./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/email_spec1_product12.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f470102c Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/email_spec1_product12.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash d8be154d3e1e3530184c878a0d9a3b350197adb1 ..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-f470102 [2019-11-28 17:17:59,469 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-11-28 17:17:59,472 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-11-28 17:17:59,491 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-11-28 17:17:59,491 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-11-28 17:17:59,493 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-11-28 17:17:59,495 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-11-28 17:17:59,508 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-11-28 17:17:59,510 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-11-28 17:17:59,512 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-11-28 17:17:59,514 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-11-28 17:17:59,516 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-11-28 17:17:59,517 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-11-28 17:17:59,520 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-11-28 17:17:59,521 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-11-28 17:17:59,522 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-11-28 17:17:59,523 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-11-28 17:17:59,524 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-11-28 17:17:59,526 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-11-28 17:17:59,528 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-11-28 17:17:59,529 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-11-28 17:17:59,530 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-11-28 17:17:59,532 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-11-28 17:17:59,533 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-11-28 17:17:59,535 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-11-28 17:17:59,535 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-11-28 17:17:59,536 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-11-28 17:17:59,537 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-11-28 17:17:59,537 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-11-28 17:17:59,538 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-11-28 17:17:59,538 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-11-28 17:17:59,539 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-11-28 17:17:59,540 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-11-28 17:17:59,541 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-11-28 17:17:59,542 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-11-28 17:17:59,542 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-11-28 17:17:59,543 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-11-28 17:17:59,543 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-11-28 17:17:59,544 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-11-28 17:17:59,545 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-11-28 17:17:59,546 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-11-28 17:17:59,547 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2019-11-28 17:17:59,561 INFO L113 SettingsManager]: Loading preferences was successful [2019-11-28 17:17:59,562 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-11-28 17:17:59,563 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-11-28 17:17:59,563 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2019-11-28 17:17:59,564 INFO L138 SettingsManager]: * Use SBE=true [2019-11-28 17:17:59,564 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-11-28 17:17:59,564 INFO L138 SettingsManager]: * sizeof long=4 [2019-11-28 17:17:59,565 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-11-28 17:17:59,565 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-11-28 17:17:59,565 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-11-28 17:17:59,565 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-11-28 17:17:59,566 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-11-28 17:17:59,566 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-11-28 17:17:59,566 INFO L138 SettingsManager]: * sizeof long double=12 [2019-11-28 17:17:59,566 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-11-28 17:17:59,567 INFO L138 SettingsManager]: * Use constant arrays=true [2019-11-28 17:17:59,567 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-11-28 17:17:59,567 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-11-28 17:17:59,568 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-11-28 17:17:59,568 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-11-28 17:17:59,568 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-11-28 17:17:59,568 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-11-28 17:17:59,569 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-11-28 17:17:59,569 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-11-28 17:17:59,569 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-11-28 17:17:59,570 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2019-11-28 17:17:59,570 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-11-28 17:17:59,570 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-11-28 17:17:59,570 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-11-28 17:17:59,571 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> d8be154d3e1e3530184c878a0d9a3b350197adb1 [2019-11-28 17:17:59,883 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-11-28 17:17:59,903 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-11-28 17:17:59,906 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-11-28 17:17:59,908 INFO L271 PluginConnector]: Initializing CDTParser... [2019-11-28 17:17:59,908 INFO L275 PluginConnector]: CDTParser initialized [2019-11-28 17:17:59,909 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/email_spec1_product12.cil.c [2019-11-28 17:17:59,986 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3cb99cea1/9db55b263d804942be469aaf1497bf21/FLAGf300e27bd [2019-11-28 17:18:00,659 INFO L306 CDTParser]: Found 1 translation units. [2019-11-28 17:18:00,661 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/email_spec1_product12.cil.c [2019-11-28 17:18:00,703 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3cb99cea1/9db55b263d804942be469aaf1497bf21/FLAGf300e27bd [2019-11-28 17:18:00,901 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3cb99cea1/9db55b263d804942be469aaf1497bf21 [2019-11-28 17:18:00,905 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-11-28 17:18:00,908 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-11-28 17:18:00,909 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-11-28 17:18:00,910 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-11-28 17:18:00,913 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-11-28 17:18:00,914 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 05:18:00" (1/1) ... [2019-11-28 17:18:00,917 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@27ef6a3b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:18:00, skipping insertion in model container [2019-11-28 17:18:00,918 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 05:18:00" (1/1) ... [2019-11-28 17:18:00,926 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-11-28 17:18:01,003 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-11-28 17:18:01,694 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-11-28 17:18:01,708 INFO L203 MainTranslator]: Completed pre-run [2019-11-28 17:18:01,845 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-11-28 17:18:01,927 INFO L208 MainTranslator]: Completed translation [2019-11-28 17:18:01,928 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:18:01 WrapperNode [2019-11-28 17:18:01,928 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-11-28 17:18:01,929 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-11-28 17:18:01,929 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-11-28 17:18:01,929 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-11-28 17:18:01,938 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:18:01" (1/1) ... [2019-11-28 17:18:01,990 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:18:01" (1/1) ... [2019-11-28 17:18:02,070 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-11-28 17:18:02,071 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-11-28 17:18:02,071 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-11-28 17:18:02,071 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-11-28 17:18:02,081 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:18:01" (1/1) ... [2019-11-28 17:18:02,082 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:18:01" (1/1) ... [2019-11-28 17:18:02,091 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:18:01" (1/1) ... [2019-11-28 17:18:02,091 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:18:01" (1/1) ... [2019-11-28 17:18:02,141 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:18:01" (1/1) ... [2019-11-28 17:18:02,173 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:18:01" (1/1) ... [2019-11-28 17:18:02,187 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:18:01" (1/1) ... [2019-11-28 17:18:02,204 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-11-28 17:18:02,205 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-11-28 17:18:02,205 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-11-28 17:18:02,205 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-11-28 17:18:02,208 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:18:01" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-11-28 17:18:02,285 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2019-11-28 17:18:02,286 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-11-28 17:18:02,286 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2019-11-28 17:18:02,287 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-11-28 17:18:02,287 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-11-28 17:18:04,085 INFO L282 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-11-28 17:18:04,086 INFO L287 CfgBuilder]: Removed 227 assume(true) statements. [2019-11-28 17:18:04,087 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 05:18:04 BoogieIcfgContainer [2019-11-28 17:18:04,087 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-11-28 17:18:04,089 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-11-28 17:18:04,089 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-11-28 17:18:04,092 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-11-28 17:18:04,092 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.11 05:18:00" (1/3) ... [2019-11-28 17:18:04,093 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@59396afc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.11 05:18:04, skipping insertion in model container [2019-11-28 17:18:04,093 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:18:01" (2/3) ... [2019-11-28 17:18:04,096 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@59396afc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.11 05:18:04, skipping insertion in model container [2019-11-28 17:18:04,096 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 05:18:04" (3/3) ... [2019-11-28 17:18:04,102 INFO L109 eAbstractionObserver]: Analyzing ICFG email_spec1_product12.cil.c [2019-11-28 17:18:04,111 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-11-28 17:18:04,117 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 2 error locations. [2019-11-28 17:18:04,128 INFO L249 AbstractCegarLoop]: Starting to check reachability of 2 error locations. [2019-11-28 17:18:04,152 INFO L373 AbstractCegarLoop]: Interprodecural is true [2019-11-28 17:18:04,152 INFO L374 AbstractCegarLoop]: Hoare is true [2019-11-28 17:18:04,152 INFO L375 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-11-28 17:18:04,153 INFO L376 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-11-28 17:18:04,153 INFO L377 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-11-28 17:18:04,153 INFO L378 AbstractCegarLoop]: Difference is false [2019-11-28 17:18:04,153 INFO L379 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-11-28 17:18:04,153 INFO L383 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-11-28 17:18:04,179 INFO L276 IsEmpty]: Start isEmpty. Operand 381 states. [2019-11-28 17:18:04,192 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2019-11-28 17:18:04,192 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:18:04,193 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:18:04,194 INFO L410 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:18:04,200 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:18:04,200 INFO L82 PathProgramCache]: Analyzing trace with hash 1419939679, now seen corresponding path program 1 times [2019-11-28 17:18:04,210 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:18:04,210 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1962057887] [2019-11-28 17:18:04,210 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:18:04,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:18:04,526 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 17:18:04,527 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1962057887] [2019-11-28 17:18:04,528 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:18:04,528 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-28 17:18:04,529 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [528770224] [2019-11-28 17:18:04,534 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 17:18:04,534 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:18:04,548 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 17:18:04,548 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:18:04,551 INFO L87 Difference]: Start difference. First operand 381 states. Second operand 3 states. [2019-11-28 17:18:04,709 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:18:04,709 INFO L93 Difference]: Finished difference Result 1108 states and 1955 transitions. [2019-11-28 17:18:04,710 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 17:18:04,711 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 41 [2019-11-28 17:18:04,711 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:18:04,740 INFO L225 Difference]: With dead ends: 1108 [2019-11-28 17:18:04,740 INFO L226 Difference]: Without dead ends: 676 [2019-11-28 17:18:04,750 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:18:04,767 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 676 states. [2019-11-28 17:18:04,836 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 676 to 347. [2019-11-28 17:18:04,838 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 347 states. [2019-11-28 17:18:04,840 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 607 transitions. [2019-11-28 17:18:04,843 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 607 transitions. Word has length 41 [2019-11-28 17:18:04,843 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:18:04,844 INFO L462 AbstractCegarLoop]: Abstraction has 347 states and 607 transitions. [2019-11-28 17:18:04,844 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 17:18:04,844 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 607 transitions. [2019-11-28 17:18:04,851 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2019-11-28 17:18:04,852 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:18:04,852 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:18:04,852 INFO L410 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:18:04,854 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:18:04,854 INFO L82 PathProgramCache]: Analyzing trace with hash 1242424365, now seen corresponding path program 1 times [2019-11-28 17:18:04,854 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:18:04,855 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1194906278] [2019-11-28 17:18:04,855 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:18:04,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:18:05,036 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 17:18:05,036 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1194906278] [2019-11-28 17:18:05,037 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:18:05,038 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-28 17:18:05,038 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [117404834] [2019-11-28 17:18:05,040 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-28 17:18:05,041 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:18:05,041 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-28 17:18:05,041 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-28 17:18:05,042 INFO L87 Difference]: Start difference. First operand 347 states and 607 transitions. Second operand 5 states. [2019-11-28 17:18:05,316 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:18:05,317 INFO L93 Difference]: Finished difference Result 990 states and 1737 transitions. [2019-11-28 17:18:05,317 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-11-28 17:18:05,317 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 43 [2019-11-28 17:18:05,317 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:18:05,322 INFO L225 Difference]: With dead ends: 990 [2019-11-28 17:18:05,323 INFO L226 Difference]: Without dead ends: 662 [2019-11-28 17:18:05,327 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2019-11-28 17:18:05,329 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 662 states. [2019-11-28 17:18:05,364 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 662 to 347. [2019-11-28 17:18:05,364 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 347 states. [2019-11-28 17:18:05,366 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 606 transitions. [2019-11-28 17:18:05,366 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 606 transitions. Word has length 43 [2019-11-28 17:18:05,367 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:18:05,367 INFO L462 AbstractCegarLoop]: Abstraction has 347 states and 606 transitions. [2019-11-28 17:18:05,367 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-28 17:18:05,368 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 606 transitions. [2019-11-28 17:18:05,370 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2019-11-28 17:18:05,370 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:18:05,370 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:18:05,371 INFO L410 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:18:05,371 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:18:05,371 INFO L82 PathProgramCache]: Analyzing trace with hash 1132714688, now seen corresponding path program 1 times [2019-11-28 17:18:05,371 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:18:05,372 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1493113982] [2019-11-28 17:18:05,372 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:18:05,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:18:05,512 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 17:18:05,512 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1493113982] [2019-11-28 17:18:05,512 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:18:05,513 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-28 17:18:05,513 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [990208646] [2019-11-28 17:18:05,514 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 17:18:05,516 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:18:05,516 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 17:18:05,517 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:18:05,517 INFO L87 Difference]: Start difference. First operand 347 states and 606 transitions. Second operand 3 states. [2019-11-28 17:18:05,559 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:18:05,562 INFO L93 Difference]: Finished difference Result 676 states and 1186 transitions. [2019-11-28 17:18:05,563 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 17:18:05,563 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 44 [2019-11-28 17:18:05,564 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:18:05,566 INFO L225 Difference]: With dead ends: 676 [2019-11-28 17:18:05,567 INFO L226 Difference]: Without dead ends: 352 [2019-11-28 17:18:05,569 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:18:05,570 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 352 states. [2019-11-28 17:18:05,585 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 352 to 347. [2019-11-28 17:18:05,585 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 347 states. [2019-11-28 17:18:05,587 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 605 transitions. [2019-11-28 17:18:05,588 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 605 transitions. Word has length 44 [2019-11-28 17:18:05,594 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:18:05,594 INFO L462 AbstractCegarLoop]: Abstraction has 347 states and 605 transitions. [2019-11-28 17:18:05,594 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 17:18:05,594 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 605 transitions. [2019-11-28 17:18:05,599 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2019-11-28 17:18:05,599 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:18:05,599 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:18:05,599 INFO L410 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:18:05,600 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:18:05,600 INFO L82 PathProgramCache]: Analyzing trace with hash 542876218, now seen corresponding path program 1 times [2019-11-28 17:18:05,600 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:18:05,600 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [79369230] [2019-11-28 17:18:05,600 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:18:05,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:18:05,709 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 17:18:05,710 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [79369230] [2019-11-28 17:18:05,711 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:18:05,711 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-28 17:18:05,711 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1876161508] [2019-11-28 17:18:05,712 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 17:18:05,712 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:18:05,712 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 17:18:05,712 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:18:05,712 INFO L87 Difference]: Start difference. First operand 347 states and 605 transitions. Second operand 3 states. [2019-11-28 17:18:05,757 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:18:05,758 INFO L93 Difference]: Finished difference Result 686 states and 1199 transitions. [2019-11-28 17:18:05,758 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 17:18:05,760 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 45 [2019-11-28 17:18:05,760 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:18:05,763 INFO L225 Difference]: With dead ends: 686 [2019-11-28 17:18:05,763 INFO L226 Difference]: Without dead ends: 347 [2019-11-28 17:18:05,765 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:18:05,766 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 347 states. [2019-11-28 17:18:05,778 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 347 to 347. [2019-11-28 17:18:05,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 347 states. [2019-11-28 17:18:05,781 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 603 transitions. [2019-11-28 17:18:05,782 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 603 transitions. Word has length 45 [2019-11-28 17:18:05,782 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:18:05,782 INFO L462 AbstractCegarLoop]: Abstraction has 347 states and 603 transitions. [2019-11-28 17:18:05,782 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 17:18:05,783 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 603 transitions. [2019-11-28 17:18:05,784 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2019-11-28 17:18:05,784 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:18:05,784 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:18:05,785 INFO L410 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:18:05,785 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:18:05,785 INFO L82 PathProgramCache]: Analyzing trace with hash -1391705979, now seen corresponding path program 1 times [2019-11-28 17:18:05,785 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:18:05,787 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [137912245] [2019-11-28 17:18:05,787 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:18:05,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:18:05,879 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 17:18:05,880 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [137912245] [2019-11-28 17:18:05,880 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:18:05,880 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-28 17:18:05,881 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1426660944] [2019-11-28 17:18:05,881 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-28 17:18:05,881 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:18:05,881 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-28 17:18:05,882 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-28 17:18:05,882 INFO L87 Difference]: Start difference. First operand 347 states and 603 transitions. Second operand 5 states. [2019-11-28 17:18:06,048 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:18:06,048 INFO L93 Difference]: Finished difference Result 980 states and 1717 transitions. [2019-11-28 17:18:06,049 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-11-28 17:18:06,049 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 46 [2019-11-28 17:18:06,049 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:18:06,053 INFO L225 Difference]: With dead ends: 980 [2019-11-28 17:18:06,053 INFO L226 Difference]: Without dead ends: 660 [2019-11-28 17:18:06,055 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-11-28 17:18:06,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 660 states. [2019-11-28 17:18:06,072 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 660 to 347. [2019-11-28 17:18:06,072 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 347 states. [2019-11-28 17:18:06,074 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 602 transitions. [2019-11-28 17:18:06,074 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 602 transitions. Word has length 46 [2019-11-28 17:18:06,074 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:18:06,075 INFO L462 AbstractCegarLoop]: Abstraction has 347 states and 602 transitions. [2019-11-28 17:18:06,075 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-28 17:18:06,075 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 602 transitions. [2019-11-28 17:18:06,076 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2019-11-28 17:18:06,076 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:18:06,076 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:18:06,076 INFO L410 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:18:06,077 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:18:06,077 INFO L82 PathProgramCache]: Analyzing trace with hash 2141186050, now seen corresponding path program 1 times [2019-11-28 17:18:06,077 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:18:06,077 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [617431945] [2019-11-28 17:18:06,078 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:18:06,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:18:06,149 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 17:18:06,149 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [617431945] [2019-11-28 17:18:06,149 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:18:06,149 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-28 17:18:06,150 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [523753679] [2019-11-28 17:18:06,150 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-28 17:18:06,150 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:18:06,151 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-28 17:18:06,151 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-28 17:18:06,151 INFO L87 Difference]: Start difference. First operand 347 states and 602 transitions. Second operand 5 states. [2019-11-28 17:18:06,316 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:18:06,317 INFO L93 Difference]: Finished difference Result 985 states and 1722 transitions. [2019-11-28 17:18:06,317 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-11-28 17:18:06,317 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 47 [2019-11-28 17:18:06,317 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:18:06,323 INFO L225 Difference]: With dead ends: 985 [2019-11-28 17:18:06,323 INFO L226 Difference]: Without dead ends: 665 [2019-11-28 17:18:06,324 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-11-28 17:18:06,326 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 665 states. [2019-11-28 17:18:06,347 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 665 to 347. [2019-11-28 17:18:06,347 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 347 states. [2019-11-28 17:18:06,349 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 601 transitions. [2019-11-28 17:18:06,349 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 601 transitions. Word has length 47 [2019-11-28 17:18:06,349 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:18:06,350 INFO L462 AbstractCegarLoop]: Abstraction has 347 states and 601 transitions. [2019-11-28 17:18:06,350 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-28 17:18:06,350 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 601 transitions. [2019-11-28 17:18:06,351 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2019-11-28 17:18:06,351 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:18:06,351 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:18:06,352 INFO L410 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:18:06,352 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:18:06,352 INFO L82 PathProgramCache]: Analyzing trace with hash 504792042, now seen corresponding path program 1 times [2019-11-28 17:18:06,352 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:18:06,352 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1873492951] [2019-11-28 17:18:06,353 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:18:06,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:18:06,406 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 17:18:06,407 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1873492951] [2019-11-28 17:18:06,407 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:18:06,407 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-28 17:18:06,407 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1631193372] [2019-11-28 17:18:06,408 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 17:18:06,408 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:18:06,408 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 17:18:06,408 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:18:06,409 INFO L87 Difference]: Start difference. First operand 347 states and 601 transitions. Second operand 3 states. [2019-11-28 17:18:06,434 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:18:06,434 INFO L93 Difference]: Finished difference Result 460 states and 785 transitions. [2019-11-28 17:18:06,434 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 17:18:06,435 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 48 [2019-11-28 17:18:06,435 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:18:06,437 INFO L225 Difference]: With dead ends: 460 [2019-11-28 17:18:06,437 INFO L226 Difference]: Without dead ends: 350 [2019-11-28 17:18:06,438 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:18:06,439 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 350 states. [2019-11-28 17:18:06,455 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 350 to 349. [2019-11-28 17:18:06,455 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 349 states. [2019-11-28 17:18:06,457 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 349 states to 349 states and 603 transitions. [2019-11-28 17:18:06,457 INFO L78 Accepts]: Start accepts. Automaton has 349 states and 603 transitions. Word has length 48 [2019-11-28 17:18:06,457 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:18:06,457 INFO L462 AbstractCegarLoop]: Abstraction has 349 states and 603 transitions. [2019-11-28 17:18:06,458 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 17:18:06,458 INFO L276 IsEmpty]: Start isEmpty. Operand 349 states and 603 transitions. [2019-11-28 17:18:06,459 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2019-11-28 17:18:06,459 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:18:06,459 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:18:06,459 INFO L410 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:18:06,459 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:18:06,460 INFO L82 PathProgramCache]: Analyzing trace with hash -1344122196, now seen corresponding path program 1 times [2019-11-28 17:18:06,460 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:18:06,460 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1817308507] [2019-11-28 17:18:06,460 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:18:06,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:18:06,528 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 17:18:06,529 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1817308507] [2019-11-28 17:18:06,529 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:18:06,529 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-28 17:18:06,530 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [256004615] [2019-11-28 17:18:06,530 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 17:18:06,530 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:18:06,531 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 17:18:06,531 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:18:06,531 INFO L87 Difference]: Start difference. First operand 349 states and 603 transitions. Second operand 3 states. [2019-11-28 17:18:06,574 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:18:06,575 INFO L93 Difference]: Finished difference Result 933 states and 1633 transitions. [2019-11-28 17:18:06,575 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 17:18:06,575 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 54 [2019-11-28 17:18:06,575 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:18:06,579 INFO L225 Difference]: With dead ends: 933 [2019-11-28 17:18:06,579 INFO L226 Difference]: Without dead ends: 615 [2019-11-28 17:18:06,580 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:18:06,581 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 615 states. [2019-11-28 17:18:06,608 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 615 to 505. [2019-11-28 17:18:06,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 505 states. [2019-11-28 17:18:06,611 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 505 states to 505 states and 889 transitions. [2019-11-28 17:18:06,611 INFO L78 Accepts]: Start accepts. Automaton has 505 states and 889 transitions. Word has length 54 [2019-11-28 17:18:06,611 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:18:06,611 INFO L462 AbstractCegarLoop]: Abstraction has 505 states and 889 transitions. [2019-11-28 17:18:06,611 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 17:18:06,612 INFO L276 IsEmpty]: Start isEmpty. Operand 505 states and 889 transitions. [2019-11-28 17:18:06,613 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2019-11-28 17:18:06,613 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:18:06,613 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:18:06,613 INFO L410 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:18:06,613 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:18:06,614 INFO L82 PathProgramCache]: Analyzing trace with hash -1900507155, now seen corresponding path program 1 times [2019-11-28 17:18:06,614 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:18:06,614 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1203960901] [2019-11-28 17:18:06,614 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:18:06,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:18:06,722 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 17:18:06,723 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1203960901] [2019-11-28 17:18:06,723 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:18:06,723 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-11-28 17:18:06,725 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1911907058] [2019-11-28 17:18:06,727 INFO L442 AbstractCegarLoop]: Interpolant automaton has 9 states [2019-11-28 17:18:06,727 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:18:06,727 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2019-11-28 17:18:06,728 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2019-11-28 17:18:06,728 INFO L87 Difference]: Start difference. First operand 505 states and 889 transitions. Second operand 9 states. [2019-11-28 17:18:07,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:18:07,796 INFO L93 Difference]: Finished difference Result 1541 states and 2635 transitions. [2019-11-28 17:18:07,797 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2019-11-28 17:18:07,797 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 55 [2019-11-28 17:18:07,797 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:18:07,807 INFO L225 Difference]: With dead ends: 1541 [2019-11-28 17:18:07,807 INFO L226 Difference]: Without dead ends: 1451 [2019-11-28 17:18:07,809 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=94, Invalid=178, Unknown=0, NotChecked=0, Total=272 [2019-11-28 17:18:07,812 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1451 states. [2019-11-28 17:18:07,887 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1451 to 949. [2019-11-28 17:18:07,888 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 949 states. [2019-11-28 17:18:07,892 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 949 states to 949 states and 1689 transitions. [2019-11-28 17:18:07,893 INFO L78 Accepts]: Start accepts. Automaton has 949 states and 1689 transitions. Word has length 55 [2019-11-28 17:18:07,893 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:18:07,893 INFO L462 AbstractCegarLoop]: Abstraction has 949 states and 1689 transitions. [2019-11-28 17:18:07,894 INFO L463 AbstractCegarLoop]: Interpolant automaton has 9 states. [2019-11-28 17:18:07,894 INFO L276 IsEmpty]: Start isEmpty. Operand 949 states and 1689 transitions. [2019-11-28 17:18:07,896 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2019-11-28 17:18:07,896 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:18:07,897 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:18:07,897 INFO L410 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:18:07,897 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:18:07,898 INFO L82 PathProgramCache]: Analyzing trace with hash 312495338, now seen corresponding path program 1 times [2019-11-28 17:18:07,898 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:18:07,898 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2045421886] [2019-11-28 17:18:07,899 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:18:07,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:18:07,998 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 17:18:07,999 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2045421886] [2019-11-28 17:18:08,000 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:18:08,000 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-28 17:18:08,000 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1626364273] [2019-11-28 17:18:08,001 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-11-28 17:18:08,001 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:18:08,002 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-11-28 17:18:08,002 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-11-28 17:18:08,002 INFO L87 Difference]: Start difference. First operand 949 states and 1689 transitions. Second operand 4 states. [2019-11-28 17:18:08,286 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:18:08,287 INFO L93 Difference]: Finished difference Result 1920 states and 3336 transitions. [2019-11-28 17:18:08,287 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-11-28 17:18:08,287 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 56 [2019-11-28 17:18:08,288 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:18:08,298 INFO L225 Difference]: With dead ends: 1920 [2019-11-28 17:18:08,298 INFO L226 Difference]: Without dead ends: 1772 [2019-11-28 17:18:08,300 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2019-11-28 17:18:08,309 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1772 states. [2019-11-28 17:18:08,389 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1772 to 1468. [2019-11-28 17:18:08,391 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1468 states. [2019-11-28 17:18:08,397 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1468 states to 1468 states and 2612 transitions. [2019-11-28 17:18:08,398 INFO L78 Accepts]: Start accepts. Automaton has 1468 states and 2612 transitions. Word has length 56 [2019-11-28 17:18:08,398 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:18:08,398 INFO L462 AbstractCegarLoop]: Abstraction has 1468 states and 2612 transitions. [2019-11-28 17:18:08,398 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-11-28 17:18:08,399 INFO L276 IsEmpty]: Start isEmpty. Operand 1468 states and 2612 transitions. [2019-11-28 17:18:08,401 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2019-11-28 17:18:08,401 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:18:08,401 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:18:08,401 INFO L410 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:18:08,402 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:18:08,402 INFO L82 PathProgramCache]: Analyzing trace with hash -274310676, now seen corresponding path program 1 times [2019-11-28 17:18:08,402 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:18:08,402 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [887504639] [2019-11-28 17:18:08,403 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:18:08,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:18:08,476 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 17:18:08,476 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [887504639] [2019-11-28 17:18:08,476 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:18:08,477 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2019-11-28 17:18:08,477 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [942640162] [2019-11-28 17:18:08,478 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 17:18:08,478 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:18:08,478 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 17:18:08,479 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:18:08,479 INFO L87 Difference]: Start difference. First operand 1468 states and 2612 transitions. Second operand 3 states. [2019-11-28 17:18:08,553 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:18:08,554 INFO L93 Difference]: Finished difference Result 1640 states and 2886 transitions. [2019-11-28 17:18:08,554 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 17:18:08,554 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 56 [2019-11-28 17:18:08,555 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:18:08,564 INFO L225 Difference]: With dead ends: 1640 [2019-11-28 17:18:08,564 INFO L226 Difference]: Without dead ends: 1450 [2019-11-28 17:18:08,565 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:18:08,567 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1450 states. [2019-11-28 17:18:08,642 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1450 to 1450. [2019-11-28 17:18:08,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1450 states. [2019-11-28 17:18:08,648 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1450 states to 1450 states and 2579 transitions. [2019-11-28 17:18:08,648 INFO L78 Accepts]: Start accepts. Automaton has 1450 states and 2579 transitions. Word has length 56 [2019-11-28 17:18:08,650 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:18:08,650 INFO L462 AbstractCegarLoop]: Abstraction has 1450 states and 2579 transitions. [2019-11-28 17:18:08,650 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 17:18:08,650 INFO L276 IsEmpty]: Start isEmpty. Operand 1450 states and 2579 transitions. [2019-11-28 17:18:08,659 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2019-11-28 17:18:08,660 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:18:08,660 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:18:08,660 INFO L410 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:18:08,660 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:18:08,661 INFO L82 PathProgramCache]: Analyzing trace with hash 1680737127, now seen corresponding path program 1 times [2019-11-28 17:18:08,661 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:18:08,662 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1489574037] [2019-11-28 17:18:08,663 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:18:08,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:18:08,734 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 17:18:08,734 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1489574037] [2019-11-28 17:18:08,734 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:18:08,735 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-28 17:18:08,735 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1190415396] [2019-11-28 17:18:08,735 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-11-28 17:18:08,736 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:18:08,736 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-11-28 17:18:08,736 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-11-28 17:18:08,736 INFO L87 Difference]: Start difference. First operand 1450 states and 2579 transitions. Second operand 4 states. [2019-11-28 17:18:08,810 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:18:08,810 INFO L93 Difference]: Finished difference Result 1553 states and 2748 transitions. [2019-11-28 17:18:08,811 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-11-28 17:18:08,811 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2019-11-28 17:18:08,811 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:18:08,819 INFO L225 Difference]: With dead ends: 1553 [2019-11-28 17:18:08,819 INFO L226 Difference]: Without dead ends: 1383 [2019-11-28 17:18:08,820 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2019-11-28 17:18:08,824 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1383 states. [2019-11-28 17:18:08,902 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1383 to 1383. [2019-11-28 17:18:08,902 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1383 states. [2019-11-28 17:18:08,908 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1383 states to 1383 states and 2466 transitions. [2019-11-28 17:18:08,908 INFO L78 Accepts]: Start accepts. Automaton has 1383 states and 2466 transitions. Word has length 82 [2019-11-28 17:18:08,909 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:18:08,909 INFO L462 AbstractCegarLoop]: Abstraction has 1383 states and 2466 transitions. [2019-11-28 17:18:08,909 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-11-28 17:18:08,909 INFO L276 IsEmpty]: Start isEmpty. Operand 1383 states and 2466 transitions. [2019-11-28 17:18:08,916 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2019-11-28 17:18:08,916 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:18:08,917 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:18:08,917 INFO L410 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:18:08,917 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:18:08,918 INFO L82 PathProgramCache]: Analyzing trace with hash 1102479568, now seen corresponding path program 1 times [2019-11-28 17:18:08,918 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:18:08,918 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1018237418] [2019-11-28 17:18:08,918 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:18:08,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:18:09,049 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 17:18:09,049 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1018237418] [2019-11-28 17:18:09,050 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:18:09,050 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2019-11-28 17:18:09,050 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [592681834] [2019-11-28 17:18:09,051 INFO L442 AbstractCegarLoop]: Interpolant automaton has 9 states [2019-11-28 17:18:09,051 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:18:09,052 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2019-11-28 17:18:09,052 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2019-11-28 17:18:09,052 INFO L87 Difference]: Start difference. First operand 1383 states and 2466 transitions. Second operand 9 states. [2019-11-28 17:18:09,402 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:18:09,402 INFO L93 Difference]: Finished difference Result 1867 states and 3240 transitions. [2019-11-28 17:18:09,402 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-11-28 17:18:09,403 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 83 [2019-11-28 17:18:09,403 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:18:09,412 INFO L225 Difference]: With dead ends: 1867 [2019-11-28 17:18:09,413 INFO L226 Difference]: Without dead ends: 1748 [2019-11-28 17:18:09,416 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=72, Invalid=168, Unknown=0, NotChecked=0, Total=240 [2019-11-28 17:18:09,419 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1748 states. [2019-11-28 17:18:09,507 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1748 to 1389. [2019-11-28 17:18:09,508 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1389 states. [2019-11-28 17:18:09,514 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1389 states to 1389 states and 2472 transitions. [2019-11-28 17:18:09,514 INFO L78 Accepts]: Start accepts. Automaton has 1389 states and 2472 transitions. Word has length 83 [2019-11-28 17:18:09,515 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:18:09,515 INFO L462 AbstractCegarLoop]: Abstraction has 1389 states and 2472 transitions. [2019-11-28 17:18:09,515 INFO L463 AbstractCegarLoop]: Interpolant automaton has 9 states. [2019-11-28 17:18:09,515 INFO L276 IsEmpty]: Start isEmpty. Operand 1389 states and 2472 transitions. [2019-11-28 17:18:09,519 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2019-11-28 17:18:09,520 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:18:09,520 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:18:09,520 INFO L410 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:18:09,521 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:18:09,521 INFO L82 PathProgramCache]: Analyzing trace with hash 12519486, now seen corresponding path program 1 times [2019-11-28 17:18:09,521 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:18:09,527 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1390880728] [2019-11-28 17:18:09,527 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:18:09,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:18:09,704 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 17:18:09,705 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1390880728] [2019-11-28 17:18:09,705 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:18:09,706 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-11-28 17:18:09,706 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [652505327] [2019-11-28 17:18:09,707 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-11-28 17:18:09,708 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:18:09,708 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-11-28 17:18:09,708 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-11-28 17:18:09,709 INFO L87 Difference]: Start difference. First operand 1389 states and 2472 transitions. Second operand 6 states. [2019-11-28 17:18:10,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:18:10,097 INFO L93 Difference]: Finished difference Result 2943 states and 5199 transitions. [2019-11-28 17:18:10,098 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-11-28 17:18:10,098 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 84 [2019-11-28 17:18:10,098 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:18:10,114 INFO L225 Difference]: With dead ends: 2943 [2019-11-28 17:18:10,115 INFO L226 Difference]: Without dead ends: 2878 [2019-11-28 17:18:10,119 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=23, Invalid=49, Unknown=0, NotChecked=0, Total=72 [2019-11-28 17:18:10,125 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2878 states. [2019-11-28 17:18:10,328 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2878 to 2643. [2019-11-28 17:18:10,329 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2643 states. [2019-11-28 17:18:10,342 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2643 states to 2643 states and 4731 transitions. [2019-11-28 17:18:10,342 INFO L78 Accepts]: Start accepts. Automaton has 2643 states and 4731 transitions. Word has length 84 [2019-11-28 17:18:10,343 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:18:10,343 INFO L462 AbstractCegarLoop]: Abstraction has 2643 states and 4731 transitions. [2019-11-28 17:18:10,343 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-11-28 17:18:10,344 INFO L276 IsEmpty]: Start isEmpty. Operand 2643 states and 4731 transitions. [2019-11-28 17:18:10,353 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2019-11-28 17:18:10,353 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:18:10,354 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:18:10,354 INFO L410 AbstractCegarLoop]: === Iteration 15 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:18:10,354 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:18:10,355 INFO L82 PathProgramCache]: Analyzing trace with hash 1749467236, now seen corresponding path program 1 times [2019-11-28 17:18:10,355 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:18:10,356 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1346225053] [2019-11-28 17:18:10,356 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:18:10,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:18:10,474 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 17:18:10,475 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1346225053] [2019-11-28 17:18:10,475 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:18:10,475 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-11-28 17:18:10,476 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [744245822] [2019-11-28 17:18:10,476 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-11-28 17:18:10,476 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:18:10,477 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-11-28 17:18:10,477 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2019-11-28 17:18:10,477 INFO L87 Difference]: Start difference. First operand 2643 states and 4731 transitions. Second operand 8 states. [2019-11-28 17:18:10,742 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:18:10,743 INFO L93 Difference]: Finished difference Result 2996 states and 5303 transitions. [2019-11-28 17:18:10,743 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2019-11-28 17:18:10,743 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 84 [2019-11-28 17:18:10,743 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:18:10,757 INFO L225 Difference]: With dead ends: 2996 [2019-11-28 17:18:10,757 INFO L226 Difference]: Without dead ends: 2640 [2019-11-28 17:18:10,761 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=92, Invalid=180, Unknown=0, NotChecked=0, Total=272 [2019-11-28 17:18:10,764 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2640 states. [2019-11-28 17:18:10,935 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2640 to 2607. [2019-11-28 17:18:10,935 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2607 states. [2019-11-28 17:18:10,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2607 states to 2607 states and 4657 transitions. [2019-11-28 17:18:10,949 INFO L78 Accepts]: Start accepts. Automaton has 2607 states and 4657 transitions. Word has length 84 [2019-11-28 17:18:10,949 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:18:10,950 INFO L462 AbstractCegarLoop]: Abstraction has 2607 states and 4657 transitions. [2019-11-28 17:18:10,950 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-11-28 17:18:10,950 INFO L276 IsEmpty]: Start isEmpty. Operand 2607 states and 4657 transitions. [2019-11-28 17:18:10,959 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2019-11-28 17:18:10,959 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:18:10,960 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:18:10,960 INFO L410 AbstractCegarLoop]: === Iteration 16 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:18:10,960 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:18:10,961 INFO L82 PathProgramCache]: Analyzing trace with hash 738594347, now seen corresponding path program 1 times [2019-11-28 17:18:10,961 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:18:10,961 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [504457043] [2019-11-28 17:18:10,961 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:18:10,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:18:11,091 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 17:18:11,092 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [504457043] [2019-11-28 17:18:11,092 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:18:11,092 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-11-28 17:18:11,093 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1799358824] [2019-11-28 17:18:11,093 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-11-28 17:18:11,093 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:18:11,094 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-11-28 17:18:11,094 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2019-11-28 17:18:11,094 INFO L87 Difference]: Start difference. First operand 2607 states and 4657 transitions. Second operand 8 states. [2019-11-28 17:18:11,664 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:18:11,664 INFO L93 Difference]: Finished difference Result 2759 states and 4897 transitions. [2019-11-28 17:18:11,665 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-11-28 17:18:11,665 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 85 [2019-11-28 17:18:11,665 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:18:11,680 INFO L225 Difference]: With dead ends: 2759 [2019-11-28 17:18:11,681 INFO L226 Difference]: Without dead ends: 2637 [2019-11-28 17:18:11,683 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=64, Invalid=118, Unknown=0, NotChecked=0, Total=182 [2019-11-28 17:18:11,687 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2637 states. [2019-11-28 17:18:11,858 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2637 to 2604. [2019-11-28 17:18:11,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2604 states. [2019-11-28 17:18:11,869 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2604 states to 2604 states and 4645 transitions. [2019-11-28 17:18:11,870 INFO L78 Accepts]: Start accepts. Automaton has 2604 states and 4645 transitions. Word has length 85 [2019-11-28 17:18:11,870 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:18:11,870 INFO L462 AbstractCegarLoop]: Abstraction has 2604 states and 4645 transitions. [2019-11-28 17:18:11,871 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-11-28 17:18:11,871 INFO L276 IsEmpty]: Start isEmpty. Operand 2604 states and 4645 transitions. [2019-11-28 17:18:11,877 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2019-11-28 17:18:11,878 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:18:11,878 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:18:11,878 INFO L410 AbstractCegarLoop]: === Iteration 17 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:18:11,879 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:18:11,879 INFO L82 PathProgramCache]: Analyzing trace with hash 1592644432, now seen corresponding path program 1 times [2019-11-28 17:18:11,879 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:18:11,879 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1789558498] [2019-11-28 17:18:11,880 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:18:11,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:18:11,996 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 17:18:11,997 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1789558498] [2019-11-28 17:18:11,997 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:18:11,997 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-28 17:18:11,998 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1235950037] [2019-11-28 17:18:11,998 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-11-28 17:18:11,998 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:18:11,999 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-11-28 17:18:11,999 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-11-28 17:18:11,999 INFO L87 Difference]: Start difference. First operand 2604 states and 4645 transitions. Second operand 4 states. [2019-11-28 17:18:12,274 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:18:12,275 INFO L93 Difference]: Finished difference Result 5228 states and 9313 transitions. [2019-11-28 17:18:12,275 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-11-28 17:18:12,276 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 85 [2019-11-28 17:18:12,276 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:18:12,299 INFO L225 Difference]: With dead ends: 5228 [2019-11-28 17:18:12,300 INFO L226 Difference]: Without dead ends: 3878 [2019-11-28 17:18:12,304 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2019-11-28 17:18:12,310 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3878 states. [2019-11-28 17:18:12,485 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3878 to 2591. [2019-11-28 17:18:12,485 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2591 states. [2019-11-28 17:18:12,495 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2591 states to 2591 states and 4628 transitions. [2019-11-28 17:18:12,495 INFO L78 Accepts]: Start accepts. Automaton has 2591 states and 4628 transitions. Word has length 85 [2019-11-28 17:18:12,496 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:18:12,496 INFO L462 AbstractCegarLoop]: Abstraction has 2591 states and 4628 transitions. [2019-11-28 17:18:12,496 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-11-28 17:18:12,496 INFO L276 IsEmpty]: Start isEmpty. Operand 2591 states and 4628 transitions. [2019-11-28 17:18:12,503 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2019-11-28 17:18:12,503 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:18:12,503 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:18:12,504 INFO L410 AbstractCegarLoop]: === Iteration 18 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:18:12,504 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:18:12,504 INFO L82 PathProgramCache]: Analyzing trace with hash 1780593588, now seen corresponding path program 1 times [2019-11-28 17:18:12,504 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:18:12,505 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1721079563] [2019-11-28 17:18:12,505 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:18:12,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:18:12,609 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 17:18:12,610 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1721079563] [2019-11-28 17:18:12,610 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:18:12,610 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-11-28 17:18:12,611 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1371907915] [2019-11-28 17:18:12,611 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-11-28 17:18:12,611 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:18:12,611 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-11-28 17:18:12,612 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2019-11-28 17:18:12,612 INFO L87 Difference]: Start difference. First operand 2591 states and 4628 transitions. Second operand 8 states. [2019-11-28 17:18:12,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:18:12,923 INFO L93 Difference]: Finished difference Result 2591 states and 4628 transitions. [2019-11-28 17:18:12,923 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-11-28 17:18:12,923 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 87 [2019-11-28 17:18:12,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:18:12,924 INFO L225 Difference]: With dead ends: 2591 [2019-11-28 17:18:12,924 INFO L226 Difference]: Without dead ends: 0 [2019-11-28 17:18:12,927 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2019-11-28 17:18:12,927 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2019-11-28 17:18:12,928 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2019-11-28 17:18:12,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2019-11-28 17:18:12,928 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2019-11-28 17:18:12,929 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 87 [2019-11-28 17:18:12,929 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:18:12,929 INFO L462 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-28 17:18:12,929 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-11-28 17:18:12,929 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2019-11-28 17:18:12,930 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2019-11-28 17:18:12,932 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2019-11-28 17:18:13,121 WARN L192 SmtUtils]: Spent 182.00 ms on a formula simplification. DAG size of input: 138 DAG size of output: 132 [2019-11-28 17:18:13,310 WARN L192 SmtUtils]: Spent 184.00 ms on a formula simplification. DAG size of input: 138 DAG size of output: 132 [2019-11-28 17:18:13,646 WARN L192 SmtUtils]: Spent 224.00 ms on a formula simplification. DAG size of input: 140 DAG size of output: 134 [2019-11-28 17:18:14,095 WARN L192 SmtUtils]: Spent 265.00 ms on a formula simplification. DAG size of input: 155 DAG size of output: 149 [2019-11-28 17:18:14,396 WARN L192 SmtUtils]: Spent 246.00 ms on a formula simplification. DAG size of input: 158 DAG size of output: 152 [2019-11-28 17:18:14,661 WARN L192 SmtUtils]: Spent 261.00 ms on a formula simplification. DAG size of input: 153 DAG size of output: 147 [2019-11-28 17:18:15,029 WARN L192 SmtUtils]: Spent 211.00 ms on a formula simplification. DAG size of input: 155 DAG size of output: 149 [2019-11-28 17:18:15,738 WARN L192 SmtUtils]: Spent 196.00 ms on a formula simplification. DAG size of input: 155 DAG size of output: 149 [2019-11-28 17:18:16,065 WARN L192 SmtUtils]: Spent 141.00 ms on a formula simplification. DAG size of input: 155 DAG size of output: 149 [2019-11-28 17:18:16,702 WARN L192 SmtUtils]: Spent 174.00 ms on a formula simplification. DAG size of input: 155 DAG size of output: 149 [2019-11-28 17:18:18,041 WARN L192 SmtUtils]: Spent 572.00 ms on a formula simplification. DAG size of input: 131 DAG size of output: 47 [2019-11-28 17:18:18,467 WARN L192 SmtUtils]: Spent 423.00 ms on a formula simplification. DAG size of input: 131 DAG size of output: 47 [2019-11-28 17:18:18,602 WARN L192 SmtUtils]: Spent 133.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:19,122 WARN L192 SmtUtils]: Spent 505.00 ms on a formula simplification. DAG size of input: 133 DAG size of output: 49 [2019-11-28 17:18:19,285 WARN L192 SmtUtils]: Spent 161.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:19,435 WARN L192 SmtUtils]: Spent 149.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:20,220 WARN L192 SmtUtils]: Spent 782.00 ms on a formula simplification. DAG size of input: 148 DAG size of output: 47 [2019-11-28 17:18:20,430 WARN L192 SmtUtils]: Spent 207.00 ms on a formula simplification. DAG size of input: 77 DAG size of output: 33 [2019-11-28 17:18:21,168 WARN L192 SmtUtils]: Spent 736.00 ms on a formula simplification. DAG size of input: 151 DAG size of output: 51 [2019-11-28 17:18:21,804 WARN L192 SmtUtils]: Spent 633.00 ms on a formula simplification. DAG size of input: 146 DAG size of output: 47 [2019-11-28 17:18:21,952 WARN L192 SmtUtils]: Spent 145.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:22,091 WARN L192 SmtUtils]: Spent 137.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:22,234 WARN L192 SmtUtils]: Spent 141.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:22,872 WARN L192 SmtUtils]: Spent 635.00 ms on a formula simplification. DAG size of input: 148 DAG size of output: 47 [2019-11-28 17:18:23,018 WARN L192 SmtUtils]: Spent 142.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:23,168 WARN L192 SmtUtils]: Spent 148.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:23,375 WARN L192 SmtUtils]: Spent 205.00 ms on a formula simplification. DAG size of input: 90 DAG size of output: 36 [2019-11-28 17:18:23,598 WARN L192 SmtUtils]: Spent 221.00 ms on a formula simplification. DAG size of input: 92 DAG size of output: 38 [2019-11-28 17:18:23,743 WARN L192 SmtUtils]: Spent 143.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:23,887 WARN L192 SmtUtils]: Spent 142.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:24,032 WARN L192 SmtUtils]: Spent 143.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:24,176 WARN L192 SmtUtils]: Spent 141.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:24,320 WARN L192 SmtUtils]: Spent 140.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:24,973 WARN L192 SmtUtils]: Spent 649.00 ms on a formula simplification. DAG size of input: 148 DAG size of output: 47 [2019-11-28 17:18:25,114 WARN L192 SmtUtils]: Spent 139.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:25,269 WARN L192 SmtUtils]: Spent 152.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:25,425 WARN L192 SmtUtils]: Spent 140.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:25,572 WARN L192 SmtUtils]: Spent 145.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:26,236 WARN L192 SmtUtils]: Spent 660.00 ms on a formula simplification. DAG size of input: 148 DAG size of output: 47 [2019-11-28 17:18:26,453 WARN L192 SmtUtils]: Spent 125.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 30 [2019-11-28 17:18:26,670 WARN L192 SmtUtils]: Spent 141.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:27,173 WARN L192 SmtUtils]: Spent 428.00 ms on a formula simplification. DAG size of input: 129 DAG size of output: 45 [2019-11-28 17:18:27,301 WARN L192 SmtUtils]: Spent 126.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 30 [2019-11-28 17:18:27,444 WARN L192 SmtUtils]: Spent 142.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:27,570 WARN L192 SmtUtils]: Spent 124.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 30 [2019-11-28 17:18:27,707 WARN L192 SmtUtils]: Spent 135.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:27,833 WARN L192 SmtUtils]: Spent 124.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 30 [2019-11-28 17:18:27,972 WARN L192 SmtUtils]: Spent 136.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:28,122 WARN L192 SmtUtils]: Spent 137.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:28,283 WARN L192 SmtUtils]: Spent 141.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:28,420 WARN L192 SmtUtils]: Spent 136.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:29,114 WARN L192 SmtUtils]: Spent 613.00 ms on a formula simplification. DAG size of input: 148 DAG size of output: 47 [2019-11-28 17:18:29,244 WARN L192 SmtUtils]: Spent 125.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 30 [2019-11-28 17:18:29,748 WARN L192 SmtUtils]: Spent 430.00 ms on a formula simplification. DAG size of input: 129 DAG size of output: 45 [2019-11-28 17:18:29,887 WARN L192 SmtUtils]: Spent 137.00 ms on a formula simplification. DAG size of input: 69 DAG size of output: 29 [2019-11-28 17:18:30,014 WARN L192 SmtUtils]: Spent 125.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 30 [2019-11-28 17:18:30,439 WARN L192 SmtUtils]: Spent 423.00 ms on a formula simplification. DAG size of input: 129 DAG size of output: 45 [2019-11-28 17:18:30,584 WARN L192 SmtUtils]: Spent 142.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:30,734 WARN L192 SmtUtils]: Spent 148.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:31,005 WARN L192 SmtUtils]: Spent 269.00 ms on a formula simplification. DAG size of input: 105 DAG size of output: 45 [2019-11-28 17:18:31,131 WARN L192 SmtUtils]: Spent 125.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 30 [2019-11-28 17:18:31,566 WARN L192 SmtUtils]: Spent 432.00 ms on a formula simplification. DAG size of input: 122 DAG size of output: 44 [2019-11-28 17:18:31,724 WARN L192 SmtUtils]: Spent 156.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:32,211 WARN L192 SmtUtils]: Spent 484.00 ms on a formula simplification. DAG size of input: 130 DAG size of output: 45 [2019-11-28 17:18:32,338 WARN L192 SmtUtils]: Spent 125.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 30 [2019-11-28 17:18:32,492 WARN L192 SmtUtils]: Spent 153.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:32,623 WARN L192 SmtUtils]: Spent 130.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:32,766 WARN L192 SmtUtils]: Spent 141.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:33,385 WARN L192 SmtUtils]: Spent 616.00 ms on a formula simplification. DAG size of input: 148 DAG size of output: 47 [2019-11-28 17:18:33,527 WARN L192 SmtUtils]: Spent 140.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:33,669 WARN L192 SmtUtils]: Spent 141.00 ms on a formula simplification. DAG size of input: 67 DAG size of output: 28 [2019-11-28 17:18:33,809 WARN L192 SmtUtils]: Spent 138.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:33,948 WARN L192 SmtUtils]: Spent 138.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 28 [2019-11-28 17:18:33,954 INFO L242 CegarLoopResult]: At program point L2017(lines 2004 2022) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= |ULTIMATE.start_createEmail_#res| 1) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,954 INFO L242 CegarLoopResult]: At program point L2017-1(lines 2004 2022) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,955 INFO L242 CegarLoopResult]: At program point L2017-2(lines 2004 2022) the Hoare annotation is: false [2019-11-28 17:18:33,955 INFO L249 CegarLoopResult]: At program point L2017-3(lines 2004 2022) the Hoare annotation is: true [2019-11-28 17:18:33,955 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 2690) no Hoare annotation was computed. [2019-11-28 17:18:33,955 INFO L246 CegarLoopResult]: For program point L1621(lines 1621 1637) no Hoare annotation was computed. [2019-11-28 17:18:33,955 INFO L246 CegarLoopResult]: For program point L1621-1(lines 1621 1637) no Hoare annotation was computed. [2019-11-28 17:18:33,955 INFO L246 CegarLoopResult]: For program point L1423(lines 1423 1429) no Hoare annotation was computed. [2019-11-28 17:18:33,955 INFO L246 CegarLoopResult]: For program point L1491(lines 1491 1497) no Hoare annotation was computed. [2019-11-28 17:18:33,955 INFO L246 CegarLoopResult]: For program point L1491-1(lines 1491 1497) no Hoare annotation was computed. [2019-11-28 17:18:33,955 INFO L242 CegarLoopResult]: At program point L1293(lines 1273 1297) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 0 ULTIMATE.start_test_~op1~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,956 INFO L242 CegarLoopResult]: At program point L1293-1(lines 1273 1297) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,956 INFO L242 CegarLoopResult]: At program point L1293-2(lines 1273 1297) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,956 INFO L242 CegarLoopResult]: At program point L1293-3(lines 1273 1297) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,956 INFO L242 CegarLoopResult]: At program point L1293-4(lines 1273 1297) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,956 INFO L242 CegarLoopResult]: At program point L171(lines 161 244) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,957 INFO L246 CegarLoopResult]: For program point L1625(lines 1625 1636) no Hoare annotation was computed. [2019-11-28 17:18:33,957 INFO L246 CegarLoopResult]: For program point L1625-1(lines 1625 1636) no Hoare annotation was computed. [2019-11-28 17:18:33,957 INFO L242 CegarLoopResult]: At program point L304(lines 299 307) the Hoare annotation is: (and (= ~__ste_Client_Keyring0_User0~0 ~__ste_Client_Keyring0_User1~0) (= 1 ~queue_empty~0) (not (= ~rjh~0 1)) (= 0 (+ ~mail_is_sensitive~0 1)) (= 0 ~__ste_Client_Keyring0_User0~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1))) [2019-11-28 17:18:33,957 INFO L242 CegarLoopResult]: At program point L2815-1(lines 2800 2825) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,957 INFO L246 CegarLoopResult]: For program point L2815(lines 2815 2821) no Hoare annotation was computed. [2019-11-28 17:18:33,957 INFO L249 CegarLoopResult]: At program point L2815-3(lines 2800 2825) the Hoare annotation is: true [2019-11-28 17:18:33,957 INFO L246 CegarLoopResult]: For program point L2815-2(lines 2815 2821) no Hoare annotation was computed. [2019-11-28 17:18:33,957 INFO L242 CegarLoopResult]: At program point L107(lines 94 249) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,958 INFO L246 CegarLoopResult]: For program point L1629(lines 1629 1635) no Hoare annotation was computed. [2019-11-28 17:18:33,958 INFO L246 CegarLoopResult]: For program point L1629-1(lines 1629 1635) no Hoare annotation was computed. [2019-11-28 17:18:33,958 INFO L246 CegarLoopResult]: For program point L1365(lines 1365 1401) no Hoare annotation was computed. [2019-11-28 17:18:33,958 INFO L246 CegarLoopResult]: For program point L1365-1(lines 1365 1401) no Hoare annotation was computed. [2019-11-28 17:18:33,958 INFO L246 CegarLoopResult]: For program point L1365-2(lines 1365 1401) no Hoare annotation was computed. [2019-11-28 17:18:33,958 INFO L246 CegarLoopResult]: For program point L1365-3(lines 1365 1401) no Hoare annotation was computed. [2019-11-28 17:18:33,958 INFO L246 CegarLoopResult]: For program point L1233(lines 1233 1249) no Hoare annotation was computed. [2019-11-28 17:18:33,958 INFO L246 CegarLoopResult]: For program point L1365-4(lines 1365 1401) no Hoare annotation was computed. [2019-11-28 17:18:33,958 INFO L246 CegarLoopResult]: For program point L1233-1(lines 1233 1249) no Hoare annotation was computed. [2019-11-28 17:18:33,958 INFO L246 CegarLoopResult]: For program point L176(lines 176 183) no Hoare annotation was computed. [2019-11-28 17:18:33,959 INFO L246 CegarLoopResult]: For program point L1233-2(lines 1233 1249) no Hoare annotation was computed. [2019-11-28 17:18:33,959 INFO L246 CegarLoopResult]: For program point L1233-3(lines 1233 1249) no Hoare annotation was computed. [2019-11-28 17:18:33,959 INFO L246 CegarLoopResult]: For program point L1233-4(lines 1233 1249) no Hoare annotation was computed. [2019-11-28 17:18:33,959 INFO L246 CegarLoopResult]: For program point L1432(lines 1432 1463) no Hoare annotation was computed. [2019-11-28 17:18:33,959 INFO L246 CegarLoopResult]: For program point L1366(lines 1366 1374) no Hoare annotation was computed. [2019-11-28 17:18:33,959 INFO L246 CegarLoopResult]: For program point L1366-2(lines 1366 1374) no Hoare annotation was computed. [2019-11-28 17:18:33,959 INFO L246 CegarLoopResult]: For program point L1366-4(lines 1366 1374) no Hoare annotation was computed. [2019-11-28 17:18:33,959 INFO L246 CegarLoopResult]: For program point L1366-6(lines 1366 1374) no Hoare annotation was computed. [2019-11-28 17:18:33,959 INFO L246 CegarLoopResult]: For program point L1366-8(lines 1366 1374) no Hoare annotation was computed. [2019-11-28 17:18:33,959 INFO L246 CegarLoopResult]: For program point L2027(lines 2027 2035) no Hoare annotation was computed. [2019-11-28 17:18:33,960 INFO L246 CegarLoopResult]: For program point L1433(lines 1433 1444) no Hoare annotation was computed. [2019-11-28 17:18:33,960 INFO L246 CegarLoopResult]: For program point L2160(lines 2160 2171) no Hoare annotation was computed. [2019-11-28 17:18:33,960 INFO L246 CegarLoopResult]: For program point L112(lines 112 116) no Hoare annotation was computed. [2019-11-28 17:18:33,960 INFO L246 CegarLoopResult]: For program point L2160-1(lines 2160 2171) no Hoare annotation was computed. [2019-11-28 17:18:33,960 INFO L246 CegarLoopResult]: For program point L1500(lines 1500 1516) no Hoare annotation was computed. [2019-11-28 17:18:33,960 INFO L246 CegarLoopResult]: For program point L1500-1(lines 1500 1516) no Hoare annotation was computed. [2019-11-28 17:18:33,960 INFO L246 CegarLoopResult]: For program point L2690(line 2690) no Hoare annotation was computed. [2019-11-28 17:18:33,960 INFO L246 CegarLoopResult]: For program point L2690-1(line 2690) no Hoare annotation was computed. [2019-11-28 17:18:33,960 INFO L246 CegarLoopResult]: For program point L1501(lines 1501 1512) no Hoare annotation was computed. [2019-11-28 17:18:33,960 INFO L246 CegarLoopResult]: For program point L1501-1(lines 1501 1512) no Hoare annotation was computed. [2019-11-28 17:18:33,961 INFO L246 CegarLoopResult]: For program point L1369(lines 1369 1373) no Hoare annotation was computed. [2019-11-28 17:18:33,961 INFO L246 CegarLoopResult]: For program point L1369-3(lines 1369 1373) no Hoare annotation was computed. [2019-11-28 17:18:33,961 INFO L246 CegarLoopResult]: For program point L1237(lines 1237 1248) no Hoare annotation was computed. [2019-11-28 17:18:33,961 INFO L246 CegarLoopResult]: For program point L1237-1(lines 1237 1248) no Hoare annotation was computed. [2019-11-28 17:18:33,961 INFO L246 CegarLoopResult]: For program point L1237-2(lines 1237 1248) no Hoare annotation was computed. [2019-11-28 17:18:33,961 INFO L246 CegarLoopResult]: For program point L1369-6(lines 1369 1373) no Hoare annotation was computed. [2019-11-28 17:18:33,961 INFO L246 CegarLoopResult]: For program point L1237-3(lines 1237 1248) no Hoare annotation was computed. [2019-11-28 17:18:33,961 INFO L246 CegarLoopResult]: For program point L1237-4(lines 1237 1248) no Hoare annotation was computed. [2019-11-28 17:18:33,961 INFO L246 CegarLoopResult]: For program point L1369-9(lines 1369 1373) no Hoare annotation was computed. [2019-11-28 17:18:33,961 INFO L246 CegarLoopResult]: For program point L2030(lines 2030 2034) no Hoare annotation was computed. [2019-11-28 17:18:33,962 INFO L246 CegarLoopResult]: For program point L1369-12(lines 1369 1373) no Hoare annotation was computed. [2019-11-28 17:18:33,962 INFO L242 CegarLoopResult]: At program point L2030-2(lines 2023 2038) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_email_to0~0 2) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,962 INFO L242 CegarLoopResult]: At program point L1634(lines 1617 1640) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= |ULTIMATE.start_createEmail_#res| 1) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,962 INFO L242 CegarLoopResult]: At program point L1634-1(lines 1617 1640) the Hoare annotation is: false [2019-11-28 17:18:33,962 INFO L246 CegarLoopResult]: For program point L1767(lines 1767 1789) no Hoare annotation was computed. [2019-11-28 17:18:33,962 INFO L242 CegarLoopResult]: At program point L1767-1(lines 1767 1789) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= ULTIMATE.start_getClientPrivateKey_~handle 2) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,962 INFO L246 CegarLoopResult]: For program point L1767-2(lines 1767 1789) no Hoare annotation was computed. [2019-11-28 17:18:33,963 INFO L249 CegarLoopResult]: At program point L1767-3(lines 1767 1789) the Hoare annotation is: true [2019-11-28 17:18:33,963 INFO L246 CegarLoopResult]: For program point L1437(lines 1437 1443) no Hoare annotation was computed. [2019-11-28 17:18:33,963 INFO L246 CegarLoopResult]: For program point L2164(lines 2164 2170) no Hoare annotation was computed. [2019-11-28 17:18:33,963 INFO L246 CegarLoopResult]: For program point L2164-1(lines 2164 2170) no Hoare annotation was computed. [2019-11-28 17:18:33,963 INFO L246 CegarLoopResult]: For program point L1505(lines 1505 1511) no Hoare annotation was computed. [2019-11-28 17:18:33,963 INFO L246 CegarLoopResult]: For program point L1505-1(lines 1505 1511) no Hoare annotation was computed. [2019-11-28 17:18:33,963 INFO L246 CegarLoopResult]: For program point L1241(lines 1241 1247) no Hoare annotation was computed. [2019-11-28 17:18:33,963 INFO L246 CegarLoopResult]: For program point L1241-1(lines 1241 1247) no Hoare annotation was computed. [2019-11-28 17:18:33,963 INFO L246 CegarLoopResult]: For program point L1241-2(lines 1241 1247) no Hoare annotation was computed. [2019-11-28 17:18:33,964 INFO L242 CegarLoopResult]: At program point L118(lines 108 248) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,964 INFO L246 CegarLoopResult]: For program point L1241-3(lines 1241 1247) no Hoare annotation was computed. [2019-11-28 17:18:33,964 INFO L246 CegarLoopResult]: For program point L1241-4(lines 1241 1247) no Hoare annotation was computed. [2019-11-28 17:18:33,964 INFO L242 CegarLoopResult]: At program point L251(lines 85 252) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,964 INFO L242 CegarLoopResult]: At program point L185(lines 172 243) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,964 INFO L246 CegarLoopResult]: For program point L1771(lines 1771 1786) no Hoare annotation was computed. [2019-11-28 17:18:33,964 INFO L246 CegarLoopResult]: For program point L1771-2(lines 1771 1786) no Hoare annotation was computed. [2019-11-28 17:18:33,964 INFO L246 CegarLoopResult]: For program point L1376(lines 1376 1400) no Hoare annotation was computed. [2019-11-28 17:18:33,965 INFO L246 CegarLoopResult]: For program point L1376-1(lines 1376 1400) no Hoare annotation was computed. [2019-11-28 17:18:33,965 INFO L246 CegarLoopResult]: For program point L1376-2(lines 1376 1400) no Hoare annotation was computed. [2019-11-28 17:18:33,965 INFO L246 CegarLoopResult]: For program point L1376-3(lines 1376 1400) no Hoare annotation was computed. [2019-11-28 17:18:33,965 INFO L246 CegarLoopResult]: For program point L1376-4(lines 1376 1400) no Hoare annotation was computed. [2019-11-28 17:18:33,965 INFO L249 CegarLoopResult]: At program point L2169-1(lines 2156 2174) the Hoare annotation is: true [2019-11-28 17:18:33,965 INFO L242 CegarLoopResult]: At program point L2169(lines 2156 2174) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= ULTIMATE.start_getClientPrivateKey_~handle 2) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,965 INFO L242 CegarLoopResult]: At program point L1839(lines 1834 1842) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= ULTIMATE.start_getClientPrivateKey_~handle 2) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (not (= 0 |ULTIMATE.start_is_queue_empty_#res|)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,966 INFO L242 CegarLoopResult]: At program point L452(lines 432 454) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientPrivateKey_~handle 2)) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_client_privateKey1~0 456) (= ~__ste_Client_Keyring0_User0~0 ~__ste_Client_Keyring0_User1~0) (not (= 2 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= 0 ~__ste_Client_Keyring0_User0~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,966 INFO L246 CegarLoopResult]: For program point L1377(lines 1377 1385) no Hoare annotation was computed. [2019-11-28 17:18:33,966 INFO L246 CegarLoopResult]: For program point L1311(lines 1311 1357) no Hoare annotation was computed. [2019-11-28 17:18:33,966 INFO L246 CegarLoopResult]: For program point L1377-2(lines 1377 1385) no Hoare annotation was computed. [2019-11-28 17:18:33,966 INFO L246 CegarLoopResult]: For program point L1377-4(lines 1377 1385) no Hoare annotation was computed. [2019-11-28 17:18:33,966 INFO L246 CegarLoopResult]: For program point L1377-6(lines 1377 1385) no Hoare annotation was computed. [2019-11-28 17:18:33,966 INFO L246 CegarLoopResult]: For program point L1377-8(lines 1377 1385) no Hoare annotation was computed. [2019-11-28 17:18:33,966 INFO L246 CegarLoopResult]: For program point L1312(lines 1312 1323) no Hoare annotation was computed. [2019-11-28 17:18:33,966 INFO L242 CegarLoopResult]: At program point L1246(lines 1229 1252) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 0 ULTIMATE.start_test_~op1~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,967 INFO L242 CegarLoopResult]: At program point L1246-1(lines 1229 1252) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,967 INFO L242 CegarLoopResult]: At program point L1246-2(lines 1229 1252) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,967 INFO L246 CegarLoopResult]: For program point L123(lines 123 130) no Hoare annotation was computed. [2019-11-28 17:18:33,967 INFO L242 CegarLoopResult]: At program point L1246-3(lines 1229 1252) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,967 INFO L242 CegarLoopResult]: At program point L1246-4(lines 1229 1252) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,967 INFO L246 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2019-11-28 17:18:33,967 INFO L246 CegarLoopResult]: For program point L190(lines 190 194) no Hoare annotation was computed. [2019-11-28 17:18:33,968 INFO L246 CegarLoopResult]: For program point L1776(lines 1776 1783) no Hoare annotation was computed. [2019-11-28 17:18:33,968 INFO L246 CegarLoopResult]: For program point L1776-2(lines 1776 1783) no Hoare annotation was computed. [2019-11-28 17:18:33,968 INFO L246 CegarLoopResult]: For program point L1446(lines 1446 1462) no Hoare annotation was computed. [2019-11-28 17:18:33,968 INFO L246 CegarLoopResult]: For program point L1380(lines 1380 1384) no Hoare annotation was computed. [2019-11-28 17:18:33,968 INFO L246 CegarLoopResult]: For program point L1380-3(lines 1380 1384) no Hoare annotation was computed. [2019-11-28 17:18:33,968 INFO L246 CegarLoopResult]: For program point L1380-6(lines 1380 1384) no Hoare annotation was computed. [2019-11-28 17:18:33,968 INFO L246 CegarLoopResult]: For program point L1380-9(lines 1380 1384) no Hoare annotation was computed. [2019-11-28 17:18:33,968 INFO L246 CegarLoopResult]: For program point L1380-12(lines 1380 1384) no Hoare annotation was computed. [2019-11-28 17:18:33,968 INFO L246 CegarLoopResult]: For program point L1645(lines 1645 1657) no Hoare annotation was computed. [2019-11-28 17:18:33,968 INFO L246 CegarLoopResult]: For program point L1645-2(lines 1645 1657) no Hoare annotation was computed. [2019-11-28 17:18:33,969 INFO L246 CegarLoopResult]: For program point L1645-4(lines 1645 1657) no Hoare annotation was computed. [2019-11-28 17:18:33,969 INFO L246 CegarLoopResult]: For program point L1447(lines 1447 1458) no Hoare annotation was computed. [2019-11-28 17:18:33,969 INFO L246 CegarLoopResult]: For program point L1316(lines 1316 1322) no Hoare annotation was computed. [2019-11-28 17:18:33,969 INFO L242 CegarLoopResult]: At program point L1515(lines 1468 1521) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,969 INFO L242 CegarLoopResult]: At program point L1515-1(lines 1468 1521) the Hoare annotation is: false [2019-11-28 17:18:33,969 INFO L246 CegarLoopResult]: For program point L1648(lines 1648 1656) no Hoare annotation was computed. [2019-11-28 17:18:33,969 INFO L246 CegarLoopResult]: For program point L1648-2(lines 1648 1656) no Hoare annotation was computed. [2019-11-28 17:18:33,969 INFO L246 CegarLoopResult]: For program point L1648-4(lines 1648 1656) no Hoare annotation was computed. [2019-11-28 17:18:33,970 INFO L246 CegarLoopResult]: For program point L1186(lines 1186 1202) no Hoare annotation was computed. [2019-11-28 17:18:33,970 INFO L246 CegarLoopResult]: For program point L1186-1(lines 1186 1202) no Hoare annotation was computed. [2019-11-28 17:18:33,970 INFO L246 CegarLoopResult]: For program point L1451(lines 1451 1457) no Hoare annotation was computed. [2019-11-28 17:18:33,970 INFO L242 CegarLoopResult]: At program point L196(lines 186 242) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,970 INFO L242 CegarLoopResult]: At program point L1848(lines 1843 1851) the Hoare annotation is: false [2019-11-28 17:18:33,970 INFO L246 CegarLoopResult]: For program point L2179(lines 2179 2187) no Hoare annotation was computed. [2019-11-28 17:18:33,970 INFO L246 CegarLoopResult]: For program point L2179-2(lines 2179 2187) no Hoare annotation was computed. [2019-11-28 17:18:33,970 INFO L246 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2019-11-28 17:18:33,970 INFO L246 CegarLoopResult]: For program point L2179-4(lines 2179 2187) no Hoare annotation was computed. [2019-11-28 17:18:33,971 INFO L246 CegarLoopResult]: For program point L2179-6(lines 2179 2187) no Hoare annotation was computed. [2019-11-28 17:18:33,971 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 2690) no Hoare annotation was computed. [2019-11-28 17:18:33,971 INFO L246 CegarLoopResult]: For program point L1651(lines 1651 1655) no Hoare annotation was computed. [2019-11-28 17:18:33,971 INFO L242 CegarLoopResult]: At program point L1651-2(lines 1 2825) the Hoare annotation is: (and (= ~__ste_Client_Keyring0_User0~0 ~__ste_Client_Keyring0_User1~0) (= 1 ~queue_empty~0) (not (= ~rjh~0 1)) (not (= ULTIMATE.start_setClientId_~handle 2)) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= 0 ~__ste_Client_Keyring0_User0~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1))) [2019-11-28 17:18:33,971 INFO L246 CegarLoopResult]: For program point L1651-3(lines 1651 1655) no Hoare annotation was computed. [2019-11-28 17:18:33,971 INFO L242 CegarLoopResult]: At program point L1651-5(lines 1 2825) the Hoare annotation is: (and (= ~__ste_Client_Keyring0_User0~0 ~__ste_Client_Keyring0_User1~0) (= 1 ~queue_empty~0) (= ULTIMATE.start_setClientId_~handle 2) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_rjh_~rjh___0) (= 0 ~__ste_Client_Keyring0_User0~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (= ~rjh~0 2)) [2019-11-28 17:18:33,971 INFO L246 CegarLoopResult]: For program point L1651-6(lines 1651 1655) no Hoare annotation was computed. [2019-11-28 17:18:33,972 INFO L242 CegarLoopResult]: At program point L1651-8(lines 1 2825) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= 456 ULTIMATE.start_setClientPrivateKey_~value) (= ULTIMATE.start_setClientPrivateKey_~handle 2) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_client_privateKey1~0 456) (= ~__ste_Client_Keyring0_User0~0 ~__ste_Client_Keyring0_User1~0) (not (= 2 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= 0 ~__ste_Client_Keyring0_User0~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,972 INFO L246 CegarLoopResult]: For program point L1387(lines 1387 1399) no Hoare annotation was computed. [2019-11-28 17:18:33,972 INFO L242 CegarLoopResult]: At program point L1387-1(lines 1361 1404) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 0 ULTIMATE.start_test_~op1~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,972 INFO L246 CegarLoopResult]: For program point L1387-2(lines 1387 1399) no Hoare annotation was computed. [2019-11-28 17:18:33,972 INFO L242 CegarLoopResult]: At program point L1387-3(lines 1361 1404) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,972 INFO L246 CegarLoopResult]: For program point L1387-4(lines 1387 1399) no Hoare annotation was computed. [2019-11-28 17:18:33,972 INFO L242 CegarLoopResult]: At program point L1387-5(lines 1361 1404) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,972 INFO L246 CegarLoopResult]: For program point L1387-6(lines 1387 1399) no Hoare annotation was computed. [2019-11-28 17:18:33,973 INFO L242 CegarLoopResult]: At program point L132(lines 119 247) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,973 INFO L242 CegarLoopResult]: At program point L1387-7(lines 1361 1404) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,973 INFO L246 CegarLoopResult]: For program point L1387-8(lines 1387 1399) no Hoare annotation was computed. [2019-11-28 17:18:33,973 INFO L242 CegarLoopResult]: At program point L1387-9(lines 1361 1404) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,973 INFO L246 CegarLoopResult]: For program point L1388(lines 1388 1396) no Hoare annotation was computed. [2019-11-28 17:18:33,973 INFO L246 CegarLoopResult]: For program point L1388-2(lines 1388 1396) no Hoare annotation was computed. [2019-11-28 17:18:33,973 INFO L246 CegarLoopResult]: For program point L1388-4(lines 1388 1396) no Hoare annotation was computed. [2019-11-28 17:18:33,973 INFO L246 CegarLoopResult]: For program point L1388-6(lines 1388 1396) no Hoare annotation was computed. [2019-11-28 17:18:33,974 INFO L246 CegarLoopResult]: For program point L1190(lines 1190 1201) no Hoare annotation was computed. [2019-11-28 17:18:33,974 INFO L246 CegarLoopResult]: For program point L1190-1(lines 1190 1201) no Hoare annotation was computed. [2019-11-28 17:18:33,974 INFO L246 CegarLoopResult]: For program point L1388-8(lines 1388 1396) no Hoare annotation was computed. [2019-11-28 17:18:33,974 INFO L246 CegarLoopResult]: For program point L1257(lines 1257 1269) no Hoare annotation was computed. [2019-11-28 17:18:33,974 INFO L246 CegarLoopResult]: For program point L1257-2(lines 1257 1269) no Hoare annotation was computed. [2019-11-28 17:18:33,974 INFO L246 CegarLoopResult]: For program point L2182(lines 2182 2186) no Hoare annotation was computed. [2019-11-28 17:18:33,974 INFO L246 CegarLoopResult]: For program point L1257-4(lines 1257 1269) no Hoare annotation was computed. [2019-11-28 17:18:33,974 INFO L242 CegarLoopResult]: At program point L2182-2(lines 2175 2190) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,975 INFO L246 CegarLoopResult]: For program point L1257-6(lines 1257 1269) no Hoare annotation was computed. [2019-11-28 17:18:33,975 INFO L246 CegarLoopResult]: For program point L2182-3(lines 2182 2186) no Hoare annotation was computed. [2019-11-28 17:18:33,975 INFO L246 CegarLoopResult]: For program point L1257-8(lines 1257 1269) no Hoare annotation was computed. [2019-11-28 17:18:33,975 INFO L246 CegarLoopResult]: For program point L2182-6(lines 2182 2186) no Hoare annotation was computed. [2019-11-28 17:18:33,975 INFO L242 CegarLoopResult]: At program point L2182-8(lines 2175 2190) the Hoare annotation is: false [2019-11-28 17:18:33,975 INFO L246 CegarLoopResult]: For program point L2182-9(lines 2182 2186) no Hoare annotation was computed. [2019-11-28 17:18:33,975 INFO L246 CegarLoopResult]: For program point L465(lines 465 472) no Hoare annotation was computed. [2019-11-28 17:18:33,975 INFO L249 CegarLoopResult]: At program point L465-1(lines 465 472) the Hoare annotation is: true [2019-11-28 17:18:33,975 INFO L246 CegarLoopResult]: For program point L201(lines 201 208) no Hoare annotation was computed. [2019-11-28 17:18:33,975 INFO L246 CegarLoopResult]: For program point L1721(lines 1721 1728) no Hoare annotation was computed. [2019-11-28 17:18:33,976 INFO L242 CegarLoopResult]: At program point L1721-1(lines 1721 1728) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,976 INFO L246 CegarLoopResult]: For program point L1721-2(lines 1721 1728) no Hoare annotation was computed. [2019-11-28 17:18:33,976 INFO L242 CegarLoopResult]: At program point L1721-3(lines 1721 1728) the Hoare annotation is: false [2019-11-28 17:18:33,976 INFO L246 CegarLoopResult]: For program point L1391(lines 1391 1395) no Hoare annotation was computed. [2019-11-28 17:18:33,976 INFO L246 CegarLoopResult]: For program point L1325(lines 1325 1356) no Hoare annotation was computed. [2019-11-28 17:18:33,976 INFO L246 CegarLoopResult]: For program point L1391-3(lines 1391 1395) no Hoare annotation was computed. [2019-11-28 17:18:33,976 INFO L246 CegarLoopResult]: For program point L1391-6(lines 1391 1395) no Hoare annotation was computed. [2019-11-28 17:18:33,976 INFO L246 CegarLoopResult]: For program point L1391-9(lines 1391 1395) no Hoare annotation was computed. [2019-11-28 17:18:33,976 INFO L246 CegarLoopResult]: For program point L1391-12(lines 1391 1395) no Hoare annotation was computed. [2019-11-28 17:18:33,977 INFO L246 CegarLoopResult]: For program point L1326(lines 1326 1337) no Hoare annotation was computed. [2019-11-28 17:18:33,977 INFO L246 CegarLoopResult]: For program point L1260(lines 1260 1268) no Hoare annotation was computed. [2019-11-28 17:18:33,977 INFO L246 CegarLoopResult]: For program point L1260-2(lines 1260 1268) no Hoare annotation was computed. [2019-11-28 17:18:33,977 INFO L246 CegarLoopResult]: For program point L1194(lines 1194 1200) no Hoare annotation was computed. [2019-11-28 17:18:33,977 INFO L246 CegarLoopResult]: For program point L137(lines 137 144) no Hoare annotation was computed. [2019-11-28 17:18:33,977 INFO L246 CegarLoopResult]: For program point L1194-1(lines 1194 1200) no Hoare annotation was computed. [2019-11-28 17:18:33,977 INFO L246 CegarLoopResult]: For program point L1260-4(lines 1260 1268) no Hoare annotation was computed. [2019-11-28 17:18:33,977 INFO L246 CegarLoopResult]: For program point L1260-6(lines 1260 1268) no Hoare annotation was computed. [2019-11-28 17:18:33,977 INFO L246 CegarLoopResult]: For program point L1260-8(lines 1260 1268) no Hoare annotation was computed. [2019-11-28 17:18:33,978 INFO L246 CegarLoopResult]: For program point L1526(lines 1526 1562) no Hoare annotation was computed. [2019-11-28 17:18:33,978 INFO L246 CegarLoopResult]: For program point L1526-1(lines 1526 1562) no Hoare annotation was computed. [2019-11-28 17:18:33,978 INFO L246 CegarLoopResult]: For program point L1526-2(lines 1526 1562) no Hoare annotation was computed. [2019-11-28 17:18:33,978 INFO L246 CegarLoopResult]: For program point L1526-3(lines 1526 1562) no Hoare annotation was computed. [2019-11-28 17:18:33,978 INFO L246 CegarLoopResult]: For program point L1526-4(lines 1526 1562) no Hoare annotation was computed. [2019-11-28 17:18:33,978 INFO L242 CegarLoopResult]: At program point L1857(lines 1852 1860) the Hoare annotation is: false [2019-11-28 17:18:33,978 INFO L246 CegarLoopResult]: For program point L1527(lines 1527 1535) no Hoare annotation was computed. [2019-11-28 17:18:33,978 INFO L242 CegarLoopResult]: At program point L1461(lines 1414 1467) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 0 ULTIMATE.start_test_~op1~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,978 INFO L246 CegarLoopResult]: For program point L1527-2(lines 1527 1535) no Hoare annotation was computed. [2019-11-28 17:18:33,978 INFO L246 CegarLoopResult]: For program point L1527-4(lines 1527 1535) no Hoare annotation was computed. [2019-11-28 17:18:33,979 INFO L246 CegarLoopResult]: For program point L1527-6(lines 1527 1535) no Hoare annotation was computed. [2019-11-28 17:18:33,979 INFO L246 CegarLoopResult]: For program point L1263(lines 1263 1267) no Hoare annotation was computed. [2019-11-28 17:18:33,979 INFO L246 CegarLoopResult]: For program point L1527-8(lines 1527 1535) no Hoare annotation was computed. [2019-11-28 17:18:33,979 INFO L242 CegarLoopResult]: At program point L1263-2(lines 1253 1272) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 0 ULTIMATE.start_test_~op1~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,979 INFO L246 CegarLoopResult]: For program point L1263-3(lines 1263 1267) no Hoare annotation was computed. [2019-11-28 17:18:33,979 INFO L242 CegarLoopResult]: At program point L1263-5(lines 1253 1272) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,979 INFO L246 CegarLoopResult]: For program point L1263-6(lines 1263 1267) no Hoare annotation was computed. [2019-11-28 17:18:33,980 INFO L242 CegarLoopResult]: At program point L1263-8(lines 1253 1272) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,980 INFO L246 CegarLoopResult]: For program point L1263-9(lines 1263 1267) no Hoare annotation was computed. [2019-11-28 17:18:33,980 INFO L246 CegarLoopResult]: For program point L1990(lines 1990 1998) no Hoare annotation was computed. [2019-11-28 17:18:33,980 INFO L242 CegarLoopResult]: At program point L1263-11(lines 1253 1272) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,980 INFO L246 CegarLoopResult]: For program point L1990-2(lines 1990 1998) no Hoare annotation was computed. [2019-11-28 17:18:33,980 INFO L246 CegarLoopResult]: For program point L1263-12(lines 1263 1267) no Hoare annotation was computed. [2019-11-28 17:18:33,980 INFO L246 CegarLoopResult]: For program point L1990-4(lines 1990 1998) no Hoare annotation was computed. [2019-11-28 17:18:33,980 INFO L242 CegarLoopResult]: At program point L1263-14(lines 1253 1272) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,980 INFO L246 CegarLoopResult]: For program point L1330(lines 1330 1336) no Hoare annotation was computed. [2019-11-28 17:18:33,981 INFO L246 CegarLoopResult]: For program point L2123-1(lines 2123 2134) no Hoare annotation was computed. [2019-11-28 17:18:33,981 INFO L246 CegarLoopResult]: For program point L2123(lines 2123 2134) no Hoare annotation was computed. [2019-11-28 17:18:33,981 INFO L246 CegarLoopResult]: For program point L2123-3(lines 2123 2134) no Hoare annotation was computed. [2019-11-28 17:18:33,981 INFO L246 CegarLoopResult]: For program point L2123-2(lines 2123 2134) no Hoare annotation was computed. [2019-11-28 17:18:33,981 INFO L246 CegarLoopResult]: For program point L2123-5(lines 2123 2134) no Hoare annotation was computed. [2019-11-28 17:18:33,981 INFO L246 CegarLoopResult]: For program point L2123-4(lines 2123 2134) no Hoare annotation was computed. [2019-11-28 17:18:33,981 INFO L242 CegarLoopResult]: At program point L1199(lines 1182 1205) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= ULTIMATE.start_getClientPrivateKey_~handle 2) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,981 INFO L249 CegarLoopResult]: At program point L1199-1(lines 1182 1205) the Hoare annotation is: true [2019-11-28 17:18:33,981 INFO L246 CegarLoopResult]: For program point L1530(lines 1530 1534) no Hoare annotation was computed. [2019-11-28 17:18:33,982 INFO L249 CegarLoopResult]: At program point L473(lines 455 475) the Hoare annotation is: true [2019-11-28 17:18:33,982 INFO L246 CegarLoopResult]: For program point L1530-3(lines 1530 1534) no Hoare annotation was computed. [2019-11-28 17:18:33,982 INFO L246 CegarLoopResult]: For program point L1530-6(lines 1530 1534) no Hoare annotation was computed. [2019-11-28 17:18:33,982 INFO L246 CegarLoopResult]: For program point L1530-9(lines 1530 1534) no Hoare annotation was computed. [2019-11-28 17:18:33,982 INFO L246 CegarLoopResult]: For program point L1530-12(lines 1530 1534) no Hoare annotation was computed. [2019-11-28 17:18:33,982 INFO L246 CegarLoopResult]: For program point L1993(lines 1993 1997) no Hoare annotation was computed. [2019-11-28 17:18:33,982 INFO L242 CegarLoopResult]: At program point L1993-2(lines 1986 2001) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (= 1 ULTIMATE.start_createEmail_~msg~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,982 INFO L246 CegarLoopResult]: For program point L1993-3(lines 1993 1997) no Hoare annotation was computed. [2019-11-28 17:18:33,983 INFO L242 CegarLoopResult]: At program point L1993-5(lines 1986 2001) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= |ULTIMATE.start_createEmail_#res| 1) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,983 INFO L246 CegarLoopResult]: For program point L1993-6(lines 1993 1997) no Hoare annotation was computed. [2019-11-28 17:18:33,983 INFO L242 CegarLoopResult]: At program point L1993-8(lines 1986 2001) the Hoare annotation is: false [2019-11-28 17:18:33,983 INFO L242 CegarLoopResult]: At program point L210(lines 197 241) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,983 INFO L246 CegarLoopResult]: For program point L409(lines 409 417) no Hoare annotation was computed. [2019-11-28 17:18:33,983 INFO L246 CegarLoopResult]: For program point L2127-1(lines 2127 2133) no Hoare annotation was computed. [2019-11-28 17:18:33,983 INFO L246 CegarLoopResult]: For program point L2127(lines 2127 2133) no Hoare annotation was computed. [2019-11-28 17:18:33,983 INFO L246 CegarLoopResult]: For program point L2127-3(lines 2127 2133) no Hoare annotation was computed. [2019-11-28 17:18:33,983 INFO L246 CegarLoopResult]: For program point L2127-2(lines 2127 2133) no Hoare annotation was computed. [2019-11-28 17:18:33,984 INFO L246 CegarLoopResult]: For program point L2127-5(lines 2127 2133) no Hoare annotation was computed. [2019-11-28 17:18:33,984 INFO L246 CegarLoopResult]: For program point L2127-4(lines 2127 2133) no Hoare annotation was computed. [2019-11-28 17:18:33,984 INFO L242 CegarLoopResult]: At program point L146(lines 133 246) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,984 INFO L246 CegarLoopResult]: For program point L215(lines 215 222) no Hoare annotation was computed. [2019-11-28 17:18:33,984 INFO L246 CegarLoopResult]: For program point L1537(lines 1537 1561) no Hoare annotation was computed. [2019-11-28 17:18:33,984 INFO L246 CegarLoopResult]: For program point L1537-1(lines 1537 1561) no Hoare annotation was computed. [2019-11-28 17:18:33,984 INFO L246 CegarLoopResult]: For program point L1537-2(lines 1537 1561) no Hoare annotation was computed. [2019-11-28 17:18:33,984 INFO L246 CegarLoopResult]: For program point L1537-3(lines 1537 1561) no Hoare annotation was computed. [2019-11-28 17:18:33,985 INFO L246 CegarLoopResult]: For program point L1537-4(lines 1537 1561) no Hoare annotation was computed. [2019-11-28 17:18:33,985 INFO L246 CegarLoopResult]: For program point L1339(lines 1339 1355) no Hoare annotation was computed. [2019-11-28 17:18:33,985 INFO L242 CegarLoopResult]: At program point L2132(lines 2119 2137) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= |ULTIMATE.start_createEmail_#res| 1) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,985 INFO L242 CegarLoopResult]: At program point L2132-2(lines 2119 2137) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= ULTIMATE.start_getClientPrivateKey_~handle 2) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,985 INFO L242 CegarLoopResult]: At program point L2132-1(lines 2119 2137) the Hoare annotation is: false [2019-11-28 17:18:33,985 INFO L242 CegarLoopResult]: At program point L2132-4(lines 2119 2137) the Hoare annotation is: false [2019-11-28 17:18:33,985 INFO L249 CegarLoopResult]: At program point L2132-3(lines 2119 2137) the Hoare annotation is: true [2019-11-28 17:18:33,985 INFO L249 CegarLoopResult]: At program point L2132-5(lines 2119 2137) the Hoare annotation is: true [2019-11-28 17:18:33,986 INFO L246 CegarLoopResult]: For program point L1538(lines 1538 1546) no Hoare annotation was computed. [2019-11-28 17:18:33,986 INFO L246 CegarLoopResult]: For program point L1538-2(lines 1538 1546) no Hoare annotation was computed. [2019-11-28 17:18:33,986 INFO L246 CegarLoopResult]: For program point L1472(lines 1472 1518) no Hoare annotation was computed. [2019-11-28 17:18:33,986 INFO L246 CegarLoopResult]: For program point L1472-1(lines 1472 1518) no Hoare annotation was computed. [2019-11-28 17:18:33,986 INFO L246 CegarLoopResult]: For program point L1538-4(lines 1538 1546) no Hoare annotation was computed. [2019-11-28 17:18:33,986 INFO L246 CegarLoopResult]: For program point L1340(lines 1340 1351) no Hoare annotation was computed. [2019-11-28 17:18:33,986 INFO L246 CegarLoopResult]: For program point L1538-6(lines 1538 1546) no Hoare annotation was computed. [2019-11-28 17:18:33,986 INFO L246 CegarLoopResult]: For program point L1538-8(lines 1538 1546) no Hoare annotation was computed. [2019-11-28 17:18:33,986 INFO L246 CegarLoopResult]: For program point L151(lines 151 158) no Hoare annotation was computed. [2019-11-28 17:18:33,987 INFO L242 CegarLoopResult]: At program point L2794(lines 2783 2797) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_email_to0~0 2) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,987 INFO L246 CegarLoopResult]: For program point L1473(lines 1473 1484) no Hoare annotation was computed. [2019-11-28 17:18:33,987 INFO L246 CegarLoopResult]: For program point L1473-1(lines 1473 1484) no Hoare annotation was computed. [2019-11-28 17:18:33,987 INFO L246 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2019-11-28 17:18:33,987 INFO L246 CegarLoopResult]: For program point L1870(lines 1870 1880) no Hoare annotation was computed. [2019-11-28 17:18:33,987 INFO L246 CegarLoopResult]: For program point L1870-1(lines 1870 1880) no Hoare annotation was computed. [2019-11-28 17:18:33,987 INFO L246 CegarLoopResult]: For program point L1210(lines 1210 1222) no Hoare annotation was computed. [2019-11-28 17:18:33,987 INFO L246 CegarLoopResult]: For program point L1210-2(lines 1210 1222) no Hoare annotation was computed. [2019-11-28 17:18:33,987 INFO L246 CegarLoopResult]: For program point L87(lines 86 250) no Hoare annotation was computed. [2019-11-28 17:18:33,987 INFO L246 CegarLoopResult]: For program point L1210-4(lines 1210 1222) no Hoare annotation was computed. [2019-11-28 17:18:33,988 INFO L246 CegarLoopResult]: For program point L1210-6(lines 1210 1222) no Hoare annotation was computed. [2019-11-28 17:18:33,988 INFO L246 CegarLoopResult]: For program point L1210-8(lines 1210 1222) no Hoare annotation was computed. [2019-11-28 17:18:33,988 INFO L246 CegarLoopResult]: For program point L1210-10(lines 1210 1222) no Hoare annotation was computed. [2019-11-28 17:18:33,988 INFO L246 CegarLoopResult]: For program point L1541(lines 1541 1545) no Hoare annotation was computed. [2019-11-28 17:18:33,988 INFO L246 CegarLoopResult]: For program point L1541-3(lines 1541 1545) no Hoare annotation was computed. [2019-11-28 17:18:33,988 INFO L246 CegarLoopResult]: For program point L1541-6(lines 1541 1545) no Hoare annotation was computed. [2019-11-28 17:18:33,988 INFO L246 CegarLoopResult]: For program point L1541-9(lines 1541 1545) no Hoare annotation was computed. [2019-11-28 17:18:33,988 INFO L246 CegarLoopResult]: For program point L1541-12(lines 1541 1545) no Hoare annotation was computed. [2019-11-28 17:18:33,988 INFO L246 CegarLoopResult]: For program point L88(lines 88 92) no Hoare annotation was computed. [2019-11-28 17:18:33,988 INFO L246 CegarLoopResult]: For program point L1344(lines 1344 1350) no Hoare annotation was computed. [2019-11-28 17:18:33,988 INFO L246 CegarLoopResult]: For program point L1477(lines 1477 1483) no Hoare annotation was computed. [2019-11-28 17:18:33,988 INFO L246 CegarLoopResult]: For program point L1477-1(lines 1477 1483) no Hoare annotation was computed. [2019-11-28 17:18:33,989 INFO L246 CegarLoopResult]: For program point L1213(lines 1213 1221) no Hoare annotation was computed. [2019-11-28 17:18:33,989 INFO L246 CegarLoopResult]: For program point L1213-2(lines 1213 1221) no Hoare annotation was computed. [2019-11-28 17:18:33,989 INFO L246 CegarLoopResult]: For program point L1213-4(lines 1213 1221) no Hoare annotation was computed. [2019-11-28 17:18:33,989 INFO L246 CegarLoopResult]: For program point L1213-6(lines 1213 1221) no Hoare annotation was computed. [2019-11-28 17:18:33,989 INFO L246 CegarLoopResult]: For program point L1213-8(lines 1213 1221) no Hoare annotation was computed. [2019-11-28 17:18:33,989 INFO L246 CegarLoopResult]: For program point L1213-10(lines 1213 1221) no Hoare annotation was computed. [2019-11-28 17:18:33,989 INFO L246 CegarLoopResult]: For program point L1874(lines 1874 1879) no Hoare annotation was computed. [2019-11-28 17:18:33,989 INFO L246 CegarLoopResult]: For program point L1874-1(lines 1874 1879) no Hoare annotation was computed. [2019-11-28 17:18:33,989 INFO L242 CegarLoopResult]: At program point L1742(lines 1811 1823) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= ULTIMATE.start_getClientPrivateKey_~handle 2) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,990 INFO L242 CegarLoopResult]: At program point L224(lines 211 240) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,990 INFO L246 CegarLoopResult]: For program point L2008(lines 2008 2019) no Hoare annotation was computed. [2019-11-28 17:18:33,990 INFO L246 CegarLoopResult]: For program point L2008-1(lines 2008 2019) no Hoare annotation was computed. [2019-11-28 17:18:33,990 INFO L246 CegarLoopResult]: For program point L2008-2(lines 2008 2019) no Hoare annotation was computed. [2019-11-28 17:18:33,990 INFO L246 CegarLoopResult]: For program point L2008-3(lines 2008 2019) no Hoare annotation was computed. [2019-11-28 17:18:33,990 INFO L246 CegarLoopResult]: For program point L1216(lines 1216 1220) no Hoare annotation was computed. [2019-11-28 17:18:33,990 INFO L242 CegarLoopResult]: At program point L1216-2(lines 1 2825) the Hoare annotation is: (and (= ~__ste_Client_Keyring0_User0~0 ~__ste_Client_Keyring0_User1~0) (= 1 ~queue_empty~0) (not (= ~rjh~0 1)) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= 0 ~__ste_Client_Keyring0_User0~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1))) [2019-11-28 17:18:33,990 INFO L246 CegarLoopResult]: For program point L1216-3(lines 1216 1220) no Hoare annotation was computed. [2019-11-28 17:18:33,990 INFO L242 CegarLoopResult]: At program point L1216-5(lines 1 2825) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~rjh~0 ULTIMATE.start_setClientId_~handle) (= 456 ULTIMATE.start_setClientPrivateKey_~value) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_rjh_~rjh___0) (= ULTIMATE.start_setClientPrivateKey_~handle 2) (not (= ~__ste_email_to0~0 1)) (= ~__ste_client_privateKey1~0 456) (= ~__ste_Client_Keyring0_User0~0 ~__ste_Client_Keyring0_User1~0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (= 0 ~__ste_Client_Keyring0_User0~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,991 INFO L246 CegarLoopResult]: For program point L1216-6(lines 1216 1220) no Hoare annotation was computed. [2019-11-28 17:18:33,991 INFO L242 CegarLoopResult]: At program point L1216-8(lines 1 2825) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientPrivateKey_~handle 2)) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_client_privateKey1~0 456) (= ~__ste_Client_Keyring0_User0~0 ~__ste_Client_Keyring0_User1~0) (not (= 2 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 0 (+ ~mail_is_sensitive~0 1)) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= 0 ~__ste_Client_Keyring0_User0~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,991 INFO L246 CegarLoopResult]: For program point L1216-9(lines 1216 1220) no Hoare annotation was computed. [2019-11-28 17:18:33,991 INFO L242 CegarLoopResult]: At program point L1216-11(lines 1 2825) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,991 INFO L246 CegarLoopResult]: For program point L1216-12(lines 1216 1220) no Hoare annotation was computed. [2019-11-28 17:18:33,991 INFO L242 CegarLoopResult]: At program point L1216-14(lines 578 587) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,991 INFO L246 CegarLoopResult]: For program point L1216-15(lines 1216 1220) no Hoare annotation was computed. [2019-11-28 17:18:33,992 INFO L242 CegarLoopResult]: At program point L1216-17(lines 568 577) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,992 INFO L242 CegarLoopResult]: At program point L160(lines 147 245) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,992 INFO L246 CegarLoopResult]: For program point L2142(lines 2142 2150) no Hoare annotation was computed. [2019-11-28 17:18:33,992 INFO L246 CegarLoopResult]: For program point L94(lines 94 249) no Hoare annotation was computed. [2019-11-28 17:18:33,992 INFO L246 CegarLoopResult]: For program point L2142-2(lines 2142 2150) no Hoare annotation was computed. [2019-11-28 17:18:33,992 INFO L246 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2019-11-28 17:18:33,992 INFO L246 CegarLoopResult]: For program point L2142-4(lines 2142 2150) no Hoare annotation was computed. [2019-11-28 17:18:33,992 INFO L246 CegarLoopResult]: For program point L2142-6(lines 2142 2150) no Hoare annotation was computed. [2019-11-28 17:18:33,992 INFO L246 CegarLoopResult]: For program point L1548(lines 1548 1560) no Hoare annotation was computed. [2019-11-28 17:18:33,993 INFO L242 CegarLoopResult]: At program point L1548-1(lines 1522 1565) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 0 ULTIMATE.start_test_~op1~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,993 INFO L246 CegarLoopResult]: For program point L1548-2(lines 1548 1560) no Hoare annotation was computed. [2019-11-28 17:18:33,993 INFO L242 CegarLoopResult]: At program point L1548-3(lines 1 2825) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,993 INFO L246 CegarLoopResult]: For program point L1548-4(lines 1548 1560) no Hoare annotation was computed. [2019-11-28 17:18:33,993 INFO L242 CegarLoopResult]: At program point L1548-5(lines 1 2825) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,993 INFO L246 CegarLoopResult]: For program point L1548-6(lines 1548 1560) no Hoare annotation was computed. [2019-11-28 17:18:33,993 INFO L242 CegarLoopResult]: At program point L1548-7(lines 1 2825) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,993 INFO L246 CegarLoopResult]: For program point L1284(lines 1284 1294) no Hoare annotation was computed. [2019-11-28 17:18:33,993 INFO L246 CegarLoopResult]: For program point L1548-8(lines 1548 1560) no Hoare annotation was computed. [2019-11-28 17:18:33,994 INFO L246 CegarLoopResult]: For program point L1284-1(lines 1284 1294) no Hoare annotation was computed. [2019-11-28 17:18:33,994 INFO L242 CegarLoopResult]: At program point L1548-9(lines 1 2825) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,994 INFO L246 CegarLoopResult]: For program point L1284-2(lines 1284 1294) no Hoare annotation was computed. [2019-11-28 17:18:33,994 INFO L246 CegarLoopResult]: For program point L1284-3(lines 1284 1294) no Hoare annotation was computed. [2019-11-28 17:18:33,994 INFO L246 CegarLoopResult]: For program point L1284-4(lines 1284 1294) no Hoare annotation was computed. [2019-11-28 17:18:33,994 INFO L246 CegarLoopResult]: For program point L1549(lines 1549 1557) no Hoare annotation was computed. [2019-11-28 17:18:33,994 INFO L246 CegarLoopResult]: For program point L1549-2(lines 1549 1557) no Hoare annotation was computed. [2019-11-28 17:18:33,994 INFO L246 CegarLoopResult]: For program point L1549-4(lines 1549 1557) no Hoare annotation was computed. [2019-11-28 17:18:33,994 INFO L246 CegarLoopResult]: For program point L1549-6(lines 1549 1557) no Hoare annotation was computed. [2019-11-28 17:18:33,995 INFO L246 CegarLoopResult]: For program point L1549-8(lines 1549 1557) no Hoare annotation was computed. [2019-11-28 17:18:33,995 INFO L246 CegarLoopResult]: For program point L2012(lines 2012 2018) no Hoare annotation was computed. [2019-11-28 17:18:33,995 INFO L246 CegarLoopResult]: For program point L2012-1(lines 2012 2018) no Hoare annotation was computed. [2019-11-28 17:18:33,995 INFO L246 CegarLoopResult]: For program point L2012-2(lines 2012 2018) no Hoare annotation was computed. [2019-11-28 17:18:33,995 INFO L246 CegarLoopResult]: For program point L2012-3(lines 2012 2018) no Hoare annotation was computed. [2019-11-28 17:18:33,995 INFO L246 CegarLoopResult]: For program point L1418(lines 1418 1464) no Hoare annotation was computed. [2019-11-28 17:18:33,995 INFO L246 CegarLoopResult]: For program point L229(lines 229 236) no Hoare annotation was computed. [2019-11-28 17:18:33,995 INFO L242 CegarLoopResult]: At program point L229-1(lines 86 250) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,995 INFO L246 CegarLoopResult]: For program point L2145(lines 2145 2149) no Hoare annotation was computed. [2019-11-28 17:18:33,996 INFO L246 CegarLoopResult]: For program point L2145-3(lines 2145 2149) no Hoare annotation was computed. [2019-11-28 17:18:33,996 INFO L242 CegarLoopResult]: At program point L2145-5(lines 2138 2153) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= ULTIMATE.start_getClientPrivateKey_~handle 2) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,996 INFO L246 CegarLoopResult]: For program point L2145-6(lines 2145 2149) no Hoare annotation was computed. [2019-11-28 17:18:33,996 INFO L246 CegarLoopResult]: For program point L2145-9(lines 2145 2149) no Hoare annotation was computed. [2019-11-28 17:18:33,996 INFO L249 CegarLoopResult]: At program point L2145-11(lines 2138 2153) the Hoare annotation is: true [2019-11-28 17:18:33,996 INFO L246 CegarLoopResult]: For program point L1419(lines 1419 1430) no Hoare annotation was computed. [2019-11-28 17:18:33,996 INFO L242 CegarLoopResult]: At program point L296(lines 1 2825) the Hoare annotation is: (and (= ~__ste_Client_Keyring0_User0~0 ~__ste_Client_Keyring0_User1~0) (= 1 ~queue_empty~0) (not (= ~rjh~0 1)) (= 0 (+ ~mail_is_sensitive~0 1)) (= 0 ~__ste_Client_Keyring0_User0~0) (not (= ~__ste_email_to0~0 1))) [2019-11-28 17:18:33,996 INFO L246 CegarLoopResult]: For program point L98(lines 98 105) no Hoare annotation was computed. [2019-11-28 17:18:33,997 INFO L242 CegarLoopResult]: At program point L1882(lines 1861 1885) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 1 ULTIMATE.start_getEmailTo_~handle) (= ULTIMATE.start_getClientPrivateKey_~handle 2) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_setEmailTo_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_mail_~msg 1) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= |ULTIMATE.start_createEmail_#res| 1) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (= 2 ULTIMATE.start_createEmail_~to) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (= ~rjh~0 2)) [2019-11-28 17:18:33,997 INFO L249 CegarLoopResult]: At program point L1882-1(lines 1861 1885) the Hoare annotation is: true [2019-11-28 17:18:33,997 INFO L246 CegarLoopResult]: For program point L2807(lines 2807 2822) no Hoare annotation was computed. [2019-11-28 17:18:33,997 INFO L246 CegarLoopResult]: For program point L2807-2(lines 2807 2822) no Hoare annotation was computed. [2019-11-28 17:18:33,997 INFO L246 CegarLoopResult]: For program point L1552(lines 1552 1556) no Hoare annotation was computed. [2019-11-28 17:18:33,997 INFO L242 CegarLoopResult]: At program point L495(lines 476 497) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 0 ULTIMATE.start_test_~op1~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,997 INFO L246 CegarLoopResult]: For program point L1486(lines 1486 1517) no Hoare annotation was computed. [2019-11-28 17:18:33,997 INFO L246 CegarLoopResult]: For program point L1552-3(lines 1552 1556) no Hoare annotation was computed. [2019-11-28 17:18:33,997 INFO L246 CegarLoopResult]: For program point L1486-1(lines 1486 1517) no Hoare annotation was computed. [2019-11-28 17:18:33,998 INFO L242 CegarLoopResult]: At program point L1354(lines 1307 1360) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~queue_empty~0) (= 0 ULTIMATE.start_test_~op1~0) (= 2 ULTIMATE.start_setup_rjh_~rjh___0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~2) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 (+ ~mail_is_sensitive~0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ~__ste_email_to0~0 1)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~rjh~0 2)) [2019-11-28 17:18:33,998 INFO L246 CegarLoopResult]: For program point L1552-6(lines 1552 1556) no Hoare annotation was computed. [2019-11-28 17:18:33,998 INFO L246 CegarLoopResult]: For program point L1552-9(lines 1552 1556) no Hoare annotation was computed. [2019-11-28 17:18:33,998 INFO L246 CegarLoopResult]: For program point L165(lines 165 169) no Hoare annotation was computed. [2019-11-28 17:18:33,998 INFO L246 CegarLoopResult]: For program point L1552-12(lines 1552 1556) no Hoare annotation was computed. [2019-11-28 17:18:33,998 INFO L246 CegarLoopResult]: For program point L1487(lines 1487 1498) no Hoare annotation was computed. [2019-11-28 17:18:33,998 INFO L246 CegarLoopResult]: For program point L1487-1(lines 1487 1498) no Hoare annotation was computed. [2019-11-28 17:18:34,053 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.11 05:18:34 BoogieIcfgContainer [2019-11-28 17:18:34,053 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-11-28 17:18:34,054 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-11-28 17:18:34,054 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-11-28 17:18:34,054 INFO L275 PluginConnector]: Witness Printer initialized [2019-11-28 17:18:34,055 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 05:18:04" (3/4) ... [2019-11-28 17:18:34,058 INFO L137 WitnessPrinter]: Generating witness for correct program [2019-11-28 17:18:34,093 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 128 nodes and edges [2019-11-28 17:18:34,097 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 74 nodes and edges [2019-11-28 17:18:34,100 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 6 nodes and edges [2019-11-28 17:18:34,103 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2019-11-28 17:18:34,106 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-11-28 17:18:34,110 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-11-28 17:18:34,151 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((__ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1 && 1 == queue_empty) && !(rjh == 1)) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && !(__ste_email_to0 == 1) [2019-11-28 17:18:34,152 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((__ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1 && 1 == queue_empty) && !(rjh == 1)) && !(handle == 2)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && !(__ste_email_to0 == 1) [2019-11-28 17:18:34,152 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((__ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1 && 1 == queue_empty) && !(rjh == 1)) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && !(__ste_email_to0 == 1) [2019-11-28 17:18:34,152 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((__ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1 && 1 == queue_empty) && handle == 2) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && handle == rjh___0) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && !(__ste_email_to0 == 1)) && rjh == 2 [2019-11-28 17:18:34,152 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == queue_empty && rjh == handle) && 456 == value) && handle == rjh___0) && handle == 2) && !(__ste_email_to0 == 1)) && __ste_client_privateKey1 == 456) && __ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && rjh == 2 [2019-11-28 17:18:34,153 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && 456 == value) && handle == 2) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && __ste_client_privateKey1 == 456) && __ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1) && !(2 == chuck___0)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && rjh == 2 [2019-11-28 17:18:34,153 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && __ste_client_privateKey1 == 456) && __ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1) && !(2 == chuck___0)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && !(handle == 1)) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && rjh == 2 [2019-11-28 17:18:34,153 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && __ste_client_privateKey1 == 456) && __ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1) && !(2 == chuck___0)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && !(handle == 1)) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && rjh == 2 [2019-11-28 17:18:34,154 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,154 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,154 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,157 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,158 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,158 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,159 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,161 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,161 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,161 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,161 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,161 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,161 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,164 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,164 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && !(__ste_email_to0 == 1)) && 1 == msg) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,164 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,164 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && __ste_email_to0 == 2) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,165 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,165 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,165 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,165 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && __ste_email_to0 == 2) && \result == 1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,165 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,165 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,166 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,166 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,166 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,166 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,166 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,166 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,166 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,167 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,167 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,167 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,167 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,167 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,168 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,168 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((handle == chuck___0 && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && queue_empty == tmp) && \result == 1) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,168 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,168 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,169 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,169 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,169 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,170 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,170 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,170 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((handle == chuck___0 && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && \result == 1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,170 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,171 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((handle == chuck___0 && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && \result == 1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,171 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((handle == chuck___0 && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && \result == 1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,171 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,171 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && queue_empty == tmp) && \result == 1) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,171 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 [2019-11-28 17:18:34,172 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && queue_empty == tmp) && \result == 1) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,172 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && queue_empty == tmp) && \result == 1) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,172 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,172 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && queue_empty == tmp) && \result == 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,172 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,173 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,173 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,173 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,173 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && !(0 == \result)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,173 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,173 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,174 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 [2019-11-28 17:18:34,330 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2019-11-28 17:18:34,330 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-11-28 17:18:34,332 INFO L168 Benchmark]: Toolchain (without parser) took 33426.27 ms. Allocated memory was 1.0 GB in the beginning and 1.8 GB in the end (delta: 795.9 MB). Free memory was 945.6 MB in the beginning and 1.4 GB in the end (delta: -432.0 MB). Peak memory consumption was 363.9 MB. Max. memory is 11.5 GB. [2019-11-28 17:18:34,332 INFO L168 Benchmark]: CDTParser took 0.31 ms. Allocated memory is still 1.0 GB. Free memory is still 981.8 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-11-28 17:18:34,333 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1019.21 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 146.3 MB). Free memory was 945.6 MB in the beginning and 1.1 GB in the end (delta: -149.9 MB). Peak memory consumption was 26.3 MB. Max. memory is 11.5 GB. [2019-11-28 17:18:34,333 INFO L168 Benchmark]: Boogie Procedure Inliner took 141.41 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 13.4 MB). Peak memory consumption was 13.4 MB. Max. memory is 11.5 GB. [2019-11-28 17:18:34,334 INFO L168 Benchmark]: Boogie Preprocessor took 133.91 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2019-11-28 17:18:34,334 INFO L168 Benchmark]: RCFGBuilder took 1882.57 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 889.4 MB in the end (delta: 186.1 MB). Peak memory consumption was 186.1 MB. Max. memory is 11.5 GB. [2019-11-28 17:18:34,334 INFO L168 Benchmark]: TraceAbstraction took 29964.73 ms. Allocated memory was 1.2 GB in the beginning and 1.8 GB in the end (delta: 649.6 MB). Free memory was 889.4 MB in the beginning and 1.4 GB in the end (delta: -526.3 MB). Peak memory consumption was 716.9 MB. Max. memory is 11.5 GB. [2019-11-28 17:18:34,335 INFO L168 Benchmark]: Witness Printer took 276.99 ms. Allocated memory is still 1.8 GB. Free memory was 1.4 GB in the beginning and 1.4 GB in the end (delta: 38.2 MB). Peak memory consumption was 38.2 MB. Max. memory is 11.5 GB. [2019-11-28 17:18:34,338 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31 ms. Allocated memory is still 1.0 GB. Free memory is still 981.8 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1019.21 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 146.3 MB). Free memory was 945.6 MB in the beginning and 1.1 GB in the end (delta: -149.9 MB). Peak memory consumption was 26.3 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 141.41 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 13.4 MB). Peak memory consumption was 13.4 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 133.91 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1882.57 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 889.4 MB in the end (delta: 186.1 MB). Peak memory consumption was 186.1 MB. Max. memory is 11.5 GB. * TraceAbstraction took 29964.73 ms. Allocated memory was 1.2 GB in the beginning and 1.8 GB in the end (delta: 649.6 MB). Free memory was 889.4 MB in the beginning and 1.4 GB in the end (delta: -526.3 MB). Peak memory consumption was 716.9 MB. Max. memory is 11.5 GB. * Witness Printer took 276.99 ms. Allocated memory is still 1.8 GB. Free memory was 1.4 GB in the beginning and 1.4 GB in the end (delta: 38.2 MB). Peak memory consumption was 38.2 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 2690]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 2690]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 2 specifications checked. All of them hold - InvariantResult [Line: 1986]: Loop Invariant Derived loop invariant: (((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && queue_empty == tmp) && \result == 1) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1182]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1617]: Loop Invariant Derived loop invariant: (((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && queue_empty == tmp) && \result == 1) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1617]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 133]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((__ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1 && 1 == queue_empty) && !(rjh == 1)) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1852]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2119]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2119]: Loop Invariant Derived loop invariant: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && queue_empty == tmp) && \result == 1) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 147]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 2119]: Loop Invariant Derived loop invariant: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1986]: Loop Invariant Derived loop invariant: ((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && !(__ste_email_to0 == 1)) && 1 == msg) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 2119]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1834]: Loop Invariant Derived loop invariant: (((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && !(0 == \result)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 2119]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1182]: Loop Invariant Derived loop invariant: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 2119]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1253]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1361]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1767]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2156]: Loop Invariant Derived loop invariant: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 2156]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1361]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1253]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 2023]: Loop Invariant Derived loop invariant: ((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && __ste_email_to0 == 2) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 2783]: Loop Invariant Derived loop invariant: (((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && __ste_email_to0 == 2) && \result == 1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1361]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1253]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 578]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1767]: Loop Invariant Derived loop invariant: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1361]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 299]: Loop Invariant Derived loop invariant: (((((__ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1 && 1 == queue_empty) && !(rjh == 1)) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && !(__ste_email_to0 == 1) - InvariantResult [Line: 465]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 568]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 119]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1811]: Loop Invariant Derived loop invariant: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((__ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1 && 1 == queue_empty) && handle == 2) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && handle == rjh___0) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && !(__ste_email_to0 == 1)) && rjh == 2 - InvariantResult [Line: 1253]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && __ste_client_privateKey1 == 456) && __ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1) && !(2 == chuck___0)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && !(handle == 1)) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && rjh == 2 - InvariantResult [Line: 1843]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2138]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 197]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && 456 == value) && handle == 2) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && __ste_client_privateKey1 == 456) && __ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1) && !(2 == chuck___0)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && rjh == 2 - InvariantResult [Line: 1468]: Loop Invariant Derived loop invariant: ((((((((((((((((handle == chuck___0 && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && \result == 1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1522]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1361]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1253]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1307]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1468]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1273]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 2175]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2004]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((__ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1 && 1 == queue_empty) && !(rjh == 1)) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && !(__ste_email_to0 == 1) - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 94]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 108]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((__ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1 && 1 == queue_empty) && !(rjh == 1)) && !(handle == 2)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((1 == queue_empty && rjh == handle) && 456 == value) && handle == rjh___0) && handle == 2) && !(__ste_email_to0 == 1)) && __ste_client_privateKey1 == 456) && __ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && rjh == 2 - InvariantResult [Line: 2138]: Loop Invariant Derived loop invariant: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 476]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: (((((((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && __ste_client_privateKey1 == 456) && __ste_Client_Keyring0_User0 == __ste_Client_Keyring0_User1) && !(2 == chuck___0)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && !(handle == 1)) && 0 == __ste_Client_Keyring0_User0) && \result == queue_empty) && rjh == 2 - InvariantResult [Line: 2175]: Loop Invariant Derived loop invariant: ((((((((((((((((handle == chuck___0 && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && \result == 1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1861]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && !(handle == 2)) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1273]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1721]: Loop Invariant Derived loop invariant: ((((((((((((((((handle == chuck___0 && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && \result == 1) && queue_empty == tmp) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1721]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1273]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1273]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 2004]: Loop Invariant Derived loop invariant: ((((((((((((((((handle == chuck___0 && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && 2 == \result) && queue_empty == tmp) && \result == 1) && 0 == mail_is_sensitive + 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1414]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 2004]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2004]: Loop Invariant Derived loop invariant: (((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && queue_empty == tmp) && \result == 1) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1273]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 2800]: Loop Invariant Derived loop invariant: (((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 1229]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == queue_empty) && 0 == op1) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1229]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1229]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1229]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 2800]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1861]: Loop Invariant Derived loop invariant: ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && 1 == handle) && handle == 2) && 2 == rjh___0) && !(handle == 2)) && 1 == handle) && value == 2) && !(1 == chuck___0)) && 1 == msg) && __ste_email_to0 == 2) && msg == 1) && 2 == \result) && \result == 1) && queue_empty == tmp) && 2 == to) && \result == queue_empty) && 1 == msg) && rjh == 2 - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 186]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 1229]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == queue_empty) && 2 == rjh___0) && queue_empty == tmp) && !(handle == 2)) && 0 == mail_is_sensitive + 1) && \result == queue_empty) && !(__ste_email_to0 == 1)) && !(1 == chuck___0)) && rjh == 2 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 381 locations, 2 error locations. Result: SAFE, OverallTime: 8.7s, OverallIterations: 18, TraceHistogramMax: 2, AutomataDifference: 4.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 21.0s, HoareTripleCheckerStatistics: 12617 SDtfs, 23013 SDslu, 23919 SDs, 0 SdLazy, 892 SolverSat, 83 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 1.9s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 137 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2643occurred in iteration=14, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.4s AutomataMinimizationTime, 18 MinimizatonAttempts, 4144 StatesRemovedByMinimization, 14 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 93 LocationsWithAnnotation, 93 PreInvPairs, 684 NumberOfFragments, 3134 HoareAnnotationTreeSize, 93 FomulaSimplifications, 942318 FormulaSimplificationTreeSizeReduction, 4.5s HoareSimplificationTime, 93 FomulaSimplificationsInter, 628893 FormulaSimplificationTreeSizeReductionInter, 16.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 1125 NumberOfCodeBlocks, 1125 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 1107 ConstructedInterpolants, 0 QuantifiedInterpolants, 149561 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 18 InterpolantComputations, 18 PerfectInterpolantSequences, 22/22 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...