427 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> d8be154d3e1e3530184c878a0d9a3b350197adb1 [2019-11-28 00:13:48,764 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-11-28 00:13:48,781 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-11-28 00:13:48,786 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-11-28 00:13:48,789 INFO L271 PluginConnector]: Initializing CDTParser... [2019-11-28 00:13:48,789 INFO L275 PluginConnector]: CDTParser initialized [2019-11-28 00:13:48,791 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/email_spec1_product12.cil.c [2019-11-28 00:13:48,865 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d9cd6f233/342e1ee4940441d792e66f5f2542d517/FLAG90689b705 [2019-11-28 00:13:49,506 INFO L306 CDTParser]: Found 1 translation units. [2019-11-28 00:13:49,506 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/email_spec1_product12.cil.c [2019-11-28 00:13:49,539 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d9cd6f233/342e1ee4940441d792e66f5f2542d517/FLAG90689b705 [2019-11-28 00:13:49,714 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d9cd6f233/342e1ee4940441d792e66f5f2542d517 [2019-11-28 00:13:49,717 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-11-28 00:13:49,719 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-11-28 00:13:49,720 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-11-28 00:13:49,720 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-11-28 00:13:49,724 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-11-28 00:13:49,725 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 12:13:49" (1/1) ... [2019-11-28 00:13:49,730 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@564c4a0b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:49, skipping insertion in model container [2019-11-28 00:13:49,731 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 12:13:49" (1/1) ... [2019-11-28 00:13:49,741 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-11-28 00:13:49,827 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-11-28 00:13:50,739 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-11-28 00:13:50,759 INFO L203 MainTranslator]: Completed pre-run [2019-11-28 00:13:50,876 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-11-28 00:13:50,949 INFO L208 MainTranslator]: Completed translation [2019-11-28 00:13:50,950 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:50 WrapperNode [2019-11-28 00:13:50,950 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-11-28 00:13:50,951 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-11-28 00:13:50,951 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-11-28 00:13:50,951 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-11-28 00:13:50,960 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:50" (1/1) ... [2019-11-28 00:13:50,993 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:50" (1/1) ... [2019-11-28 00:13:51,088 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-11-28 00:13:51,088 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-11-28 00:13:51,089 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-11-28 00:13:51,089 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-11-28 00:13:51,100 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:50" (1/1) ... [2019-11-28 00:13:51,100 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:50" (1/1) ... [2019-11-28 00:13:51,111 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:50" (1/1) ... [2019-11-28 00:13:51,112 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:50" (1/1) ... [2019-11-28 00:13:51,155 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:50" (1/1) ... [2019-11-28 00:13:51,192 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:50" (1/1) ... [2019-11-28 00:13:51,199 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:50" (1/1) ... [2019-11-28 00:13:51,215 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-11-28 00:13:51,216 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-11-28 00:13:51,219 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-11-28 00:13:51,219 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-11-28 00:13:51,220 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:50" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-11-28 00:13:51,293 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2019-11-28 00:13:51,294 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-11-28 00:13:51,294 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2019-11-28 00:13:51,294 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-11-28 00:13:51,294 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-11-28 00:13:53,199 INFO L292 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-11-28 00:13:53,202 INFO L297 CfgBuilder]: Removed 227 assume(true) statements. [2019-11-28 00:13:53,204 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 12:13:53 BoogieIcfgContainer [2019-11-28 00:13:53,205 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-11-28 00:13:53,208 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-11-28 00:13:53,210 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-11-28 00:13:53,214 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-11-28 00:13:53,215 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.11 12:13:49" (1/3) ... [2019-11-28 00:13:53,217 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@14ce3c53 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.11 12:13:53, skipping insertion in model container [2019-11-28 00:13:53,217 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:50" (2/3) ... [2019-11-28 00:13:53,218 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@14ce3c53 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.11 12:13:53, skipping insertion in model container [2019-11-28 00:13:53,218 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 12:13:53" (3/3) ... [2019-11-28 00:13:53,222 INFO L109 eAbstractionObserver]: Analyzing ICFG email_spec1_product12.cil.c [2019-11-28 00:13:53,236 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-11-28 00:13:53,248 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 2 error locations. [2019-11-28 00:13:53,262 INFO L249 AbstractCegarLoop]: Starting to check reachability of 2 error locations. [2019-11-28 00:13:53,309 INFO L373 AbstractCegarLoop]: Interprodecural is true [2019-11-28 00:13:53,309 INFO L374 AbstractCegarLoop]: Hoare is true [2019-11-28 00:13:53,309 INFO L375 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-11-28 00:13:53,310 INFO L376 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-11-28 00:13:53,310 INFO L377 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-11-28 00:13:53,310 INFO L378 AbstractCegarLoop]: Difference is false [2019-11-28 00:13:53,310 INFO L379 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-11-28 00:13:53,310 INFO L383 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-11-28 00:13:53,342 INFO L276 IsEmpty]: Start isEmpty. Operand 381 states. [2019-11-28 00:13:53,366 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2019-11-28 00:13:53,367 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:13:53,368 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:13:53,369 INFO L410 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:13:53,378 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:13:53,378 INFO L82 PathProgramCache]: Analyzing trace with hash 1419939679, now seen corresponding path program 1 times [2019-11-28 00:13:53,390 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:13:53,390 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1498184784] [2019-11-28 00:13:53,391 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:13:53,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:13:53,835 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:13:53,837 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1498184784] [2019-11-28 00:13:53,838 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:13:53,838 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-28 00:13:53,839 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [737642635] [2019-11-28 00:13:53,845 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 00:13:53,845 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:13:53,860 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 00:13:53,861 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 00:13:53,863 INFO L87 Difference]: Start difference. First operand 381 states. Second operand 3 states. [2019-11-28 00:13:54,030 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:13:54,031 INFO L93 Difference]: Finished difference Result 1108 states and 1955 transitions. [2019-11-28 00:13:54,031 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 00:13:54,033 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 41 [2019-11-28 00:13:54,034 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:13:54,061 INFO L225 Difference]: With dead ends: 1108 [2019-11-28 00:13:54,064 INFO L226 Difference]: Without dead ends: 676 [2019-11-28 00:13:54,074 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 00:13:54,103 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 676 states. [2019-11-28 00:13:54,185 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 676 to 347. [2019-11-28 00:13:54,187 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 347 states. [2019-11-28 00:13:54,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 607 transitions. [2019-11-28 00:13:54,192 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 607 transitions. Word has length 41 [2019-11-28 00:13:54,193 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:13:54,193 INFO L462 AbstractCegarLoop]: Abstraction has 347 states and 607 transitions. [2019-11-28 00:13:54,193 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 00:13:54,194 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 607 transitions. [2019-11-28 00:13:54,199 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2019-11-28 00:13:54,200 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:13:54,200 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:13:54,201 INFO L410 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:13:54,201 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:13:54,203 INFO L82 PathProgramCache]: Analyzing trace with hash 1242424365, now seen corresponding path program 1 times [2019-11-28 00:13:54,203 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:13:54,204 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1953079361] [2019-11-28 00:13:54,205 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:13:54,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:13:54,411 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:13:54,412 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1953079361] [2019-11-28 00:13:54,413 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:13:54,413 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-28 00:13:54,413 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [823370467] [2019-11-28 00:13:54,415 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-28 00:13:54,416 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:13:54,416 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-28 00:13:54,416 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-28 00:13:54,417 INFO L87 Difference]: Start difference. First operand 347 states and 607 transitions. Second operand 5 states. [2019-11-28 00:13:54,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:13:54,633 INFO L93 Difference]: Finished difference Result 990 states and 1737 transitions. [2019-11-28 00:13:54,634 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-11-28 00:13:54,634 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 43 [2019-11-28 00:13:54,634 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:13:54,639 INFO L225 Difference]: With dead ends: 990 [2019-11-28 00:13:54,639 INFO L226 Difference]: Without dead ends: 662 [2019-11-28 00:13:54,642 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2019-11-28 00:13:54,644 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 662 states. [2019-11-28 00:13:54,662 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 662 to 347. [2019-11-28 00:13:54,663 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 347 states. [2019-11-28 00:13:54,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 606 transitions. [2019-11-28 00:13:54,665 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 606 transitions. Word has length 43 [2019-11-28 00:13:54,666 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:13:54,666 INFO L462 AbstractCegarLoop]: Abstraction has 347 states and 606 transitions. [2019-11-28 00:13:54,666 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-28 00:13:54,666 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 606 transitions. [2019-11-28 00:13:54,668 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2019-11-28 00:13:54,668 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:13:54,669 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:13:54,669 INFO L410 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:13:54,669 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:13:54,669 INFO L82 PathProgramCache]: Analyzing trace with hash 1132714688, now seen corresponding path program 1 times [2019-11-28 00:13:54,670 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:13:54,670 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2119721789] [2019-11-28 00:13:54,670 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:13:54,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:13:54,859 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:13:54,860 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2119721789] [2019-11-28 00:13:54,860 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:13:54,860 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-28 00:13:54,860 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1250478534] [2019-11-28 00:13:54,861 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 00:13:54,861 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:13:54,861 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 00:13:54,861 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 00:13:54,864 INFO L87 Difference]: Start difference. First operand 347 states and 606 transitions. Second operand 3 states. [2019-11-28 00:13:54,904 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:13:54,905 INFO L93 Difference]: Finished difference Result 676 states and 1186 transitions. [2019-11-28 00:13:54,909 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 00:13:54,910 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 44 [2019-11-28 00:13:54,910 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:13:54,912 INFO L225 Difference]: With dead ends: 676 [2019-11-28 00:13:54,913 INFO L226 Difference]: Without dead ends: 352 [2019-11-28 00:13:54,914 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 00:13:54,915 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 352 states. [2019-11-28 00:13:54,928 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 352 to 347. [2019-11-28 00:13:54,929 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 347 states. [2019-11-28 00:13:54,930 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 605 transitions. [2019-11-28 00:13:54,931 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 605 transitions. Word has length 44 [2019-11-28 00:13:54,932 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:13:54,937 INFO L462 AbstractCegarLoop]: Abstraction has 347 states and 605 transitions. [2019-11-28 00:13:54,938 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 00:13:54,938 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 605 transitions. [2019-11-28 00:13:54,939 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2019-11-28 00:13:54,939 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:13:54,939 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:13:54,940 INFO L410 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:13:54,940 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:13:54,940 INFO L82 PathProgramCache]: Analyzing trace with hash 542876218, now seen corresponding path program 1 times [2019-11-28 00:13:54,941 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:13:54,941 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1426660944] [2019-11-28 00:13:54,941 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:13:54,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:13:55,004 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:13:55,004 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1426660944] [2019-11-28 00:13:55,005 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:13:55,005 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-28 00:13:55,005 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1499152963] [2019-11-28 00:13:55,006 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 00:13:55,006 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:13:55,006 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 00:13:55,006 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 00:13:55,006 INFO L87 Difference]: Start difference. First operand 347 states and 605 transitions. Second operand 3 states. [2019-11-28 00:13:55,040 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:13:55,041 INFO L93 Difference]: Finished difference Result 686 states and 1199 transitions. [2019-11-28 00:13:55,041 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 00:13:55,041 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 45 [2019-11-28 00:13:55,042 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:13:55,044 INFO L225 Difference]: With dead ends: 686 [2019-11-28 00:13:55,044 INFO L226 Difference]: Without dead ends: 347 [2019-11-28 00:13:55,046 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 00:13:55,047 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 347 states. [2019-11-28 00:13:55,057 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 347 to 347. [2019-11-28 00:13:55,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 347 states. [2019-11-28 00:13:55,059 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 603 transitions. [2019-11-28 00:13:55,059 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 603 transitions. Word has length 45 [2019-11-28 00:13:55,059 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:13:55,060 INFO L462 AbstractCegarLoop]: Abstraction has 347 states and 603 transitions. [2019-11-28 00:13:55,060 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 00:13:55,060 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 603 transitions. [2019-11-28 00:13:55,061 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2019-11-28 00:13:55,061 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:13:55,062 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:13:55,062 INFO L410 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:13:55,062 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:13:55,062 INFO L82 PathProgramCache]: Analyzing trace with hash -1391705979, now seen corresponding path program 1 times [2019-11-28 00:13:55,063 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:13:55,063 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1701969213] [2019-11-28 00:13:55,063 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:13:55,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:13:55,172 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:13:55,173 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1701969213] [2019-11-28 00:13:55,174 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:13:55,174 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-28 00:13:55,174 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [928486819] [2019-11-28 00:13:55,174 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-28 00:13:55,175 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:13:55,176 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-28 00:13:55,176 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-28 00:13:55,176 INFO L87 Difference]: Start difference. First operand 347 states and 603 transitions. Second operand 5 states. [2019-11-28 00:13:55,341 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:13:55,341 INFO L93 Difference]: Finished difference Result 980 states and 1717 transitions. [2019-11-28 00:13:55,342 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-11-28 00:13:55,342 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 46 [2019-11-28 00:13:55,342 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:13:55,346 INFO L225 Difference]: With dead ends: 980 [2019-11-28 00:13:55,347 INFO L226 Difference]: Without dead ends: 660 [2019-11-28 00:13:55,348 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-11-28 00:13:55,350 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 660 states. [2019-11-28 00:13:55,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 660 to 347. [2019-11-28 00:13:55,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 347 states. [2019-11-28 00:13:55,370 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 602 transitions. [2019-11-28 00:13:55,370 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 602 transitions. Word has length 46 [2019-11-28 00:13:55,371 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:13:55,371 INFO L462 AbstractCegarLoop]: Abstraction has 347 states and 602 transitions. [2019-11-28 00:13:55,371 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-28 00:13:55,371 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 602 transitions. [2019-11-28 00:13:55,373 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2019-11-28 00:13:55,373 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:13:55,373 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:13:55,373 INFO L410 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:13:55,374 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:13:55,374 INFO L82 PathProgramCache]: Analyzing trace with hash 2141186050, now seen corresponding path program 1 times [2019-11-28 00:13:55,374 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:13:55,375 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1631193372] [2019-11-28 00:13:55,375 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:13:55,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:13:55,440 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:13:55,440 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1631193372] [2019-11-28 00:13:55,440 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:13:55,441 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-28 00:13:55,441 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [422224437] [2019-11-28 00:13:55,441 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-28 00:13:55,441 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:13:55,442 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-28 00:13:55,442 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-28 00:13:55,442 INFO L87 Difference]: Start difference. First operand 347 states and 602 transitions. Second operand 5 states. [2019-11-28 00:13:55,600 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:13:55,601 INFO L93 Difference]: Finished difference Result 985 states and 1722 transitions. [2019-11-28 00:13:55,601 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-11-28 00:13:55,601 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 47 [2019-11-28 00:13:55,602 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:13:55,605 INFO L225 Difference]: With dead ends: 985 [2019-11-28 00:13:55,605 INFO L226 Difference]: Without dead ends: 665 [2019-11-28 00:13:55,607 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-11-28 00:13:55,608 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 665 states. [2019-11-28 00:13:55,623 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 665 to 347. [2019-11-28 00:13:55,624 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 347 states. [2019-11-28 00:13:55,625 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 601 transitions. [2019-11-28 00:13:55,625 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 601 transitions. Word has length 47 [2019-11-28 00:13:55,626 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:13:55,626 INFO L462 AbstractCegarLoop]: Abstraction has 347 states and 601 transitions. [2019-11-28 00:13:55,626 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-28 00:13:55,626 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 601 transitions. [2019-11-28 00:13:55,627 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2019-11-28 00:13:55,627 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:13:55,628 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:13:55,628 INFO L410 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:13:55,628 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:13:55,629 INFO L82 PathProgramCache]: Analyzing trace with hash 504792042, now seen corresponding path program 1 times [2019-11-28 00:13:55,629 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:13:55,629 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1272737025] [2019-11-28 00:13:55,629 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:13:55,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:13:55,681 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:13:55,682 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1272737025] [2019-11-28 00:13:55,682 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:13:55,682 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-28 00:13:55,683 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [219038922] [2019-11-28 00:13:55,683 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 00:13:55,683 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:13:55,683 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 00:13:55,684 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 00:13:55,684 INFO L87 Difference]: Start difference. First operand 347 states and 601 transitions. Second operand 3 states. [2019-11-28 00:13:55,708 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:13:55,708 INFO L93 Difference]: Finished difference Result 460 states and 785 transitions. [2019-11-28 00:13:55,708 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 00:13:55,709 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 48 [2019-11-28 00:13:55,709 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:13:55,711 INFO L225 Difference]: With dead ends: 460 [2019-11-28 00:13:55,711 INFO L226 Difference]: Without dead ends: 350 [2019-11-28 00:13:55,712 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 00:13:55,713 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 350 states. [2019-11-28 00:13:55,727 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 350 to 349. [2019-11-28 00:13:55,727 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 349 states. [2019-11-28 00:13:55,729 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 349 states to 349 states and 603 transitions. [2019-11-28 00:13:55,729 INFO L78 Accepts]: Start accepts. Automaton has 349 states and 603 transitions. Word has length 48 [2019-11-28 00:13:55,730 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:13:55,730 INFO L462 AbstractCegarLoop]: Abstraction has 349 states and 603 transitions. [2019-11-28 00:13:55,730 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 00:13:55,730 INFO L276 IsEmpty]: Start isEmpty. Operand 349 states and 603 transitions. [2019-11-28 00:13:55,731 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2019-11-28 00:13:55,731 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:13:55,731 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:13:55,732 INFO L410 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:13:55,732 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:13:55,732 INFO L82 PathProgramCache]: Analyzing trace with hash -1344122196, now seen corresponding path program 1 times [2019-11-28 00:13:55,732 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:13:55,733 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [744406023] [2019-11-28 00:13:55,733 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:13:55,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:13:55,789 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:13:55,790 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [744406023] [2019-11-28 00:13:55,790 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:13:55,790 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-28 00:13:55,790 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1516998579] [2019-11-28 00:13:55,791 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 00:13:55,791 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:13:55,791 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 00:13:55,791 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 00:13:55,792 INFO L87 Difference]: Start difference. First operand 349 states and 603 transitions. Second operand 3 states. [2019-11-28 00:13:55,841 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:13:55,841 INFO L93 Difference]: Finished difference Result 933 states and 1633 transitions. [2019-11-28 00:13:55,841 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 00:13:55,842 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 54 [2019-11-28 00:13:55,842 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:13:55,846 INFO L225 Difference]: With dead ends: 933 [2019-11-28 00:13:55,846 INFO L226 Difference]: Without dead ends: 615 [2019-11-28 00:13:55,848 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 00:13:55,849 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 615 states. [2019-11-28 00:13:55,876 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 615 to 505. [2019-11-28 00:13:55,876 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 505 states. [2019-11-28 00:13:55,878 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 505 states to 505 states and 889 transitions. [2019-11-28 00:13:55,878 INFO L78 Accepts]: Start accepts. Automaton has 505 states and 889 transitions. Word has length 54 [2019-11-28 00:13:55,880 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:13:55,880 INFO L462 AbstractCegarLoop]: Abstraction has 505 states and 889 transitions. [2019-11-28 00:13:55,880 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 00:13:55,880 INFO L276 IsEmpty]: Start isEmpty. Operand 505 states and 889 transitions. [2019-11-28 00:13:55,881 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2019-11-28 00:13:55,881 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:13:55,881 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:13:55,882 INFO L410 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:13:55,882 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:13:55,882 INFO L82 PathProgramCache]: Analyzing trace with hash -1900507155, now seen corresponding path program 1 times [2019-11-28 00:13:55,882 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:13:55,883 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [782904480] [2019-11-28 00:13:55,883 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:13:55,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:13:56,022 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 00:13:56,023 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [782904480] [2019-11-28 00:13:56,023 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:13:56,023 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-11-28 00:13:56,025 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [96120108] [2019-11-28 00:13:56,027 INFO L442 AbstractCegarLoop]: Interpolant automaton has 9 states [2019-11-28 00:13:56,027 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:13:56,027 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2019-11-28 00:13:56,028 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2019-11-28 00:13:56,028 INFO L87 Difference]: Start difference. First operand 505 states and 889 transitions. Second operand 9 states. [2019-11-28 00:13:57,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:13:57,300 INFO L93 Difference]: Finished difference Result 1541 states and 2635 transitions. [2019-11-28 00:13:57,300 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2019-11-28 00:13:57,300 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 55 [2019-11-28 00:13:57,300 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:13:57,307 INFO L225 Difference]: With dead ends: 1541 [2019-11-28 00:13:57,308 INFO L226 Difference]: Without dead ends: 1451 [2019-11-28 00:13:57,309 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=94, Invalid=178, Unknown=0, NotChecked=0, Total=272 [2019-11-28 00:13:57,311 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1451 states. [2019-11-28 00:13:57,393 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1451 to 949. [2019-11-28 00:13:57,394 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 949 states. [2019-11-28 00:13:57,400 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 949 states to 949 states and 1689 transitions. [2019-11-28 00:13:57,400 INFO L78 Accepts]: Start accepts. Automaton has 949 states and 1689 transitions. Word has length 55 [2019-11-28 00:13:57,400 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:13:57,401 INFO L462 AbstractCegarLoop]: Abstraction has 949 states and 1689 transitions. [2019-11-28 00:13:57,401 INFO L463 AbstractCegarLoop]: Interpolant automaton has 9 states. [2019-11-28 00:13:57,401 INFO L276 IsEmpty]: Start isEmpty. Operand 949 states and 1689 transitions. [2019-11-28 00:13:57,403 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2019-11-28 00:13:57,403 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:13:57,403 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:13:57,404 INFO L410 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:13:57,404 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:13:57,404 INFO L82 PathProgramCache]: Analyzing trace with hash 312495338, now seen corresponding path program 1 times [2019-11-28 00:13:57,405 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:13:57,405 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1881526045] [2019-11-28 00:13:57,405 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:13:57,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:13:57,492 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 00:13:57,493 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1881526045] [2019-11-28 00:13:57,494 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:13:57,494 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-28 00:13:57,494 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [338039987] [2019-11-28 00:13:57,495 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-11-28 00:13:57,495 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:13:57,495 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-11-28 00:13:57,496 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-11-28 00:13:57,496 INFO L87 Difference]: Start difference. First operand 949 states and 1689 transitions. Second operand 4 states. [2019-11-28 00:13:57,836 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:13:57,836 INFO L93 Difference]: Finished difference Result 1920 states and 3336 transitions. [2019-11-28 00:13:57,837 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-11-28 00:13:57,837 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 56 [2019-11-28 00:13:57,838 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:13:57,850 INFO L225 Difference]: With dead ends: 1920 [2019-11-28 00:13:57,851 INFO L226 Difference]: Without dead ends: 1772 [2019-11-28 00:13:57,852 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2019-11-28 00:13:57,863 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1772 states. [2019-11-28 00:13:57,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1772 to 1468. [2019-11-28 00:13:57,988 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1468 states. [2019-11-28 00:13:57,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1468 states to 1468 states and 2612 transitions. [2019-11-28 00:13:57,996 INFO L78 Accepts]: Start accepts. Automaton has 1468 states and 2612 transitions. Word has length 56 [2019-11-28 00:13:57,997 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:13:57,997 INFO L462 AbstractCegarLoop]: Abstraction has 1468 states and 2612 transitions. [2019-11-28 00:13:57,997 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-11-28 00:13:57,997 INFO L276 IsEmpty]: Start isEmpty. Operand 1468 states and 2612 transitions. [2019-11-28 00:13:58,000 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2019-11-28 00:13:58,001 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:13:58,001 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:13:58,001 INFO L410 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:13:58,002 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:13:58,002 INFO L82 PathProgramCache]: Analyzing trace with hash -274310676, now seen corresponding path program 1 times [2019-11-28 00:13:58,003 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:13:58,003 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [974289465] [2019-11-28 00:13:58,003 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:13:58,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:13:58,108 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 00:13:58,109 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [974289465] [2019-11-28 00:13:58,110 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:13:58,110 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2019-11-28 00:13:58,111 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1551438292] [2019-11-28 00:13:58,111 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 00:13:58,112 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:13:58,114 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 00:13:58,115 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 00:13:58,115 INFO L87 Difference]: Start difference. First operand 1468 states and 2612 transitions. Second operand 3 states. [2019-11-28 00:13:58,229 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:13:58,230 INFO L93 Difference]: Finished difference Result 1640 states and 2886 transitions. [2019-11-28 00:13:58,231 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 00:13:58,231 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 56 [2019-11-28 00:13:58,231 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:13:58,244 INFO L225 Difference]: With dead ends: 1640 [2019-11-28 00:13:58,244 INFO L226 Difference]: Without dead ends: 1450 [2019-11-28 00:13:58,246 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 00:13:58,249 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1450 states. [2019-11-28 00:13:58,367 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1450 to 1450. [2019-11-28 00:13:58,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1450 states. [2019-11-28 00:13:58,376 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1450 states to 1450 states and 2579 transitions. [2019-11-28 00:13:58,377 INFO L78 Accepts]: Start accepts. Automaton has 1450 states and 2579 transitions. Word has length 56 [2019-11-28 00:13:58,378 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:13:58,379 INFO L462 AbstractCegarLoop]: Abstraction has 1450 states and 2579 transitions. [2019-11-28 00:13:58,379 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 00:13:58,379 INFO L276 IsEmpty]: Start isEmpty. Operand 1450 states and 2579 transitions. [2019-11-28 00:13:58,391 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2019-11-28 00:13:58,391 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:13:58,391 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:13:58,392 INFO L410 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:13:58,392 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:13:58,392 INFO L82 PathProgramCache]: Analyzing trace with hash 1680737127, now seen corresponding path program 1 times [2019-11-28 00:13:58,393 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:13:58,394 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [951135607] [2019-11-28 00:13:58,394 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:13:58,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:13:58,492 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 00:13:58,493 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [951135607] [2019-11-28 00:13:58,493 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:13:58,494 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-28 00:13:58,494 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [695383244] [2019-11-28 00:13:58,494 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-11-28 00:13:58,494 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:13:58,495 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-11-28 00:13:58,495 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-11-28 00:13:58,495 INFO L87 Difference]: Start difference. First operand 1450 states and 2579 transitions. Second operand 4 states. [2019-11-28 00:13:58,577 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:13:58,577 INFO L93 Difference]: Finished difference Result 1553 states and 2748 transitions. [2019-11-28 00:13:58,578 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-11-28 00:13:58,578 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2019-11-28 00:13:58,578 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:13:58,585 INFO L225 Difference]: With dead ends: 1553 [2019-11-28 00:13:58,586 INFO L226 Difference]: Without dead ends: 1383 [2019-11-28 00:13:58,587 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2019-11-28 00:13:58,588 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1383 states. [2019-11-28 00:13:58,668 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1383 to 1383. [2019-11-28 00:13:58,669 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1383 states. [2019-11-28 00:13:58,674 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1383 states to 1383 states and 2466 transitions. [2019-11-28 00:13:58,674 INFO L78 Accepts]: Start accepts. Automaton has 1383 states and 2466 transitions. Word has length 82 [2019-11-28 00:13:58,674 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:13:58,675 INFO L462 AbstractCegarLoop]: Abstraction has 1383 states and 2466 transitions. [2019-11-28 00:13:58,675 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-11-28 00:13:58,675 INFO L276 IsEmpty]: Start isEmpty. Operand 1383 states and 2466 transitions. [2019-11-28 00:13:58,681 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2019-11-28 00:13:58,681 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:13:58,681 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:13:58,682 INFO L410 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:13:58,682 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:13:58,685 INFO L82 PathProgramCache]: Analyzing trace with hash 1102479568, now seen corresponding path program 1 times [2019-11-28 00:13:58,686 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:13:58,686 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2094698859] [2019-11-28 00:13:58,686 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:13:58,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:13:58,823 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 00:13:58,824 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2094698859] [2019-11-28 00:13:58,824 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:13:58,825 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2019-11-28 00:13:58,825 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [15979752] [2019-11-28 00:13:58,825 INFO L442 AbstractCegarLoop]: Interpolant automaton has 9 states [2019-11-28 00:13:58,825 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:13:58,826 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2019-11-28 00:13:58,826 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2019-11-28 00:13:58,826 INFO L87 Difference]: Start difference. First operand 1383 states and 2466 transitions. Second operand 9 states. [2019-11-28 00:13:59,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:13:59,302 INFO L93 Difference]: Finished difference Result 1867 states and 3240 transitions. [2019-11-28 00:13:59,303 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-11-28 00:13:59,303 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 83 [2019-11-28 00:13:59,303 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:13:59,315 INFO L225 Difference]: With dead ends: 1867 [2019-11-28 00:13:59,316 INFO L226 Difference]: Without dead ends: 1748 [2019-11-28 00:13:59,317 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=72, Invalid=168, Unknown=0, NotChecked=0, Total=240 [2019-11-28 00:13:59,321 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1748 states. [2019-11-28 00:13:59,444 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1748 to 1389. [2019-11-28 00:13:59,444 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1389 states. [2019-11-28 00:13:59,451 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1389 states to 1389 states and 2472 transitions. [2019-11-28 00:13:59,452 INFO L78 Accepts]: Start accepts. Automaton has 1389 states and 2472 transitions. Word has length 83 [2019-11-28 00:13:59,452 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:13:59,452 INFO L462 AbstractCegarLoop]: Abstraction has 1389 states and 2472 transitions. [2019-11-28 00:13:59,453 INFO L463 AbstractCegarLoop]: Interpolant automaton has 9 states. [2019-11-28 00:13:59,453 INFO L276 IsEmpty]: Start isEmpty. Operand 1389 states and 2472 transitions. [2019-11-28 00:13:59,458 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2019-11-28 00:13:59,458 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:13:59,459 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:13:59,459 INFO L410 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:13:59,460 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:13:59,460 INFO L82 PathProgramCache]: Analyzing trace with hash 12519486, now seen corresponding path program 1 times [2019-11-28 00:13:59,460 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:13:59,461 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [235315437] [2019-11-28 00:13:59,461 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:13:59,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:13:59,599 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 00:13:59,599 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [235315437] [2019-11-28 00:13:59,600 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:13:59,600 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-11-28 00:13:59,601 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1885875734] [2019-11-28 00:13:59,601 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-11-28 00:13:59,601 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:13:59,602 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-11-28 00:13:59,602 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-11-28 00:13:59,603 INFO L87 Difference]: Start difference. First operand 1389 states and 2472 transitions. Second operand 6 states. [2019-11-28 00:13:59,924 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:13:59,925 INFO L93 Difference]: Finished difference Result 2943 states and 5199 transitions. [2019-11-28 00:13:59,925 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-11-28 00:13:59,926 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 84 [2019-11-28 00:13:59,926 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:13:59,941 INFO L225 Difference]: With dead ends: 2943 [2019-11-28 00:13:59,941 INFO L226 Difference]: Without dead ends: 2878 [2019-11-28 00:13:59,943 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=49, Unknown=0, NotChecked=0, Total=72 [2019-11-28 00:13:59,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2878 states. [2019-11-28 00:14:00,157 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2878 to 2643. [2019-11-28 00:14:00,158 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2643 states. [2019-11-28 00:14:00,167 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2643 states to 2643 states and 4731 transitions. [2019-11-28 00:14:00,167 INFO L78 Accepts]: Start accepts. Automaton has 2643 states and 4731 transitions. Word has length 84 [2019-11-28 00:14:00,168 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:14:00,168 INFO L462 AbstractCegarLoop]: Abstraction has 2643 states and 4731 transitions. [2019-11-28 00:14:00,168 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-11-28 00:14:00,168 INFO L276 IsEmpty]: Start isEmpty. Operand 2643 states and 4731 transitions. [2019-11-28 00:14:00,178 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2019-11-28 00:14:00,178 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:14:00,179 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:14:00,179 INFO L410 AbstractCegarLoop]: === Iteration 15 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:14:00,180 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:14:00,180 INFO L82 PathProgramCache]: Analyzing trace with hash 1749467236, now seen corresponding path program 1 times [2019-11-28 00:14:00,180 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:14:00,181 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [144971625] [2019-11-28 00:14:00,181 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:14:00,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:14:00,335 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 00:14:00,336 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [144971625] [2019-11-28 00:14:00,336 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:14:00,336 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-11-28 00:14:00,337 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [742417431] [2019-11-28 00:14:00,338 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-11-28 00:14:00,338 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:14:00,338 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-11-28 00:14:00,339 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2019-11-28 00:14:00,339 INFO L87 Difference]: Start difference. First operand 2643 states and 4731 transitions. Second operand 8 states. [2019-11-28 00:14:00,690 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:14:00,691 INFO L93 Difference]: Finished difference Result 2996 states and 5303 transitions. [2019-11-28 00:14:00,691 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2019-11-28 00:14:00,691 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 84 [2019-11-28 00:14:00,691 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:14:00,705 INFO L225 Difference]: With dead ends: 2996 [2019-11-28 00:14:00,705 INFO L226 Difference]: Without dead ends: 2640 [2019-11-28 00:14:00,709 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=92, Invalid=180, Unknown=0, NotChecked=0, Total=272 [2019-11-28 00:14:00,712 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2640 states. [2019-11-28 00:14:00,856 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2640 to 2607. [2019-11-28 00:14:00,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2607 states. [2019-11-28 00:14:00,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2607 states to 2607 states and 4657 transitions. [2019-11-28 00:14:00,866 INFO L78 Accepts]: Start accepts. Automaton has 2607 states and 4657 transitions. Word has length 84 [2019-11-28 00:14:00,867 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:14:00,867 INFO L462 AbstractCegarLoop]: Abstraction has 2607 states and 4657 transitions. [2019-11-28 00:14:00,867 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-11-28 00:14:00,867 INFO L276 IsEmpty]: Start isEmpty. Operand 2607 states and 4657 transitions. [2019-11-28 00:14:00,873 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2019-11-28 00:14:00,873 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:14:00,874 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:14:00,874 INFO L410 AbstractCegarLoop]: === Iteration 16 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:14:00,874 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:14:00,875 INFO L82 PathProgramCache]: Analyzing trace with hash 738594347, now seen corresponding path program 1 times [2019-11-28 00:14:00,875 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:14:00,875 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1225600831] [2019-11-28 00:14:00,875 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:14:00,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:14:01,010 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 00:14:01,011 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1225600831] [2019-11-28 00:14:01,014 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:14:01,015 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-11-28 00:14:01,015 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [434633209] [2019-11-28 00:14:01,016 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-11-28 00:14:01,016 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:14:01,017 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-11-28 00:14:01,017 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2019-11-28 00:14:01,018 INFO L87 Difference]: Start difference. First operand 2607 states and 4657 transitions. Second operand 8 states. [2019-11-28 00:14:01,531 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:14:01,532 INFO L93 Difference]: Finished difference Result 2759 states and 4897 transitions. [2019-11-28 00:14:01,532 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-11-28 00:14:01,533 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 85 [2019-11-28 00:14:01,533 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:14:01,549 INFO L225 Difference]: With dead ends: 2759 [2019-11-28 00:14:01,549 INFO L226 Difference]: Without dead ends: 2637 [2019-11-28 00:14:01,551 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=64, Invalid=118, Unknown=0, NotChecked=0, Total=182 [2019-11-28 00:14:01,555 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2637 states. [2019-11-28 00:14:01,707 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2637 to 2604. [2019-11-28 00:14:01,707 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2604 states. [2019-11-28 00:14:01,716 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2604 states to 2604 states and 4645 transitions. [2019-11-28 00:14:01,717 INFO L78 Accepts]: Start accepts. Automaton has 2604 states and 4645 transitions. Word has length 85 [2019-11-28 00:14:01,718 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:14:01,718 INFO L462 AbstractCegarLoop]: Abstraction has 2604 states and 4645 transitions. [2019-11-28 00:14:01,718 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-11-28 00:14:01,718 INFO L276 IsEmpty]: Start isEmpty. Operand 2604 states and 4645 transitions. [2019-11-28 00:14:01,724 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2019-11-28 00:14:01,725 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:14:01,725 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:14:01,725 INFO L410 AbstractCegarLoop]: === Iteration 17 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:14:01,725 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:14:01,726 INFO L82 PathProgramCache]: Analyzing trace with hash 1592644432, now seen corresponding path program 1 times [2019-11-28 00:14:01,726 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:14:01,726 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1023874208] [2019-11-28 00:14:01,726 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:14:01,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:14:01,781 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 00:14:01,781 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1023874208] [2019-11-28 00:14:01,782 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:14:01,782 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-28 00:14:01,782 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [174699741] [2019-11-28 00:14:01,782 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-11-28 00:14:01,783 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:14:01,783 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-11-28 00:14:01,783 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-11-28 00:14:01,784 INFO L87 Difference]: Start difference. First operand 2604 states and 4645 transitions. Second operand 4 states. [2019-11-28 00:14:02,083 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:14:02,083 INFO L93 Difference]: Finished difference Result 5228 states and 9313 transitions. [2019-11-28 00:14:02,084 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-11-28 00:14:02,084 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 85 [2019-11-28 00:14:02,084 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:14:02,119 INFO L225 Difference]: With dead ends: 5228 [2019-11-28 00:14:02,120 INFO L226 Difference]: Without dead ends: 3878 [2019-11-28 00:14:02,124 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2019-11-28 00:14:02,128 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3878 states. [2019-11-28 00:14:02,270 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3878 to 2591. [2019-11-28 00:14:02,271 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2591 states. [2019-11-28 00:14:02,279 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2591 states to 2591 states and 4628 transitions. [2019-11-28 00:14:02,279 INFO L78 Accepts]: Start accepts. Automaton has 2591 states and 4628 transitions. Word has length 85 [2019-11-28 00:14:02,280 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:14:02,280 INFO L462 AbstractCegarLoop]: Abstraction has 2591 states and 4628 transitions. [2019-11-28 00:14:02,280 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-11-28 00:14:02,280 INFO L276 IsEmpty]: Start isEmpty. Operand 2591 states and 4628 transitions. [2019-11-28 00:14:02,288 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2019-11-28 00:14:02,289 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:14:02,289 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:14:02,289 INFO L410 AbstractCegarLoop]: === Iteration 18 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:14:02,289 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:14:02,290 INFO L82 PathProgramCache]: Analyzing trace with hash 1780593588, now seen corresponding path program 1 times [2019-11-28 00:14:02,290 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:14:02,290 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2143674483] [2019-11-28 00:14:02,290 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:14:02,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:14:02,398 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 00:14:02,398 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2143674483] [2019-11-28 00:14:02,399 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:14:02,399 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-11-28 00:14:02,399 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2107118070] [2019-11-28 00:14:02,400 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-11-28 00:14:02,401 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:14:02,401 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-11-28 00:14:02,403 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2019-11-28 00:14:02,404 INFO L87 Difference]: Start difference. First operand 2591 states and 4628 transitions. Second operand 8 states. [2019-11-28 00:14:02,771 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:14:02,772 INFO L93 Difference]: Finished difference Result 2591 states and 4628 transitions. [2019-11-28 00:14:02,772 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-11-28 00:14:02,772 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 87 [2019-11-28 00:14:02,773 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:14:02,773 INFO L225 Difference]: With dead ends: 2591 [2019-11-28 00:14:02,773 INFO L226 Difference]: Without dead ends: 0 [2019-11-28 00:14:02,777 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2019-11-28 00:14:02,777 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2019-11-28 00:14:02,777 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2019-11-28 00:14:02,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2019-11-28 00:14:02,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2019-11-28 00:14:02,778 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 87 [2019-11-28 00:14:02,778 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:14:02,779 INFO L462 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-28 00:14:02,779 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-11-28 00:14:02,779 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2019-11-28 00:14:02,779 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2019-11-28 00:14:02,782 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2019-11-28 00:14:02,975 WARN L192 SmtUtils]: Spent 184.00 ms on a formula simplification. DAG size of input: 138 DAG size of output: 132 [2019-11-28 00:14:03,114 WARN L192 SmtUtils]: Spent 135.00 ms on a formula simplification. DAG size of input: 138 DAG size of output: 132 [2019-11-28 00:14:03,350 WARN L192 SmtUtils]: Spent 158.00 ms on a formula simplification. DAG size of input: 140 DAG size of output: 134 [2019-11-28 00:14:03,618 WARN L192 SmtUtils]: Spent 165.00 ms on a formula simplification. DAG size of input: 155 DAG size of output: 149 [2019-11-28 00:14:03,811 WARN L192 SmtUtils]: Spent 155.00 ms on a formula simplification. DAG size of input: 158 DAG size of output: 152 [2019-11-28 00:14:03,963 WARN L192 SmtUtils]: Spent 150.00 ms on a formula simplification. DAG size of input: 153 DAG size of output: 147 [2019-11-28 00:14:04,239 WARN L192 SmtUtils]: Spent 112.00 ms on a formula simplification. DAG size of input: 155 DAG size of output: 149 [2019-11-28 00:14:04,676 WARN L192 SmtUtils]: Spent 102.00 ms on a formula simplification. DAG size of input: 155 DAG size of output: 149 [2019-11-28 00:14:04,919 WARN L192 SmtUtils]: Spent 116.00 ms on a formula simplification. DAG size of input: 155 DAG size of output: 149 [2019-11-28 00:14:06,361 WARN L192 SmtUtils]: Spent 444.00 ms on a formula simplification. DAG size of input: 131 DAG size of output: 47 [2019-11-28 00:14:06,830 WARN L192 SmtUtils]: Spent 461.00 ms on a formula simplification. DAG size of input: 131 DAG size of output: 47 [2019-11-28 00:14:07,005 WARN L192 SmtUtils]: Spent 168.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:07,499 WARN L192 SmtUtils]: Spent 477.00 ms on a formula simplification. DAG size of input: 133 DAG size of output: 49 [2019-11-28 00:14:07,650 WARN L192 SmtUtils]: Spent 146.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:07,798 WARN L192 SmtUtils]: Spent 146.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:08,503 WARN L192 SmtUtils]: Spent 702.00 ms on a formula simplification. DAG size of input: 148 DAG size of output: 47 [2019-11-28 00:14:08,711 WARN L192 SmtUtils]: Spent 207.00 ms on a formula simplification. DAG size of input: 77 DAG size of output: 33 [2019-11-28 00:14:09,447 WARN L192 SmtUtils]: Spent 727.00 ms on a formula simplification. DAG size of input: 151 DAG size of output: 51 [2019-11-28 00:14:10,105 WARN L192 SmtUtils]: Spent 650.00 ms on a formula simplification. DAG size of input: 146 DAG size of output: 47 [2019-11-28 00:14:10,251 WARN L192 SmtUtils]: Spent 143.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:10,397 WARN L192 SmtUtils]: Spent 144.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:10,543 WARN L192 SmtUtils]: Spent 144.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:11,202 WARN L192 SmtUtils]: Spent 656.00 ms on a formula simplification. DAG size of input: 148 DAG size of output: 47 [2019-11-28 00:14:11,347 WARN L192 SmtUtils]: Spent 142.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:11,493 WARN L192 SmtUtils]: Spent 143.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:11,710 WARN L192 SmtUtils]: Spent 215.00 ms on a formula simplification. DAG size of input: 90 DAG size of output: 36 [2019-11-28 00:14:11,935 WARN L192 SmtUtils]: Spent 223.00 ms on a formula simplification. DAG size of input: 92 DAG size of output: 38 [2019-11-28 00:14:12,080 WARN L192 SmtUtils]: Spent 143.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:12,225 WARN L192 SmtUtils]: Spent 144.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:12,370 WARN L192 SmtUtils]: Spent 142.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:12,516 WARN L192 SmtUtils]: Spent 144.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:12,660 WARN L192 SmtUtils]: Spent 142.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:13,297 WARN L192 SmtUtils]: Spent 635.00 ms on a formula simplification. DAG size of input: 148 DAG size of output: 47 [2019-11-28 00:14:13,442 WARN L192 SmtUtils]: Spent 143.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:13,602 WARN L192 SmtUtils]: Spent 157.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:13,759 WARN L192 SmtUtils]: Spent 145.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:13,902 WARN L192 SmtUtils]: Spent 141.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:14,566 WARN L192 SmtUtils]: Spent 662.00 ms on a formula simplification. DAG size of input: 148 DAG size of output: 47 [2019-11-28 00:14:14,792 WARN L192 SmtUtils]: Spent 130.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 30 [2019-11-28 00:14:15,015 WARN L192 SmtUtils]: Spent 143.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:15,529 WARN L192 SmtUtils]: Spent 434.00 ms on a formula simplification. DAG size of input: 129 DAG size of output: 45 [2019-11-28 00:14:15,660 WARN L192 SmtUtils]: Spent 129.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 30 [2019-11-28 00:14:15,805 WARN L192 SmtUtils]: Spent 143.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:15,935 WARN L192 SmtUtils]: Spent 128.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 30 [2019-11-28 00:14:16,079 WARN L192 SmtUtils]: Spent 142.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:16,244 WARN L192 SmtUtils]: Spent 164.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 30 [2019-11-28 00:14:16,376 WARN L192 SmtUtils]: Spent 129.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:16,530 WARN L192 SmtUtils]: Spent 140.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:16,693 WARN L192 SmtUtils]: Spent 143.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:16,838 WARN L192 SmtUtils]: Spent 143.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:17,560 WARN L192 SmtUtils]: Spent 629.00 ms on a formula simplification. DAG size of input: 148 DAG size of output: 47 [2019-11-28 00:14:17,691 WARN L192 SmtUtils]: Spent 129.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 30 [2019-11-28 00:14:18,205 WARN L192 SmtUtils]: Spent 435.00 ms on a formula simplification. DAG size of input: 129 DAG size of output: 45 [2019-11-28 00:14:18,346 WARN L192 SmtUtils]: Spent 137.00 ms on a formula simplification. DAG size of input: 69 DAG size of output: 29 [2019-11-28 00:14:18,485 WARN L192 SmtUtils]: Spent 134.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 30 [2019-11-28 00:14:18,913 WARN L192 SmtUtils]: Spent 426.00 ms on a formula simplification. DAG size of input: 129 DAG size of output: 45 [2019-11-28 00:14:19,060 WARN L192 SmtUtils]: Spent 144.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:19,206 WARN L192 SmtUtils]: Spent 144.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:19,485 WARN L192 SmtUtils]: Spent 277.00 ms on a formula simplification. DAG size of input: 105 DAG size of output: 45 [2019-11-28 00:14:19,616 WARN L192 SmtUtils]: Spent 129.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 30 [2019-11-28 00:14:20,068 WARN L192 SmtUtils]: Spent 448.00 ms on a formula simplification. DAG size of input: 122 DAG size of output: 44 [2019-11-28 00:14:20,227 WARN L192 SmtUtils]: Spent 158.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:20,719 WARN L192 SmtUtils]: Spent 489.00 ms on a formula simplification. DAG size of input: 130 DAG size of output: 45 [2019-11-28 00:14:20,850 WARN L192 SmtUtils]: Spent 129.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 30 [2019-11-28 00:14:20,995 WARN L192 SmtUtils]: Spent 143.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:21,139 WARN L192 SmtUtils]: Spent 142.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:21,283 WARN L192 SmtUtils]: Spent 142.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:21,961 WARN L192 SmtUtils]: Spent 675.00 ms on a formula simplification. DAG size of input: 148 DAG size of output: 47 [2019-11-28 00:14:22,119 WARN L192 SmtUtils]: Spent 156.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:22,278 WARN L192 SmtUtils]: Spent 155.00 ms on a formula simplification. DAG size of input: 67 DAG size of output: 28 [2019-11-28 00:14:22,431 WARN L192 SmtUtils]: Spent 150.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:22,574 WARN L192 SmtUtils]: Spent 142.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 00:14:22,579 INFO L242 CegarLoopResult]: At program point L2017(lines 2004 2022) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= |ULTIMATE.start_createEmail_#res| 1) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,579 INFO L242 CegarLoopResult]: At program point L2017-1(lines 2004 2022) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,579 INFO L242 CegarLoopResult]: At program point L2017-2(lines 2004 2022) the Hoare annotation is: false [2019-11-28 00:14:22,579 INFO L249 CegarLoopResult]: At program point L2017-3(lines 2004 2022) the Hoare annotation is: true [2019-11-28 00:14:22,580 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 2690) no Hoare annotation was computed. [2019-11-28 00:14:22,580 INFO L246 CegarLoopResult]: For program point L1621(lines 1621 1637) no Hoare annotation was computed. [2019-11-28 00:14:22,580 INFO L246 CegarLoopResult]: For program point L1621-1(lines 1621 1637) no Hoare annotation was computed. [2019-11-28 00:14:22,580 INFO L246 CegarLoopResult]: For program point L1423(lines 1423 1429) no Hoare annotation was computed. [2019-11-28 00:14:22,580 INFO L246 CegarLoopResult]: For program point L1491(lines 1491 1497) no Hoare annotation was computed. [2019-11-28 00:14:22,580 INFO L246 CegarLoopResult]: For program point L1491-1(lines 1491 1497) no Hoare annotation was computed. [2019-11-28 00:14:22,581 INFO L242 CegarLoopResult]: At program point L1293(lines 1273 1297) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 0 ULTIMATE.start_test_~op1~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,582 INFO L242 CegarLoopResult]: At program point L1293-1(lines 1273 1297) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,582 INFO L242 CegarLoopResult]: At program point L1293-2(lines 1273 1297) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,582 INFO L242 CegarLoopResult]: At program point L1293-3(lines 1273 1297) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,582 INFO L242 CegarLoopResult]: At program point L1293-4(lines 1273 1297) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,582 INFO L242 CegarLoopResult]: At program point L171(lines 161 244) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,582 INFO L246 CegarLoopResult]: For program point L1625(lines 1625 1636) no Hoare annotation was computed. [2019-11-28 00:14:22,582 INFO L246 CegarLoopResult]: For program point L1625-1(lines 1625 1636) no Hoare annotation was computed. [2019-11-28 00:14:22,582 INFO L242 CegarLoopResult]: At program point L304(lines 299 307) the Hoare annotation is: (and (= ~__ste_Client_Keyring0_User0~0 ~__ste_Client_Keyring0_User1~0) (= 1 ~queue_empty~0) (not (= ~rjh~0 1)) (= 0 (+ ~mail_is_sensitive~0 1)) (= 0 ~__ste_Client_Keyring0_User0~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1))) [2019-11-28 00:14:22,583 INFO L242 CegarLoopResult]: At program point L2815-1(lines 2800 2825) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,583 INFO L246 CegarLoopResult]: For program point L2815(lines 2815 2821) no Hoare annotation was computed. [2019-11-28 00:14:22,583 INFO L249 CegarLoopResult]: At program point L2815-3(lines 2800 2825) the Hoare annotation is: true [2019-11-28 00:14:22,583 INFO L246 CegarLoopResult]: For program point L2815-2(lines 2815 2821) no Hoare annotation was computed. [2019-11-28 00:14:22,583 INFO L242 CegarLoopResult]: At program point L107(lines 94 249) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,583 INFO L246 CegarLoopResult]: For program point L1629(lines 1629 1635) no Hoare annotation was computed. [2019-11-28 00:14:22,583 INFO L246 CegarLoopResult]: For program point L1629-1(lines 1629 1635) no Hoare annotation was computed. [2019-11-28 00:14:22,583 INFO L246 CegarLoopResult]: For program point L1365(lines 1365 1401) no Hoare annotation was computed. [2019-11-28 00:14:22,583 INFO L246 CegarLoopResult]: For program point L1365-1(lines 1365 1401) no Hoare annotation was computed. [2019-11-28 00:14:22,584 INFO L246 CegarLoopResult]: For program point L1365-2(lines 1365 1401) no Hoare annotation was computed. [2019-11-28 00:14:22,584 INFO L246 CegarLoopResult]: For program point L1365-3(lines 1365 1401) no Hoare annotation was computed. [2019-11-28 00:14:22,584 INFO L246 CegarLoopResult]: For program point L1233(lines 1233 1249) no Hoare annotation was computed. [2019-11-28 00:14:22,584 INFO L246 CegarLoopResult]: For program point L1365-4(lines 1365 1401) no Hoare annotation was computed. [2019-11-28 00:14:22,584 INFO L246 CegarLoopResult]: For program point L1233-1(lines 1233 1249) no Hoare annotation was computed. [2019-11-28 00:14:22,584 INFO L246 CegarLoopResult]: For program point L176(lines 176 183) no Hoare annotation was computed. [2019-11-28 00:14:22,584 INFO L246 CegarLoopResult]: For program point L1233-2(lines 1233 1249) no Hoare annotation was computed. [2019-11-28 00:14:22,584 INFO L246 CegarLoopResult]: For program point L1233-3(lines 1233 1249) no Hoare annotation was computed. [2019-11-28 00:14:22,584 INFO L246 CegarLoopResult]: For program point L1233-4(lines 1233 1249) no Hoare annotation was computed. [2019-11-28 00:14:22,584 INFO L246 CegarLoopResult]: For program point L1432(lines 1432 1463) no Hoare annotation was computed. [2019-11-28 00:14:22,585 INFO L246 CegarLoopResult]: For program point L1366(lines 1366 1374) no Hoare annotation was computed. [2019-11-28 00:14:22,585 INFO L246 CegarLoopResult]: For program point L1366-2(lines 1366 1374) no Hoare annotation was computed. [2019-11-28 00:14:22,585 INFO L246 CegarLoopResult]: For program point L1366-4(lines 1366 1374) no Hoare annotation was computed. [2019-11-28 00:14:22,585 INFO L246 CegarLoopResult]: For program point L1366-6(lines 1366 1374) no Hoare annotation was computed. [2019-11-28 00:14:22,585 INFO L246 CegarLoopResult]: For program point L1366-8(lines 1366 1374) no Hoare annotation was computed. [2019-11-28 00:14:22,585 INFO L246 CegarLoopResult]: For program point L2027(lines 2027 2035) no Hoare annotation was computed. [2019-11-28 00:14:22,585 INFO L246 CegarLoopResult]: For program point L1433(lines 1433 1444) no Hoare annotation was computed. [2019-11-28 00:14:22,585 INFO L246 CegarLoopResult]: For program point L2160(lines 2160 2171) no Hoare annotation was computed. [2019-11-28 00:14:22,585 INFO L246 CegarLoopResult]: For program point L112(lines 112 116) no Hoare annotation was computed. [2019-11-28 00:14:22,585 INFO L246 CegarLoopResult]: For program point L2160-1(lines 2160 2171) no Hoare annotation was computed. [2019-11-28 00:14:22,585 INFO L246 CegarLoopResult]: For program point L1500(lines 1500 1516) no Hoare annotation was computed. [2019-11-28 00:14:22,586 INFO L246 CegarLoopResult]: For program point L1500-1(lines 1500 1516) no Hoare annotation was computed. [2019-11-28 00:14:22,586 INFO L246 CegarLoopResult]: For program point L2690(line 2690) no Hoare annotation was computed. [2019-11-28 00:14:22,586 INFO L246 CegarLoopResult]: For program point L2690-1(line 2690) no Hoare annotation was computed. [2019-11-28 00:14:22,586 INFO L246 CegarLoopResult]: For program point L1501(lines 1501 1512) no Hoare annotation was computed. [2019-11-28 00:14:22,586 INFO L246 CegarLoopResult]: For program point L1501-1(lines 1501 1512) no Hoare annotation was computed. [2019-11-28 00:14:22,586 INFO L246 CegarLoopResult]: For program point L1369(lines 1369 1373) no Hoare annotation was computed. [2019-11-28 00:14:22,586 INFO L246 CegarLoopResult]: For program point L1369-3(lines 1369 1373) no Hoare annotation was computed. [2019-11-28 00:14:22,586 INFO L246 CegarLoopResult]: For program point L1237(lines 1237 1248) no Hoare annotation was computed. [2019-11-28 00:14:22,586 INFO L246 CegarLoopResult]: For program point L1237-1(lines 1237 1248) no Hoare annotation was computed. [2019-11-28 00:14:22,586 INFO L246 CegarLoopResult]: For program point L1237-2(lines 1237 1248) no Hoare annotation was computed. [2019-11-28 00:14:22,586 INFO L246 CegarLoopResult]: For program point L1369-6(lines 1369 1373) no Hoare annotation was computed. [2019-11-28 00:14:22,586 INFO L246 CegarLoopResult]: For program point L1237-3(lines 1237 1248) no Hoare annotation was computed. [2019-11-28 00:14:22,587 INFO L246 CegarLoopResult]: For program point L1237-4(lines 1237 1248) no Hoare annotation was computed. [2019-11-28 00:14:22,587 INFO L246 CegarLoopResult]: For program point L1369-9(lines 1369 1373) no Hoare annotation was computed. [2019-11-28 00:14:22,587 INFO L246 CegarLoopResult]: For program point L2030(lines 2030 2034) no Hoare annotation was computed. [2019-11-28 00:14:22,587 INFO L246 CegarLoopResult]: For program point L1369-12(lines 1369 1373) no Hoare annotation was computed. [2019-11-28 00:14:22,587 INFO L242 CegarLoopResult]: At program point L2030-2(lines 2023 2038) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_email_to0~0 2) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,587 INFO L242 CegarLoopResult]: At program point L1634(lines 1617 1640) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= |ULTIMATE.start_createEmail_#res| 1) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,587 INFO L242 CegarLoopResult]: At program point L1634-1(lines 1617 1640) the Hoare annotation is: false [2019-11-28 00:14:22,587 INFO L246 CegarLoopResult]: For program point L1767(lines 1767 1789) no Hoare annotation was computed. [2019-11-28 00:14:22,588 INFO L242 CegarLoopResult]: At program point L1767-1(lines 1767 1789) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= ULTIMATE.start_getClientPrivateKey_~handle 2) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,588 INFO L246 CegarLoopResult]: For program point L1767-2(lines 1767 1789) no Hoare annotation was computed. [2019-11-28 00:14:22,588 INFO L249 CegarLoopResult]: At program point L1767-3(lines 1767 1789) the Hoare annotation is: true [2019-11-28 00:14:22,588 INFO L246 CegarLoopResult]: For program point L1437(lines 1437 1443) no Hoare annotation was computed. [2019-11-28 00:14:22,588 INFO L246 CegarLoopResult]: For program point L2164(lines 2164 2170) no Hoare annotation was computed. [2019-11-28 00:14:22,588 INFO L246 CegarLoopResult]: For program point L2164-1(lines 2164 2170) no Hoare annotation was computed. [2019-11-28 00:14:22,588 INFO L246 CegarLoopResult]: For program point L1505(lines 1505 1511) no Hoare annotation was computed. [2019-11-28 00:14:22,588 INFO L246 CegarLoopResult]: For program point L1505-1(lines 1505 1511) no Hoare annotation was computed. [2019-11-28 00:14:22,588 INFO L246 CegarLoopResult]: For program point L1241(lines 1241 1247) no Hoare annotation was computed. [2019-11-28 00:14:22,588 INFO L246 CegarLoopResult]: For program point L1241-1(lines 1241 1247) no Hoare annotation was computed. [2019-11-28 00:14:22,588 INFO L246 CegarLoopResult]: For program point L1241-2(lines 1241 1247) no Hoare annotation was computed. [2019-11-28 00:14:22,589 INFO L242 CegarLoopResult]: At program point L118(lines 108 248) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,589 INFO L246 CegarLoopResult]: For program point L1241-3(lines 1241 1247) no Hoare annotation was computed. [2019-11-28 00:14:22,589 INFO L246 CegarLoopResult]: For program point L1241-4(lines 1241 1247) no Hoare annotation was computed. [2019-11-28 00:14:22,589 INFO L242 CegarLoopResult]: At program point L251(lines 85 252) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,589 INFO L242 CegarLoopResult]: At program point L185(lines 172 243) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,589 INFO L246 CegarLoopResult]: For program point L1771(lines 1771 1786) no Hoare annotation was computed. [2019-11-28 00:14:22,589 INFO L246 CegarLoopResult]: For program point L1771-2(lines 1771 1786) no Hoare annotation was computed. [2019-11-28 00:14:22,589 INFO L246 CegarLoopResult]: For program point L1376(lines 1376 1400) no Hoare annotation was computed. [2019-11-28 00:14:22,589 INFO L246 CegarLoopResult]: For program point L1376-1(lines 1376 1400) no Hoare annotation was computed. [2019-11-28 00:14:22,590 INFO L246 CegarLoopResult]: For program point L1376-2(lines 1376 1400) no Hoare annotation was computed. [2019-11-28 00:14:22,590 INFO L246 CegarLoopResult]: For program point L1376-3(lines 1376 1400) no Hoare annotation was computed. [2019-11-28 00:14:22,590 INFO L246 CegarLoopResult]: For program point L1376-4(lines 1376 1400) no Hoare annotation was computed. [2019-11-28 00:14:22,590 INFO L249 CegarLoopResult]: At program point L2169-1(lines 2156 2174) the Hoare annotation is: true [2019-11-28 00:14:22,590 INFO L242 CegarLoopResult]: At program point L2169(lines 2156 2174) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= ULTIMATE.start_getClientPrivateKey_~handle 2) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,590 INFO L242 CegarLoopResult]: At program point L1839(lines 1834 1842) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= ULTIMATE.start_getClientPrivateKey_~handle 2) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (not (= 0 |ULTIMATE.start_is_queue_empty_#res|)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,590 INFO L242 CegarLoopResult]: At program point L452(lines 432 454) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientPrivateKey_~handle 2)) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_client_privateKey1~0 456) (= ~__ste_Client_Keyring0_User0~0 ~__ste_Client_Keyring0_User1~0) (not (= 2 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= 0 ~__ste_Client_Keyring0_User0~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,590 INFO L246 CegarLoopResult]: For program point L1377(lines 1377 1385) no Hoare annotation was computed. [2019-11-28 00:14:22,590 INFO L246 CegarLoopResult]: For program point L1311(lines 1311 1357) no Hoare annotation was computed. [2019-11-28 00:14:22,591 INFO L246 CegarLoopResult]: For program point L1377-2(lines 1377 1385) no Hoare annotation was computed. [2019-11-28 00:14:22,591 INFO L246 CegarLoopResult]: For program point L1377-4(lines 1377 1385) no Hoare annotation was computed. [2019-11-28 00:14:22,591 INFO L246 CegarLoopResult]: For program point L1377-6(lines 1377 1385) no Hoare annotation was computed. [2019-11-28 00:14:22,591 INFO L246 CegarLoopResult]: For program point L1377-8(lines 1377 1385) no Hoare annotation was computed. [2019-11-28 00:14:22,591 INFO L246 CegarLoopResult]: For program point L1312(lines 1312 1323) no Hoare annotation was computed. [2019-11-28 00:14:22,591 INFO L242 CegarLoopResult]: At program point L1246(lines 1229 1252) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 0 ULTIMATE.start_test_~op1~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,591 INFO L242 CegarLoopResult]: At program point L1246-1(lines 1229 1252) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,591 INFO L242 CegarLoopResult]: At program point L1246-2(lines 1229 1252) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,591 INFO L246 CegarLoopResult]: For program point L123(lines 123 130) no Hoare annotation was computed. [2019-11-28 00:14:22,592 INFO L242 CegarLoopResult]: At program point L1246-3(lines 1229 1252) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,592 INFO L242 CegarLoopResult]: At program point L1246-4(lines 1229 1252) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,592 INFO L246 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2019-11-28 00:14:22,592 INFO L246 CegarLoopResult]: For program point L190(lines 190 194) no Hoare annotation was computed. [2019-11-28 00:14:22,592 INFO L246 CegarLoopResult]: For program point L1776(lines 1776 1783) no Hoare annotation was computed. [2019-11-28 00:14:22,592 INFO L246 CegarLoopResult]: For program point L1776-2(lines 1776 1783) no Hoare annotation was computed. [2019-11-28 00:14:22,592 INFO L246 CegarLoopResult]: For program point L1446(lines 1446 1462) no Hoare annotation was computed. [2019-11-28 00:14:22,592 INFO L246 CegarLoopResult]: For program point L1380(lines 1380 1384) no Hoare annotation was computed. [2019-11-28 00:14:22,593 INFO L246 CegarLoopResult]: For program point L1380-3(lines 1380 1384) no Hoare annotation was computed. [2019-11-28 00:14:22,593 INFO L246 CegarLoopResult]: For program point L1380-6(lines 1380 1384) no Hoare annotation was computed. [2019-11-28 00:14:22,593 INFO L246 CegarLoopResult]: For program point L1380-9(lines 1380 1384) no Hoare annotation was computed. [2019-11-28 00:14:22,593 INFO L246 CegarLoopResult]: For program point L1380-12(lines 1380 1384) no Hoare annotation was computed. [2019-11-28 00:14:22,593 INFO L246 CegarLoopResult]: For program point L1645(lines 1645 1657) no Hoare annotation was computed. [2019-11-28 00:14:22,593 INFO L246 CegarLoopResult]: For program point L1645-2(lines 1645 1657) no Hoare annotation was computed. [2019-11-28 00:14:22,594 INFO L246 CegarLoopResult]: For program point L1645-4(lines 1645 1657) no Hoare annotation was computed. [2019-11-28 00:14:22,594 INFO L246 CegarLoopResult]: For program point L1447(lines 1447 1458) no Hoare annotation was computed. [2019-11-28 00:14:22,594 INFO L246 CegarLoopResult]: For program point L1316(lines 1316 1322) no Hoare annotation was computed. [2019-11-28 00:14:22,594 INFO L242 CegarLoopResult]: At program point L1515(lines 1468 1521) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,594 INFO L242 CegarLoopResult]: At program point L1515-1(lines 1468 1521) the Hoare annotation is: false [2019-11-28 00:14:22,595 INFO L246 CegarLoopResult]: For program point L1648(lines 1648 1656) no Hoare annotation was computed. [2019-11-28 00:14:22,595 INFO L246 CegarLoopResult]: For program point L1648-2(lines 1648 1656) no Hoare annotation was computed. [2019-11-28 00:14:22,595 INFO L246 CegarLoopResult]: For program point L1648-4(lines 1648 1656) no Hoare annotation was computed. [2019-11-28 00:14:22,595 INFO L246 CegarLoopResult]: For program point L1186(lines 1186 1202) no Hoare annotation was computed. [2019-11-28 00:14:22,595 INFO L246 CegarLoopResult]: For program point L1186-1(lines 1186 1202) no Hoare annotation was computed. [2019-11-28 00:14:22,596 INFO L246 CegarLoopResult]: For program point L1451(lines 1451 1457) no Hoare annotation was computed. [2019-11-28 00:14:22,596 INFO L242 CegarLoopResult]: At program point L196(lines 186 242) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,596 INFO L242 CegarLoopResult]: At program point L1848(lines 1843 1851) the Hoare annotation is: false [2019-11-28 00:14:22,596 INFO L246 CegarLoopResult]: For program point L2179(lines 2179 2187) no Hoare annotation was computed. [2019-11-28 00:14:22,596 INFO L246 CegarLoopResult]: For program point L2179-2(lines 2179 2187) no Hoare annotation was computed. [2019-11-28 00:14:22,597 INFO L246 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2019-11-28 00:14:22,597 INFO L246 CegarLoopResult]: For program point L2179-4(lines 2179 2187) no Hoare annotation was computed. [2019-11-28 00:14:22,597 INFO L246 CegarLoopResult]: For program point L2179-6(lines 2179 2187) no Hoare annotation was computed. [2019-11-28 00:14:22,597 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 2690) no Hoare annotation was computed. [2019-11-28 00:14:22,597 INFO L246 CegarLoopResult]: For program point L1651(lines 1651 1655) no Hoare annotation was computed. [2019-11-28 00:14:22,598 INFO L242 CegarLoopResult]: At program point L1651-2(lines 1 2825) the Hoare annotation is: (and (= ~__ste_Client_Keyring0_User0~0 ~__ste_Client_Keyring0_User1~0) (= 1 ~queue_empty~0) (not (= ~rjh~0 1)) (not (= ULTIMATE.start_setClientId_~handle 2)) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= 0 ~__ste_Client_Keyring0_User0~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1))) [2019-11-28 00:14:22,598 INFO L246 CegarLoopResult]: For program point L1651-3(lines 1651 1655) no Hoare annotation was computed. [2019-11-28 00:14:22,598 INFO L242 CegarLoopResult]: At program point L1651-5(lines 1 2825) the Hoare annotation is: (and (= ~__ste_Client_Keyring0_User0~0 ~__ste_Client_Keyring0_User1~0) (= 1 ~queue_empty~0) (= ULTIMATE.start_setClientId_~handle 2) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_rjh_~rjh___0) (= 0 ~__ste_Client_Keyring0_User0~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (= ~rjh~0 2)) [2019-11-28 00:14:22,598 INFO L246 CegarLoopResult]: For program point L1651-6(lines 1651 1655) no Hoare annotation was computed. [2019-11-28 00:14:22,598 INFO L242 CegarLoopResult]: At program point L1651-8(lines 1 2825) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= 456 ULTIMATE.start_setClientPrivateKey_~value) (= ULTIMATE.start_setClientPrivateKey_~handle 2) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_client_privateKey1~0 456) (= ~__ste_Client_Keyring0_User0~0 ~__ste_Client_Keyring0_User1~0) (not (= 2 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= 0 ~__ste_Client_Keyring0_User0~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,599 INFO L246 CegarLoopResult]: For program point L1387(lines 1387 1399) no Hoare annotation was computed. [2019-11-28 00:14:22,599 INFO L242 CegarLoopResult]: At program point L1387-1(lines 1361 1404) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 0 ULTIMATE.start_test_~op1~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,599 INFO L246 CegarLoopResult]: For program point L1387-2(lines 1387 1399) no Hoare annotation was computed. [2019-11-28 00:14:22,599 INFO L242 CegarLoopResult]: At program point L1387-3(lines 1361 1404) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,600 INFO L246 CegarLoopResult]: For program point L1387-4(lines 1387 1399) no Hoare annotation was computed. [2019-11-28 00:14:22,600 INFO L242 CegarLoopResult]: At program point L1387-5(lines 1361 1404) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,600 INFO L246 CegarLoopResult]: For program point L1387-6(lines 1387 1399) no Hoare annotation was computed. [2019-11-28 00:14:22,600 INFO L242 CegarLoopResult]: At program point L132(lines 119 247) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,600 INFO L242 CegarLoopResult]: At program point L1387-7(lines 1361 1404) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,601 INFO L246 CegarLoopResult]: For program point L1387-8(lines 1387 1399) no Hoare annotation was computed. [2019-11-28 00:14:22,601 INFO L242 CegarLoopResult]: At program point L1387-9(lines 1361 1404) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,601 INFO L246 CegarLoopResult]: For program point L1388(lines 1388 1396) no Hoare annotation was computed. [2019-11-28 00:14:22,601 INFO L246 CegarLoopResult]: For program point L1388-2(lines 1388 1396) no Hoare annotation was computed. [2019-11-28 00:14:22,601 INFO L246 CegarLoopResult]: For program point L1388-4(lines 1388 1396) no Hoare annotation was computed. [2019-11-28 00:14:22,602 INFO L246 CegarLoopResult]: For program point L1388-6(lines 1388 1396) no Hoare annotation was computed. [2019-11-28 00:14:22,602 INFO L246 CegarLoopResult]: For program point L1190(lines 1190 1201) no Hoare annotation was computed. [2019-11-28 00:14:22,602 INFO L246 CegarLoopResult]: For program point L1190-1(lines 1190 1201) no Hoare annotation was computed. [2019-11-28 00:14:22,602 INFO L246 CegarLoopResult]: For program point L1388-8(lines 1388 1396) no Hoare annotation was computed. [2019-11-28 00:14:22,602 INFO L246 CegarLoopResult]: For program point L1257(lines 1257 1269) no Hoare annotation was computed. [2019-11-28 00:14:22,602 INFO L246 CegarLoopResult]: For program point L1257-2(lines 1257 1269) no Hoare annotation was computed. [2019-11-28 00:14:22,603 INFO L246 CegarLoopResult]: For program point L2182(lines 2182 2186) no Hoare annotation was computed. [2019-11-28 00:14:22,603 INFO L246 CegarLoopResult]: For program point L1257-4(lines 1257 1269) no Hoare annotation was computed. [2019-11-28 00:14:22,603 INFO L242 CegarLoopResult]: At program point L2182-2(lines 2175 2190) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,603 INFO L246 CegarLoopResult]: For program point L1257-6(lines 1257 1269) no Hoare annotation was computed. [2019-11-28 00:14:22,603 INFO L246 CegarLoopResult]: For program point L2182-3(lines 2182 2186) no Hoare annotation was computed. [2019-11-28 00:14:22,604 INFO L246 CegarLoopResult]: For program point L1257-8(lines 1257 1269) no Hoare annotation was computed. [2019-11-28 00:14:22,604 INFO L246 CegarLoopResult]: For program point L2182-6(lines 2182 2186) no Hoare annotation was computed. [2019-11-28 00:14:22,604 INFO L242 CegarLoopResult]: At program point L2182-8(lines 2175 2190) the Hoare annotation is: false [2019-11-28 00:14:22,604 INFO L246 CegarLoopResult]: For program point L2182-9(lines 2182 2186) no Hoare annotation was computed. [2019-11-28 00:14:22,604 INFO L246 CegarLoopResult]: For program point L465(lines 465 472) no Hoare annotation was computed. [2019-11-28 00:14:22,604 INFO L249 CegarLoopResult]: At program point L465-1(lines 465 472) the Hoare annotation is: true [2019-11-28 00:14:22,605 INFO L246 CegarLoopResult]: For program point L201(lines 201 208) no Hoare annotation was computed. [2019-11-28 00:14:22,605 INFO L246 CegarLoopResult]: For program point L1721(lines 1721 1728) no Hoare annotation was computed. [2019-11-28 00:14:22,605 INFO L242 CegarLoopResult]: At program point L1721-1(lines 1721 1728) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,605 INFO L246 CegarLoopResult]: For program point L1721-2(lines 1721 1728) no Hoare annotation was computed. [2019-11-28 00:14:22,605 INFO L242 CegarLoopResult]: At program point L1721-3(lines 1721 1728) the Hoare annotation is: false [2019-11-28 00:14:22,606 INFO L246 CegarLoopResult]: For program point L1391(lines 1391 1395) no Hoare annotation was computed. [2019-11-28 00:14:22,606 INFO L246 CegarLoopResult]: For program point L1325(lines 1325 1356) no Hoare annotation was computed. [2019-11-28 00:14:22,606 INFO L246 CegarLoopResult]: For program point L1391-3(lines 1391 1395) no Hoare annotation was computed. [2019-11-28 00:14:22,606 INFO L246 CegarLoopResult]: For program point L1391-6(lines 1391 1395) no Hoare annotation was computed. [2019-11-28 00:14:22,606 INFO L246 CegarLoopResult]: For program point L1391-9(lines 1391 1395) no Hoare annotation was computed. [2019-11-28 00:14:22,606 INFO L246 CegarLoopResult]: For program point L1391-12(lines 1391 1395) no Hoare annotation was computed. [2019-11-28 00:14:22,607 INFO L246 CegarLoopResult]: For program point L1326(lines 1326 1337) no Hoare annotation was computed. [2019-11-28 00:14:22,607 INFO L246 CegarLoopResult]: For program point L1260(lines 1260 1268) no Hoare annotation was computed. [2019-11-28 00:14:22,607 INFO L246 CegarLoopResult]: For program point L1260-2(lines 1260 1268) no Hoare annotation was computed. [2019-11-28 00:14:22,607 INFO L246 CegarLoopResult]: For program point L1194(lines 1194 1200) no Hoare annotation was computed. [2019-11-28 00:14:22,607 INFO L246 CegarLoopResult]: For program point L137(lines 137 144) no Hoare annotation was computed. [2019-11-28 00:14:22,608 INFO L246 CegarLoopResult]: For program point L1194-1(lines 1194 1200) no Hoare annotation was computed. [2019-11-28 00:14:22,608 INFO L246 CegarLoopResult]: For program point L1260-4(lines 1260 1268) no Hoare annotation was computed. [2019-11-28 00:14:22,608 INFO L246 CegarLoopResult]: For program point L1260-6(lines 1260 1268) no Hoare annotation was computed. [2019-11-28 00:14:22,608 INFO L246 CegarLoopResult]: For program point L1260-8(lines 1260 1268) no Hoare annotation was computed. [2019-11-28 00:14:22,608 INFO L246 CegarLoopResult]: For program point L1526(lines 1526 1562) no Hoare annotation was computed. [2019-11-28 00:14:22,608 INFO L246 CegarLoopResult]: For program point L1526-1(lines 1526 1562) no Hoare annotation was computed. [2019-11-28 00:14:22,608 INFO L246 CegarLoopResult]: For program point L1526-2(lines 1526 1562) no Hoare annotation was computed. [2019-11-28 00:14:22,609 INFO L246 CegarLoopResult]: For program point L1526-3(lines 1526 1562) no Hoare annotation was computed. [2019-11-28 00:14:22,609 INFO L246 CegarLoopResult]: For program point L1526-4(lines 1526 1562) no Hoare annotation was computed. [2019-11-28 00:14:22,609 INFO L242 CegarLoopResult]: At program point L1857(lines 1852 1860) the Hoare annotation is: false [2019-11-28 00:14:22,609 INFO L246 CegarLoopResult]: For program point L1527(lines 1527 1535) no Hoare annotation was computed. [2019-11-28 00:14:22,609 INFO L242 CegarLoopResult]: At program point L1461(lines 1414 1467) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 0 ULTIMATE.start_test_~op1~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,610 INFO L246 CegarLoopResult]: For program point L1527-2(lines 1527 1535) no Hoare annotation was computed. [2019-11-28 00:14:22,610 INFO L246 CegarLoopResult]: For program point L1527-4(lines 1527 1535) no Hoare annotation was computed. [2019-11-28 00:14:22,610 INFO L246 CegarLoopResult]: For program point L1527-6(lines 1527 1535) no Hoare annotation was computed. [2019-11-28 00:14:22,610 INFO L246 CegarLoopResult]: For program point L1263(lines 1263 1267) no Hoare annotation was computed. [2019-11-28 00:14:22,610 INFO L246 CegarLoopResult]: For program point L1527-8(lines 1527 1535) no Hoare annotation was computed. [2019-11-28 00:14:22,610 INFO L242 CegarLoopResult]: At program point L1263-2(lines 1253 1272) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 0 ULTIMATE.start_test_~op1~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,611 INFO L246 CegarLoopResult]: For program point L1263-3(lines 1263 1267) no Hoare annotation was computed. [2019-11-28 00:14:22,611 INFO L242 CegarLoopResult]: At program point L1263-5(lines 1253 1272) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,611 INFO L246 CegarLoopResult]: For program point L1263-6(lines 1263 1267) no Hoare annotation was computed. [2019-11-28 00:14:22,611 INFO L242 CegarLoopResult]: At program point L1263-8(lines 1253 1272) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,611 INFO L246 CegarLoopResult]: For program point L1263-9(lines 1263 1267) no Hoare annotation was computed. [2019-11-28 00:14:22,612 INFO L246 CegarLoopResult]: For program point L1990(lines 1990 1998) no Hoare annotation was computed. [2019-11-28 00:14:22,612 INFO L242 CegarLoopResult]: At program point L1263-11(lines 1253 1272) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,612 INFO L246 CegarLoopResult]: For program point L1990-2(lines 1990 1998) no Hoare annotation was computed. [2019-11-28 00:14:22,612 INFO L246 CegarLoopResult]: For program point L1263-12(lines 1263 1267) no Hoare annotation was computed. [2019-11-28 00:14:22,612 INFO L246 CegarLoopResult]: For program point L1990-4(lines 1990 1998) no Hoare annotation was computed. [2019-11-28 00:14:22,613 INFO L242 CegarLoopResult]: At program point L1263-14(lines 1253 1272) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,613 INFO L246 CegarLoopResult]: For program point L1330(lines 1330 1336) no Hoare annotation was computed. [2019-11-28 00:14:22,613 INFO L246 CegarLoopResult]: For program point L2123-1(lines 2123 2134) no Hoare annotation was computed. [2019-11-28 00:14:22,613 INFO L246 CegarLoopResult]: For program point L2123(lines 2123 2134) no Hoare annotation was computed. [2019-11-28 00:14:22,613 INFO L246 CegarLoopResult]: For program point L2123-3(lines 2123 2134) no Hoare annotation was computed. [2019-11-28 00:14:22,613 INFO L246 CegarLoopResult]: For program point L2123-2(lines 2123 2134) no Hoare annotation was computed. [2019-11-28 00:14:22,614 INFO L246 CegarLoopResult]: For program point L2123-5(lines 2123 2134) no Hoare annotation was computed. [2019-11-28 00:14:22,614 INFO L246 CegarLoopResult]: For program point L2123-4(lines 2123 2134) no Hoare annotation was computed. [2019-11-28 00:14:22,614 INFO L242 CegarLoopResult]: At program point L1199(lines 1182 1205) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= ULTIMATE.start_getClientPrivateKey_~handle 2) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,614 INFO L249 CegarLoopResult]: At program point L1199-1(lines 1182 1205) the Hoare annotation is: true [2019-11-28 00:14:22,614 INFO L246 CegarLoopResult]: For program point L1530(lines 1530 1534) no Hoare annotation was computed. [2019-11-28 00:14:22,615 INFO L249 CegarLoopResult]: At program point L473(lines 455 475) the Hoare annotation is: true [2019-11-28 00:14:22,615 INFO L246 CegarLoopResult]: For program point L1530-3(lines 1530 1534) no Hoare annotation was computed. [2019-11-28 00:14:22,615 INFO L246 CegarLoopResult]: For program point L1530-6(lines 1530 1534) no Hoare annotation was computed. [2019-11-28 00:14:22,615 INFO L246 CegarLoopResult]: For program point L1530-9(lines 1530 1534) no Hoare annotation was computed. [2019-11-28 00:14:22,615 INFO L246 CegarLoopResult]: For program point L1530-12(lines 1530 1534) no Hoare annotation was computed. [2019-11-28 00:14:22,615 INFO L246 CegarLoopResult]: For program point L1993(lines 1993 1997) no Hoare annotation was computed. [2019-11-28 00:14:22,616 INFO L242 CegarLoopResult]: At program point L1993-2(lines 1986 2001) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (= 1 ULTIMATE.start_createEmail_~msg~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,616 INFO L246 CegarLoopResult]: For program point L1993-3(lines 1993 1997) no Hoare annotation was computed. [2019-11-28 00:14:22,616 INFO L242 CegarLoopResult]: At program point L1993-5(lines 1986 2001) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= |ULTIMATE.start_createEmail_#res| 1) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,616 INFO L246 CegarLoopResult]: For program point L1993-6(lines 1993 1997) no Hoare annotation was computed. [2019-11-28 00:14:22,616 INFO L242 CegarLoopResult]: At program point L1993-8(lines 1986 2001) the Hoare annotation is: false [2019-11-28 00:14:22,617 INFO L242 CegarLoopResult]: At program point L210(lines 197 241) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,617 INFO L246 CegarLoopResult]: For program point L409(lines 409 417) no Hoare annotation was computed. [2019-11-28 00:14:22,617 INFO L246 CegarLoopResult]: For program point L2127-1(lines 2127 2133) no Hoare annotation was computed. [2019-11-28 00:14:22,617 INFO L246 CegarLoopResult]: For program point L2127(lines 2127 2133) no Hoare annotation was computed. [2019-11-28 00:14:22,617 INFO L246 CegarLoopResult]: For program point L2127-3(lines 2127 2133) no Hoare annotation was computed. [2019-11-28 00:14:22,617 INFO L246 CegarLoopResult]: For program point L2127-2(lines 2127 2133) no Hoare annotation was computed. [2019-11-28 00:14:22,618 INFO L246 CegarLoopResult]: For program point L2127-5(lines 2127 2133) no Hoare annotation was computed. [2019-11-28 00:14:22,618 INFO L246 CegarLoopResult]: For program point L2127-4(lines 2127 2133) no Hoare annotation was computed. [2019-11-28 00:14:22,618 INFO L242 CegarLoopResult]: At program point L146(lines 133 246) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,618 INFO L246 CegarLoopResult]: For program point L215(lines 215 222) no Hoare annotation was computed. [2019-11-28 00:14:22,618 INFO L246 CegarLoopResult]: For program point L1537(lines 1537 1561) no Hoare annotation was computed. [2019-11-28 00:14:22,619 INFO L246 CegarLoopResult]: For program point L1537-1(lines 1537 1561) no Hoare annotation was computed. [2019-11-28 00:14:22,619 INFO L246 CegarLoopResult]: For program point L1537-2(lines 1537 1561) no Hoare annotation was computed. [2019-11-28 00:14:22,619 INFO L246 CegarLoopResult]: For program point L1537-3(lines 1537 1561) no Hoare annotation was computed. [2019-11-28 00:14:22,619 INFO L246 CegarLoopResult]: For program point L1537-4(lines 1537 1561) no Hoare annotation was computed. [2019-11-28 00:14:22,619 INFO L246 CegarLoopResult]: For program point L1339(lines 1339 1355) no Hoare annotation was computed. [2019-11-28 00:14:22,620 INFO L242 CegarLoopResult]: At program point L2132(lines 2119 2137) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= |ULTIMATE.start_createEmail_#res| 1) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,620 INFO L242 CegarLoopResult]: At program point L2132-2(lines 2119 2137) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= ULTIMATE.start_getClientPrivateKey_~handle 2) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,620 INFO L242 CegarLoopResult]: At program point L2132-1(lines 2119 2137) the Hoare annotation is: false [2019-11-28 00:14:22,620 INFO L242 CegarLoopResult]: At program point L2132-4(lines 2119 2137) the Hoare annotation is: false [2019-11-28 00:14:22,621 INFO L249 CegarLoopResult]: At program point L2132-3(lines 2119 2137) the Hoare annotation is: true [2019-11-28 00:14:22,621 INFO L249 CegarLoopResult]: At program point L2132-5(lines 2119 2137) the Hoare annotation is: true [2019-11-28 00:14:22,621 INFO L246 CegarLoopResult]: For program point L1538(lines 1538 1546) no Hoare annotation was computed. [2019-11-28 00:14:22,621 INFO L246 CegarLoopResult]: For program point L1538-2(lines 1538 1546) no Hoare annotation was computed. [2019-11-28 00:14:22,621 INFO L246 CegarLoopResult]: For program point L1472(lines 1472 1518) no Hoare annotation was computed. [2019-11-28 00:14:22,621 INFO L246 CegarLoopResult]: For program point L1472-1(lines 1472 1518) no Hoare annotation was computed. [2019-11-28 00:14:22,622 INFO L246 CegarLoopResult]: For program point L1538-4(lines 1538 1546) no Hoare annotation was computed. [2019-11-28 00:14:22,622 INFO L246 CegarLoopResult]: For program point L1340(lines 1340 1351) no Hoare annotation was computed. [2019-11-28 00:14:22,622 INFO L246 CegarLoopResult]: For program point L1538-6(lines 1538 1546) no Hoare annotation was computed. [2019-11-28 00:14:22,622 INFO L246 CegarLoopResult]: For program point L1538-8(lines 1538 1546) no Hoare annotation was computed. [2019-11-28 00:14:22,622 INFO L246 CegarLoopResult]: For program point L151(lines 151 158) no Hoare annotation was computed. [2019-11-28 00:14:22,622 INFO L242 CegarLoopResult]: At program point L2794(lines 2783 2797) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_email_to0~0 2) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,623 INFO L246 CegarLoopResult]: For program point L1473(lines 1473 1484) no Hoare annotation was computed. [2019-11-28 00:14:22,623 INFO L246 CegarLoopResult]: For program point L1473-1(lines 1473 1484) no Hoare annotation was computed. [2019-11-28 00:14:22,623 INFO L246 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2019-11-28 00:14:22,623 INFO L246 CegarLoopResult]: For program point L1870(lines 1870 1880) no Hoare annotation was computed. [2019-11-28 00:14:22,623 INFO L246 CegarLoopResult]: For program point L1870-1(lines 1870 1880) no Hoare annotation was computed. [2019-11-28 00:14:22,623 INFO L246 CegarLoopResult]: For program point L1210(lines 1210 1222) no Hoare annotation was computed. [2019-11-28 00:14:22,624 INFO L246 CegarLoopResult]: For program point L1210-2(lines 1210 1222) no Hoare annotation was computed. [2019-11-28 00:14:22,624 INFO L246 CegarLoopResult]: For program point L87(lines 86 250) no Hoare annotation was computed. [2019-11-28 00:14:22,624 INFO L246 CegarLoopResult]: For program point L1210-4(lines 1210 1222) no Hoare annotation was computed. [2019-11-28 00:14:22,624 INFO L246 CegarLoopResult]: For program point L1210-6(lines 1210 1222) no Hoare annotation was computed. [2019-11-28 00:14:22,624 INFO L246 CegarLoopResult]: For program point L1210-8(lines 1210 1222) no Hoare annotation was computed. [2019-11-28 00:14:22,624 INFO L246 CegarLoopResult]: For program point L1210-10(lines 1210 1222) no Hoare annotation was computed. [2019-11-28 00:14:22,625 INFO L246 CegarLoopResult]: For program point L1541(lines 1541 1545) no Hoare annotation was computed. [2019-11-28 00:14:22,625 INFO L246 CegarLoopResult]: For program point L1541-3(lines 1541 1545) no Hoare annotation was computed. [2019-11-28 00:14:22,625 INFO L246 CegarLoopResult]: For program point L1541-6(lines 1541 1545) no Hoare annotation was computed. [2019-11-28 00:14:22,625 INFO L246 CegarLoopResult]: For program point L1541-9(lines 1541 1545) no Hoare annotation was computed. [2019-11-28 00:14:22,625 INFO L246 CegarLoopResult]: For program point L1541-12(lines 1541 1545) no Hoare annotation was computed. [2019-11-28 00:14:22,625 INFO L246 CegarLoopResult]: For program point L88(lines 88 92) no Hoare annotation was computed. [2019-11-28 00:14:22,625 INFO L246 CegarLoopResult]: For program point L1344(lines 1344 1350) no Hoare annotation was computed. [2019-11-28 00:14:22,626 INFO L246 CegarLoopResult]: For program point L1477(lines 1477 1483) no Hoare annotation was computed. [2019-11-28 00:14:22,626 INFO L246 CegarLoopResult]: For program point L1477-1(lines 1477 1483) no Hoare annotation was computed. [2019-11-28 00:14:22,626 INFO L246 CegarLoopResult]: For program point L1213(lines 1213 1221) no Hoare annotation was computed. [2019-11-28 00:14:22,626 INFO L246 CegarLoopResult]: For program point L1213-2(lines 1213 1221) no Hoare annotation was computed. [2019-11-28 00:14:22,626 INFO L246 CegarLoopResult]: For program point L1213-4(lines 1213 1221) no Hoare annotation was computed. [2019-11-28 00:14:22,626 INFO L246 CegarLoopResult]: For program point L1213-6(lines 1213 1221) no Hoare annotation was computed. [2019-11-28 00:14:22,627 INFO L246 CegarLoopResult]: For program point L1213-8(lines 1213 1221) no Hoare annotation was computed. [2019-11-28 00:14:22,627 INFO L246 CegarLoopResult]: For program point L1213-10(lines 1213 1221) no Hoare annotation was computed. [2019-11-28 00:14:22,627 INFO L246 CegarLoopResult]: For program point L1874(lines 1874 1879) no Hoare annotation was computed. [2019-11-28 00:14:22,627 INFO L246 CegarLoopResult]: For program point L1874-1(lines 1874 1879) no Hoare annotation was computed. [2019-11-28 00:14:22,627 INFO L242 CegarLoopResult]: At program point L1742(lines 1811 1823) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= ULTIMATE.start_getClientPrivateKey_~handle 2) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,628 INFO L242 CegarLoopResult]: At program point L224(lines 211 240) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,628 INFO L246 CegarLoopResult]: For program point L2008(lines 2008 2019) no Hoare annotation was computed. [2019-11-28 00:14:22,628 INFO L246 CegarLoopResult]: For program point L2008-1(lines 2008 2019) no Hoare annotation was computed. [2019-11-28 00:14:22,628 INFO L246 CegarLoopResult]: For program point L2008-2(lines 2008 2019) no Hoare annotation was computed. [2019-11-28 00:14:22,628 INFO L246 CegarLoopResult]: For program point L2008-3(lines 2008 2019) no Hoare annotation was computed. [2019-11-28 00:14:22,628 INFO L246 CegarLoopResult]: For program point L1216(lines 1216 1220) no Hoare annotation was computed. [2019-11-28 00:14:22,629 INFO L242 CegarLoopResult]: At program point L1216-2(lines 1 2825) the Hoare annotation is: (and (= ~__ste_Client_Keyring0_User0~0 ~__ste_Client_Keyring0_User1~0) (= 1 ~queue_empty~0) (not (= ~rjh~0 1)) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= 0 ~__ste_Client_Keyring0_User0~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1))) [2019-11-28 00:14:22,629 INFO L246 CegarLoopResult]: For program point L1216-3(lines 1216 1220) no Hoare annotation was computed. [2019-11-28 00:14:22,629 INFO L242 CegarLoopResult]: At program point L1216-5(lines 1 2825) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~rjh~0 ULTIMATE.start_setClientId_~handle) (= 456 ULTIMATE.start_setClientPrivateKey_~value) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_rjh_~rjh___0) (= ULTIMATE.start_setClientPrivateKey_~handle 2) (not (= ~__ste_email_to0~0 1)) (= ~__ste_client_privateKey1~0 456) (= ~__ste_Client_Keyring0_User0~0 ~__ste_Client_Keyring0_User1~0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= 0 ~__ste_Client_Keyring0_User0~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,629 INFO L246 CegarLoopResult]: For program point L1216-6(lines 1216 1220) no Hoare annotation was computed. [2019-11-28 00:14:22,629 INFO L242 CegarLoopResult]: At program point L1216-8(lines 1 2825) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientPrivateKey_~handle 2)) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_client_privateKey1~0 456) (= ~__ste_Client_Keyring0_User0~0 ~__ste_Client_Keyring0_User1~0) (not (= 2 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= 0 ~__ste_Client_Keyring0_User0~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,630 INFO L246 CegarLoopResult]: For program point L1216-9(lines 1216 1220) no Hoare annotation was computed. [2019-11-28 00:14:22,630 INFO L242 CegarLoopResult]: At program point L1216-11(lines 1 2825) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,630 INFO L246 CegarLoopResult]: For program point L1216-12(lines 1216 1220) no Hoare annotation was computed. [2019-11-28 00:14:22,630 INFO L242 CegarLoopResult]: At program point L1216-14(lines 578 587) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,630 INFO L246 CegarLoopResult]: For program point L1216-15(lines 1216 1220) no Hoare annotation was computed. [2019-11-28 00:14:22,630 INFO L242 CegarLoopResult]: At program point L1216-17(lines 568 577) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,631 INFO L242 CegarLoopResult]: At program point L160(lines 147 245) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,631 INFO L246 CegarLoopResult]: For program point L2142(lines 2142 2150) no Hoare annotation was computed. [2019-11-28 00:14:22,631 INFO L246 CegarLoopResult]: For program point L94(lines 94 249) no Hoare annotation was computed. [2019-11-28 00:14:22,631 INFO L246 CegarLoopResult]: For program point L2142-2(lines 2142 2150) no Hoare annotation was computed. [2019-11-28 00:14:22,631 INFO L246 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2019-11-28 00:14:22,631 INFO L246 CegarLoopResult]: For program point L2142-4(lines 2142 2150) no Hoare annotation was computed. [2019-11-28 00:14:22,631 INFO L246 CegarLoopResult]: For program point L2142-6(lines 2142 2150) no Hoare annotation was computed. [2019-11-28 00:14:22,631 INFO L246 CegarLoopResult]: For program point L1548(lines 1548 1560) no Hoare annotation was computed. [2019-11-28 00:14:22,631 INFO L242 CegarLoopResult]: At program point L1548-1(lines 1522 1565) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 0 ULTIMATE.start_test_~op1~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,631 INFO L246 CegarLoopResult]: For program point L1548-2(lines 1548 1560) no Hoare annotation was computed. [2019-11-28 00:14:22,631 INFO L242 CegarLoopResult]: At program point L1548-3(lines 1 2825) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,632 INFO L246 CegarLoopResult]: For program point L1548-4(lines 1548 1560) no Hoare annotation was computed. [2019-11-28 00:14:22,632 INFO L242 CegarLoopResult]: At program point L1548-5(lines 1 2825) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,632 INFO L246 CegarLoopResult]: For program point L1548-6(lines 1548 1560) no Hoare annotation was computed. [2019-11-28 00:14:22,632 INFO L242 CegarLoopResult]: At program point L1548-7(lines 1 2825) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,632 INFO L246 CegarLoopResult]: For program point L1284(lines 1284 1294) no Hoare annotation was computed. [2019-11-28 00:14:22,632 INFO L246 CegarLoopResult]: For program point L1548-8(lines 1548 1560) no Hoare annotation was computed. [2019-11-28 00:14:22,633 INFO L246 CegarLoopResult]: For program point L1284-1(lines 1284 1294) no Hoare annotation was computed. [2019-11-28 00:14:22,633 INFO L242 CegarLoopResult]: At program point L1548-9(lines 1 2825) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,633 INFO L246 CegarLoopResult]: For program point L1284-2(lines 1284 1294) no Hoare annotation was computed. [2019-11-28 00:14:22,633 INFO L246 CegarLoopResult]: For program point L1284-3(lines 1284 1294) no Hoare annotation was computed. [2019-11-28 00:14:22,633 INFO L246 CegarLoopResult]: For program point L1284-4(lines 1284 1294) no Hoare annotation was computed. [2019-11-28 00:14:22,633 INFO L246 CegarLoopResult]: For program point L1549(lines 1549 1557) no Hoare annotation was computed. [2019-11-28 00:14:22,634 INFO L246 CegarLoopResult]: For program point L1549-2(lines 1549 1557) no Hoare annotation was computed. [2019-11-28 00:14:22,634 INFO L246 CegarLoopResult]: For program point L1549-4(lines 1549 1557) no Hoare annotation was computed. [2019-11-28 00:14:22,634 INFO L246 CegarLoopResult]: For program point L1549-6(lines 1549 1557) no Hoare annotation was computed. [2019-11-28 00:14:22,634 INFO L246 CegarLoopResult]: For program point L1549-8(lines 1549 1557) no Hoare annotation was computed. [2019-11-28 00:14:22,634 INFO L246 CegarLoopResult]: For program point L2012(lines 2012 2018) no Hoare annotation was computed. [2019-11-28 00:14:22,634 INFO L246 CegarLoopResult]: For program point L2012-1(lines 2012 2018) no Hoare annotation was computed. [2019-11-28 00:14:22,635 INFO L246 CegarLoopResult]: For program point L2012-2(lines 2012 2018) no Hoare annotation was computed. [2019-11-28 00:14:22,635 INFO L246 CegarLoopResult]: For program point L2012-3(lines 2012 2018) no Hoare annotation was computed. [2019-11-28 00:14:22,635 INFO L246 CegarLoopResult]: For program point L1418(lines 1418 1464) no Hoare annotation was computed. [2019-11-28 00:14:22,635 INFO L246 CegarLoopResult]: For program point L229(lines 229 236) no Hoare annotation was computed. [2019-11-28 00:14:22,635 INFO L242 CegarLoopResult]: At program point L229-1(lines 86 250) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,635 INFO L246 CegarLoopResult]: For program point L2145(lines 2145 2149) no Hoare annotation was computed. [2019-11-28 00:14:22,636 INFO L246 CegarLoopResult]: For program point L2145-3(lines 2145 2149) no Hoare annotation was computed. [2019-11-28 00:14:22,636 INFO L242 CegarLoopResult]: At program point L2145-5(lines 2138 2153) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= ULTIMATE.start_getClientPrivateKey_~handle 2) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,636 INFO L246 CegarLoopResult]: For program point L2145-6(lines 2145 2149) no Hoare annotation was computed. [2019-11-28 00:14:22,636 INFO L246 CegarLoopResult]: For program point L2145-9(lines 2145 2149) no Hoare annotation was computed. [2019-11-28 00:14:22,636 INFO L249 CegarLoopResult]: At program point L2145-11(lines 2138 2153) the Hoare annotation is: true [2019-11-28 00:14:22,637 INFO L246 CegarLoopResult]: For program point L1419(lines 1419 1430) no Hoare annotation was computed. [2019-11-28 00:14:22,637 INFO L242 CegarLoopResult]: At program point L296(lines 1 2825) the Hoare annotation is: (and (= ~__ste_Client_Keyring0_User0~0 ~__ste_Client_Keyring0_User1~0) (= 1 ~queue_empty~0) (not (= ~rjh~0 1)) (= 0 (+ ~mail_is_sensitive~0 1)) (= 0 ~__ste_Client_Keyring0_User0~0) (not (= ~__ste_email_to0~0 1))) [2019-11-28 00:14:22,637 INFO L246 CegarLoopResult]: For program point L98(lines 98 105) no Hoare annotation was computed. [2019-11-28 00:14:22,637 INFO L242 CegarLoopResult]: At program point L1882(lines 1861 1885) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= ULTIMATE.start_getClientPrivateKey_~handle 2) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 00:14:22,637 INFO L249 CegarLoopResult]: At program point L1882-1(lines 1861 1885) the Hoare annotation is: true [2019-11-28 00:14:22,638 INFO L246 CegarLoopResult]: For program point L2807(lines 2807 2822) no Hoare annotation was computed. [2019-11-28 00:14:22,638 INFO L246 CegarLoopResult]: For program point L2807-2(lines 2807 2822) no Hoare annotation was computed. [2019-11-28 00:14:22,638 INFO L246 CegarLoopResult]: For program point L1552(lines 1552 1556) no Hoare annotation was computed. [2019-11-28 00:14:22,638 INFO L242 CegarLoopResult]: At program point L495(lines 476 497) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 0 ULTIMATE.start_test_~op1~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,638 INFO L246 CegarLoopResult]: For program point L1486(lines 1486 1517) no Hoare annotation was computed. [2019-11-28 00:14:22,638 INFO L246 CegarLoopResult]: For program point L1552-3(lines 1552 1556) no Hoare annotation was computed. [2019-11-28 00:14:22,639 INFO L246 CegarLoopResult]: For program point L1486-1(lines 1486 1517) no Hoare annotation was computed. [2019-11-28 00:14:22,639 INFO L242 CegarLoopResult]: At program point L1354(lines 1307 1360) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 0 ULTIMATE.start_test_~op1~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 00:14:22,639 INFO L246 CegarLoopResult]: For program point L1552-6(lines 1552 1556) no Hoare annotation was computed. [2019-11-28 00:14:22,639 INFO L246 CegarLoopResult]: For program point L1552-9(lines 1552 1556) no Hoare annotation was computed. [2019-11-28 00:14:22,639 INFO L246 CegarLoopResult]: For program point L165(lines 165 169) no Hoare annotation was computed. [2019-11-28 00:14:22,639 INFO L246 CegarLoopResult]: For program point L1552-12(lines 1552 1556) no Hoare annotation was computed. [2019-11-28 00:14:22,640 INFO L246 CegarLoopResult]: For program point L1487(lines 1487 1498) no Hoare annotation was computed. [2019-11-28 00:14:22,640 INFO L246 CegarLoopResult]: For program point L1487-1(lines 1487 1498) no Hoare annotation was computed. [2019-11-28 00:14:22,697 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.11 12:14:22 BoogieIcfgContainer [2019-11-28 00:14:22,698 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-11-28 00:14:22,698 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-11-28 00:14:22,698 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-11-28 00:14:22,699 INFO L275 PluginConnector]: Witness Printer initialized [2019-11-28 00:14:22,699 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 12:13:53" (3/4) ... [2019-11-28 00:14:22,703 INFO L137 WitnessPrinter]: Generating witness for correct program [2019-11-28 00:14:22,753 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 128 nodes and edges [2019-11-28 00:14:22,757 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 74 nodes and edges [2019-11-28 00:14:22,759 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 6 nodes and edges [2019-11-28 00:14:22,763 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2019-11-28 00:14:22,766 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-11-28 00:14:22,769 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-11-28 00:14:22,808 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((__ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1 && 1 == queue_empty) && !(rjh == 1)) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && !(__ste_email_to0 == 1) [2019-11-28 00:14:22,810 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((__ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1 && 1 == queue_empty) && !(rjh == 1)) && !(handle == 2)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && !(__ste_email_to0 == 1) [2019-11-28 00:14:22,810 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((__ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1 && 1 == queue_empty) && !(rjh == 1)) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && !(__ste_email_to0 == 1) [2019-11-28 00:14:22,810 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((__ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1 && 1 == queue_empty) && handle == 2) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && handle == rjh___0) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && !(__ste_email_to0 == 1)) && rjh == 2 [2019-11-28 00:14:22,811 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == queue_empty && rjh == handle) && 456 == value) && handle == rjh___0) && handle == 2) && !(__ste_email_to0 == 1)) && __ste_client_privateKey1 == 456) && __ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && rjh == 2 [2019-11-28 00:14:22,811 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && 456 == value) && handle == 2) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && __ste_client_privateKey1 == 456) && __ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1) && !(2 == chuck___0)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && rjh == 2 [2019-11-28 00:14:22,811 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && __ste_client_privateKey1 == 456) && __ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1) && !(2 == chuck___0)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && !(handle == 1)) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && rjh == 2 [2019-11-28 00:14:22,812 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && __ste_client_privateKey1 == 456) && __ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1) && !(2 == chuck___0)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && !(handle == 1)) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && rjh == 2 [2019-11-28 00:14:22,812 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,813 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,813 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,817 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,817 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,817 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,818 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,818 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,818 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,818 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,818 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,819 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,819 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,819 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,820 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && !(__ste_email_to0 == 1)) && 1 == msg) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,820 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,821 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && __ste_email_to0 == 2) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,821 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,821 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,821 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,821 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && __ste_email_to0 == 2) && \result == 1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,822 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,822 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,822 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,823 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,827 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,827 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,827 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,827 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,828 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,828 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,828 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,828 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,829 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,829 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,829 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,829 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((handle == chuck___0 && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && queue_empty == tmp) && \result == 1) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,830 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,830 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,831 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,831 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,831 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,832 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,832 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,832 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((handle == chuck___0 && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && \result == 1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,833 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,833 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((handle == chuck___0 && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && \result == 1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,833 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((handle == chuck___0 && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && \result == 1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,834 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,834 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && queue_empty == tmp) && \result == 1) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,834 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 00:14:22,834 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && queue_empty == tmp) && \result == 1) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,835 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && queue_empty == tmp) && \result == 1) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,835 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,835 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && queue_empty == tmp) && \result == 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,836 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,836 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,836 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,836 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,837 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && !(0 == \result)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,837 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,837 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,838 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 00:14:22,977 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2019-11-28 00:14:22,977 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-11-28 00:14:22,979 INFO L168 Benchmark]: Toolchain (without parser) took 33260.86 ms. Allocated memory was 1.0 GB in the beginning and 1.8 GB in the end (delta: 721.4 MB). Free memory was 952.3 MB in the beginning and 1.3 GB in the end (delta: -344.6 MB). Peak memory consumption was 376.8 MB. Max. memory is 11.5 GB. [2019-11-28 00:14:22,980 INFO L168 Benchmark]: CDTParser took 0.28 ms. Allocated memory is still 1.0 GB. Free memory is still 987.2 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-11-28 00:14:22,980 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1230.67 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 120.6 MB). Free memory was 952.3 MB in the beginning and 1.1 GB in the end (delta: -119.5 MB). Peak memory consumption was 26.4 MB. Max. memory is 11.5 GB. [2019-11-28 00:14:22,981 INFO L168 Benchmark]: Boogie Procedure Inliner took 137.34 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 7.0 MB). Peak memory consumption was 7.0 MB. Max. memory is 11.5 GB. [2019-11-28 00:14:22,981 INFO L168 Benchmark]: Boogie Preprocessor took 127.26 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 7.0 MB). Peak memory consumption was 7.0 MB. Max. memory is 11.5 GB. [2019-11-28 00:14:22,981 INFO L168 Benchmark]: RCFGBuilder took 1988.74 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 869.2 MB in the end (delta: 188.6 MB). Peak memory consumption was 188.6 MB. Max. memory is 11.5 GB. [2019-11-28 00:14:22,982 INFO L168 Benchmark]: TraceAbstraction took 29489.51 ms. Allocated memory was 1.1 GB in the beginning and 1.8 GB in the end (delta: 600.8 MB). Free memory was 869.2 MB in the beginning and 1.3 GB in the end (delta: -464.8 MB). Peak memory consumption was 686.4 MB. Max. memory is 11.5 GB. [2019-11-28 00:14:22,984 INFO L168 Benchmark]: Witness Printer took 279.53 ms. Allocated memory is still 1.8 GB. Free memory was 1.3 GB in the beginning and 1.3 GB in the end (delta: 37.1 MB). Peak memory consumption was 37.1 MB. Max. memory is 11.5 GB. [2019-11-28 00:14:22,986 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28 ms. Allocated memory is still 1.0 GB. Free memory is still 987.2 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1230.67 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 120.6 MB). Free memory was 952.3 MB in the beginning and 1.1 GB in the end (delta: -119.5 MB). Peak memory consumption was 26.4 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 137.34 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 7.0 MB). Peak memory consumption was 7.0 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 127.26 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 7.0 MB). Peak memory consumption was 7.0 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1988.74 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 869.2 MB in the end (delta: 188.6 MB). Peak memory consumption was 188.6 MB. Max. memory is 11.5 GB. * TraceAbstraction took 29489.51 ms. Allocated memory was 1.1 GB in the beginning and 1.8 GB in the end (delta: 600.8 MB). Free memory was 869.2 MB in the beginning and 1.3 GB in the end (delta: -464.8 MB). Peak memory consumption was 686.4 MB. Max. memory is 11.5 GB. * Witness Printer took 279.53 ms. Allocated memory is still 1.8 GB. Free memory was 1.3 GB in the beginning and 1.3 GB in the end (delta: 37.1 MB). Peak memory consumption was 37.1 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 2690]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 2690]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 2 specifications checked. All of them hold - InvariantResult [Line: 1986]: Loop Invariant Derived loop invariant: (((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && queue_empty == tmp) && \result == 1) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1182]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1617]: Loop Invariant Derived loop invariant: (((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && queue_empty == tmp) && \result == 1) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1617]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 133]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((__ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1 && 1 == queue_empty) && !(rjh == 1)) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1852]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2119]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2119]: Loop Invariant Derived loop invariant: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && queue_empty == tmp) && \result == 1) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 147]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 2119]: Loop Invariant Derived loop invariant: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1986]: Loop Invariant Derived loop invariant: ((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && !(__ste_email_to0 == 1)) && 1 == msg) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 2119]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1834]: Loop Invariant Derived loop invariant: (((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && !(0 == \result)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 2119]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1182]: Loop Invariant Derived loop invariant: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 2119]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1253]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1361]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1767]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2156]: Loop Invariant Derived loop invariant: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 2156]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1361]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1253]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 2023]: Loop Invariant Derived loop invariant: ((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && __ste_email_to0 == 2) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 2783]: Loop Invariant Derived loop invariant: (((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && __ste_email_to0 == 2) && \result == 1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1361]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1253]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 578]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1767]: Loop Invariant Derived loop invariant: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1361]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 299]: Loop Invariant Derived loop invariant: (((((__ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1 && 1 == queue_empty) && !(rjh == 1)) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && !(__ste_email_to0 == 1) - InvariantResult [Line: 465]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 568]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 119]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1811]: Loop Invariant Derived loop invariant: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((__ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1 && 1 == queue_empty) && handle == 2) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && handle == rjh___0) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && !(__ste_email_to0 == 1)) && rjh == 2 - InvariantResult [Line: 1253]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && __ste_client_privateKey1 == 456) && __ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1) && !(2 == chuck___0)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && !(handle == 1)) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && rjh == 2 - InvariantResult [Line: 1843]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2138]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 197]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && 456 == value) && handle == 2) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && __ste_client_privateKey1 == 456) && __ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1) && !(2 == chuck___0)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && rjh == 2 - InvariantResult [Line: 1468]: Loop Invariant Derived loop invariant: ((((((((((((((((handle == chuck___0 && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && \result == 1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1522]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1361]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1253]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1307]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1468]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1273]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 2175]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2004]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((__ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1 && 1 == queue_empty) && !(rjh == 1)) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && !(__ste_email_to0 == 1) - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 94]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 108]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((__ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1 && 1 == queue_empty) && !(rjh == 1)) && !(handle == 2)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((1 == queue_empty && rjh == handle) && 456 == value) && handle == rjh___0) && handle == 2) && !(__ste_email_to0 == 1)) && __ste_client_privateKey1 == 456) && __ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && rjh == 2 - InvariantResult [Line: 2138]: Loop Invariant Derived loop invariant: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 476]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: (((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && __ste_client_privateKey1 == 456) && __ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1) && !(2 == chuck___0)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && !(handle == 1)) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && rjh == 2 - InvariantResult [Line: 2175]: Loop Invariant Derived loop invariant: ((((((((((((((((handle == chuck___0 && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && \result == 1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1861]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1273]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1721]: Loop Invariant Derived loop invariant: ((((((((((((((((handle == chuck___0 && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && \result == 1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1721]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1273]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1273]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 2004]: Loop Invariant Derived loop invariant: ((((((((((((((((handle == chuck___0 && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && queue_empty == tmp) && \result == 1) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1414]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 2004]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2004]: Loop Invariant Derived loop invariant: (((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && queue_empty == tmp) && \result == 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1273]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 2800]: Loop Invariant Derived loop invariant: (((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1229]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1229]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1229]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1229]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 2800]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1861]: Loop Invariant Derived loop invariant: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 186]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1229]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 381 locations, 2 error locations. Result: SAFE, OverallTime: 9.4s, OverallIterations: 18, TraceHistogramMax: 2, AutomataDifference: 5.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 19.7s, HoareTripleCheckerStatistics: 12617 SDtfs, 23013 SDslu, 23919 SDs, 0 SdLazy, 892 SolverSat, 83 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 2.1s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 137 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2643occurred in iteration=14, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.5s AutomataMinimizationTime, 18 MinimizatonAttempts, 4144 StatesRemovedByMinimization, 14 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 93 LocationsWithAnnotation, 93 PreInvPairs, 684 NumberOfFragments, 3134 HoareAnnotationTreeSize, 93 FomulaSimplifications, 942318 FormulaSimplificationTreeSizeReduction, 3.1s HoareSimplificationTime, 93 FomulaSimplificationsInter, 628893 FormulaSimplificationTreeSizeReductionInter, 16.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 1125 NumberOfCodeBlocks, 1125 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 1107 ConstructedInterpolants, 0 QuantifiedInterpolants, 149561 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 18 InterpolantComputations, 18 PerfectInterpolantSequences, 22/22 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...