./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/email_spec4_product13.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f470102c Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/email_spec4_product13.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 70d32ce76add0a705a911f06bde28b97180fa1ae .................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-f470102 [2019-11-28 17:20:09,989 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-11-28 17:20:09,991 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-11-28 17:20:10,004 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-11-28 17:20:10,005 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-11-28 17:20:10,006 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-11-28 17:20:10,008 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-11-28 17:20:10,010 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-11-28 17:20:10,012 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-11-28 17:20:10,013 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-11-28 17:20:10,015 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-11-28 17:20:10,016 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-11-28 17:20:10,016 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-11-28 17:20:10,018 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-11-28 17:20:10,019 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-11-28 17:20:10,020 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-11-28 17:20:10,021 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-11-28 17:20:10,023 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-11-28 17:20:10,025 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-11-28 17:20:10,028 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-11-28 17:20:10,030 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-11-28 17:20:10,034 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-11-28 17:20:10,035 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-11-28 17:20:10,038 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-11-28 17:20:10,043 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-11-28 17:20:10,045 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-11-28 17:20:10,045 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-11-28 17:20:10,047 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-11-28 17:20:10,048 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-11-28 17:20:10,049 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-11-28 17:20:10,050 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-11-28 17:20:10,052 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-11-28 17:20:10,053 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-11-28 17:20:10,054 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-11-28 17:20:10,058 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-11-28 17:20:10,059 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-11-28 17:20:10,060 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-11-28 17:20:10,060 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-11-28 17:20:10,060 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-11-28 17:20:10,063 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-11-28 17:20:10,065 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-11-28 17:20:10,066 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2019-11-28 17:20:10,084 INFO L113 SettingsManager]: Loading preferences was successful [2019-11-28 17:20:10,085 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-11-28 17:20:10,086 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-11-28 17:20:10,086 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2019-11-28 17:20:10,087 INFO L138 SettingsManager]: * Use SBE=true [2019-11-28 17:20:10,087 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-11-28 17:20:10,087 INFO L138 SettingsManager]: * sizeof long=4 [2019-11-28 17:20:10,088 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-11-28 17:20:10,088 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-11-28 17:20:10,088 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-11-28 17:20:10,088 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-11-28 17:20:10,089 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-11-28 17:20:10,089 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-11-28 17:20:10,089 INFO L138 SettingsManager]: * sizeof long double=12 [2019-11-28 17:20:10,089 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-11-28 17:20:10,090 INFO L138 SettingsManager]: * Use constant arrays=true [2019-11-28 17:20:10,090 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-11-28 17:20:10,090 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-11-28 17:20:10,091 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-11-28 17:20:10,091 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-11-28 17:20:10,091 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-11-28 17:20:10,092 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-11-28 17:20:10,092 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-11-28 17:20:10,092 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-11-28 17:20:10,092 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-11-28 17:20:10,093 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2019-11-28 17:20:10,093 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-11-28 17:20:10,093 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-11-28 17:20:10,094 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-11-28 17:20:10,094 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 70d32ce76add0a705a911f06bde28b97180fa1ae [2019-11-28 17:20:10,418 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-11-28 17:20:10,432 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-11-28 17:20:10,436 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-11-28 17:20:10,438 INFO L271 PluginConnector]: Initializing CDTParser... [2019-11-28 17:20:10,438 INFO L275 PluginConnector]: CDTParser initialized [2019-11-28 17:20:10,439 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/email_spec4_product13.cil.c [2019-11-28 17:20:10,518 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f31c4c991/98b1c0cff6e9400a9f29690705832081/FLAG2180b41e7 [2019-11-28 17:20:11,146 INFO L306 CDTParser]: Found 1 translation units. [2019-11-28 17:20:11,147 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/email_spec4_product13.cil.c [2019-11-28 17:20:11,182 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f31c4c991/98b1c0cff6e9400a9f29690705832081/FLAG2180b41e7 [2019-11-28 17:20:11,420 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f31c4c991/98b1c0cff6e9400a9f29690705832081 [2019-11-28 17:20:11,425 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-11-28 17:20:11,427 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-11-28 17:20:11,430 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-11-28 17:20:11,430 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-11-28 17:20:11,434 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-11-28 17:20:11,435 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 05:20:11" (1/1) ... [2019-11-28 17:20:11,439 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1844f808 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:20:11, skipping insertion in model container [2019-11-28 17:20:11,439 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 05:20:11" (1/1) ... [2019-11-28 17:20:11,448 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-11-28 17:20:11,536 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-11-28 17:20:12,325 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-11-28 17:20:12,341 INFO L203 MainTranslator]: Completed pre-run [2019-11-28 17:20:12,486 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-11-28 17:20:12,569 INFO L208 MainTranslator]: Completed translation [2019-11-28 17:20:12,570 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:20:12 WrapperNode [2019-11-28 17:20:12,570 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-11-28 17:20:12,572 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-11-28 17:20:12,572 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-11-28 17:20:12,572 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-11-28 17:20:12,583 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:20:12" (1/1) ... [2019-11-28 17:20:12,615 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:20:12" (1/1) ... [2019-11-28 17:20:12,727 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-11-28 17:20:12,727 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-11-28 17:20:12,728 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-11-28 17:20:12,728 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-11-28 17:20:12,739 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:20:12" (1/1) ... [2019-11-28 17:20:12,740 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:20:12" (1/1) ... [2019-11-28 17:20:12,748 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:20:12" (1/1) ... [2019-11-28 17:20:12,749 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:20:12" (1/1) ... [2019-11-28 17:20:12,791 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:20:12" (1/1) ... [2019-11-28 17:20:12,810 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:20:12" (1/1) ... [2019-11-28 17:20:12,816 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:20:12" (1/1) ... [2019-11-28 17:20:12,831 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-11-28 17:20:12,832 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-11-28 17:20:12,834 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-11-28 17:20:12,834 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-11-28 17:20:12,835 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:20:12" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-11-28 17:20:12,937 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2019-11-28 17:20:12,937 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-11-28 17:20:12,937 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2019-11-28 17:20:12,939 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-11-28 17:20:12,939 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-11-28 17:20:14,812 INFO L282 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-11-28 17:20:14,812 INFO L287 CfgBuilder]: Removed 235 assume(true) statements. [2019-11-28 17:20:14,814 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 05:20:14 BoogieIcfgContainer [2019-11-28 17:20:14,814 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-11-28 17:20:14,815 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-11-28 17:20:14,816 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-11-28 17:20:14,819 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-11-28 17:20:14,820 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.11 05:20:11" (1/3) ... [2019-11-28 17:20:14,821 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@70f6d8c2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.11 05:20:14, skipping insertion in model container [2019-11-28 17:20:14,821 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 05:20:12" (2/3) ... [2019-11-28 17:20:14,822 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@70f6d8c2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.11 05:20:14, skipping insertion in model container [2019-11-28 17:20:14,822 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 05:20:14" (3/3) ... [2019-11-28 17:20:14,824 INFO L109 eAbstractionObserver]: Analyzing ICFG email_spec4_product13.cil.c [2019-11-28 17:20:14,836 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-11-28 17:20:14,844 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 2 error locations. [2019-11-28 17:20:14,858 INFO L249 AbstractCegarLoop]: Starting to check reachability of 2 error locations. [2019-11-28 17:20:14,905 INFO L373 AbstractCegarLoop]: Interprodecural is true [2019-11-28 17:20:14,905 INFO L374 AbstractCegarLoop]: Hoare is true [2019-11-28 17:20:14,906 INFO L375 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-11-28 17:20:14,907 INFO L376 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-11-28 17:20:14,907 INFO L377 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-11-28 17:20:14,907 INFO L378 AbstractCegarLoop]: Difference is false [2019-11-28 17:20:14,907 INFO L379 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-11-28 17:20:14,908 INFO L383 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-11-28 17:20:14,947 INFO L276 IsEmpty]: Start isEmpty. Operand 383 states. [2019-11-28 17:20:14,975 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2019-11-28 17:20:14,976 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:20:14,977 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:20:14,978 INFO L410 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:20:14,985 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:20:14,986 INFO L82 PathProgramCache]: Analyzing trace with hash -2045115247, now seen corresponding path program 1 times [2019-11-28 17:20:14,997 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:20:14,998 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1746999976] [2019-11-28 17:20:14,998 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:20:15,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:20:15,437 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 17:20:15,438 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1746999976] [2019-11-28 17:20:15,440 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:20:15,440 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-28 17:20:15,441 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [584426151] [2019-11-28 17:20:15,447 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 17:20:15,447 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:20:15,460 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 17:20:15,461 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:20:15,463 INFO L87 Difference]: Start difference. First operand 383 states. Second operand 3 states. [2019-11-28 17:20:15,629 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:20:15,629 INFO L93 Difference]: Finished difference Result 1114 states and 1961 transitions. [2019-11-28 17:20:15,630 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 17:20:15,632 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 40 [2019-11-28 17:20:15,633 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:20:15,658 INFO L225 Difference]: With dead ends: 1114 [2019-11-28 17:20:15,658 INFO L226 Difference]: Without dead ends: 668 [2019-11-28 17:20:15,665 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:20:15,694 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 668 states. [2019-11-28 17:20:15,787 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 668 to 343. [2019-11-28 17:20:15,789 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2019-11-28 17:20:15,792 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 598 transitions. [2019-11-28 17:20:15,795 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 598 transitions. Word has length 40 [2019-11-28 17:20:15,796 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:20:15,796 INFO L462 AbstractCegarLoop]: Abstraction has 343 states and 598 transitions. [2019-11-28 17:20:15,797 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 17:20:15,797 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 598 transitions. [2019-11-28 17:20:15,801 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2019-11-28 17:20:15,801 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:20:15,802 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:20:15,802 INFO L410 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:20:15,803 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:20:15,803 INFO L82 PathProgramCache]: Analyzing trace with hash 581557763, now seen corresponding path program 1 times [2019-11-28 17:20:15,804 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:20:15,804 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1390050556] [2019-11-28 17:20:15,804 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:20:15,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:20:15,985 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 17:20:15,985 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1390050556] [2019-11-28 17:20:15,985 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:20:15,986 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-28 17:20:15,987 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [682895372] [2019-11-28 17:20:15,989 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-28 17:20:15,990 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:20:15,990 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-28 17:20:15,991 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-28 17:20:15,991 INFO L87 Difference]: Start difference. First operand 343 states and 598 transitions. Second operand 5 states. [2019-11-28 17:20:16,279 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:20:16,279 INFO L93 Difference]: Finished difference Result 978 states and 1710 transitions. [2019-11-28 17:20:16,280 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-11-28 17:20:16,280 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 42 [2019-11-28 17:20:16,280 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:20:16,284 INFO L225 Difference]: With dead ends: 978 [2019-11-28 17:20:16,285 INFO L226 Difference]: Without dead ends: 654 [2019-11-28 17:20:16,287 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2019-11-28 17:20:16,289 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 654 states. [2019-11-28 17:20:16,304 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 654 to 343. [2019-11-28 17:20:16,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2019-11-28 17:20:16,306 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 597 transitions. [2019-11-28 17:20:16,307 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 597 transitions. Word has length 42 [2019-11-28 17:20:16,307 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:20:16,307 INFO L462 AbstractCegarLoop]: Abstraction has 343 states and 597 transitions. [2019-11-28 17:20:16,307 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-28 17:20:16,308 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 597 transitions. [2019-11-28 17:20:16,309 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2019-11-28 17:20:16,309 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:20:16,310 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:20:16,310 INFO L410 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:20:16,310 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:20:16,311 INFO L82 PathProgramCache]: Analyzing trace with hash -668907248, now seen corresponding path program 1 times [2019-11-28 17:20:16,311 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:20:16,311 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [938514526] [2019-11-28 17:20:16,312 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:20:16,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:20:16,385 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 17:20:16,385 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [938514526] [2019-11-28 17:20:16,386 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:20:16,386 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-28 17:20:16,386 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [281249387] [2019-11-28 17:20:16,387 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 17:20:16,387 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:20:16,387 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 17:20:16,387 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:20:16,388 INFO L87 Difference]: Start difference. First operand 343 states and 597 transitions. Second operand 3 states. [2019-11-28 17:20:16,440 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:20:16,443 INFO L93 Difference]: Finished difference Result 668 states and 1168 transitions. [2019-11-28 17:20:16,444 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 17:20:16,444 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 43 [2019-11-28 17:20:16,444 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:20:16,447 INFO L225 Difference]: With dead ends: 668 [2019-11-28 17:20:16,448 INFO L226 Difference]: Without dead ends: 348 [2019-11-28 17:20:16,449 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:20:16,450 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 348 states. [2019-11-28 17:20:16,465 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 348 to 343. [2019-11-28 17:20:16,466 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2019-11-28 17:20:16,468 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 596 transitions. [2019-11-28 17:20:16,468 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 596 transitions. Word has length 43 [2019-11-28 17:20:16,477 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:20:16,477 INFO L462 AbstractCegarLoop]: Abstraction has 343 states and 596 transitions. [2019-11-28 17:20:16,477 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 17:20:16,478 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 596 transitions. [2019-11-28 17:20:16,480 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2019-11-28 17:20:16,480 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:20:16,481 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:20:16,481 INFO L410 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:20:16,481 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:20:16,482 INFO L82 PathProgramCache]: Analyzing trace with hash 836086358, now seen corresponding path program 1 times [2019-11-28 17:20:16,482 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:20:16,482 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [748380096] [2019-11-28 17:20:16,482 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:20:16,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:20:16,591 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 17:20:16,591 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [748380096] [2019-11-28 17:20:16,591 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:20:16,592 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-28 17:20:16,593 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [347853194] [2019-11-28 17:20:16,593 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 17:20:16,593 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:20:16,594 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 17:20:16,594 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:20:16,595 INFO L87 Difference]: Start difference. First operand 343 states and 596 transitions. Second operand 3 states. [2019-11-28 17:20:16,641 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:20:16,641 INFO L93 Difference]: Finished difference Result 678 states and 1181 transitions. [2019-11-28 17:20:16,642 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 17:20:16,642 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 44 [2019-11-28 17:20:16,642 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:20:16,645 INFO L225 Difference]: With dead ends: 678 [2019-11-28 17:20:16,645 INFO L226 Difference]: Without dead ends: 343 [2019-11-28 17:20:16,647 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:20:16,648 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2019-11-28 17:20:16,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2019-11-28 17:20:16,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2019-11-28 17:20:16,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 594 transitions. [2019-11-28 17:20:16,661 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 594 transitions. Word has length 44 [2019-11-28 17:20:16,662 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:20:16,662 INFO L462 AbstractCegarLoop]: Abstraction has 343 states and 594 transitions. [2019-11-28 17:20:16,662 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 17:20:16,663 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 594 transitions. [2019-11-28 17:20:16,664 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2019-11-28 17:20:16,665 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:20:16,665 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:20:16,665 INFO L410 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:20:16,666 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:20:16,666 INFO L82 PathProgramCache]: Analyzing trace with hash -1027434837, now seen corresponding path program 1 times [2019-11-28 17:20:16,666 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:20:16,667 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [392484367] [2019-11-28 17:20:16,667 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:20:16,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:20:16,782 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 17:20:16,782 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [392484367] [2019-11-28 17:20:16,783 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:20:16,783 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-28 17:20:16,783 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1390061806] [2019-11-28 17:20:16,784 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-28 17:20:16,784 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:20:16,784 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-28 17:20:16,785 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-28 17:20:16,785 INFO L87 Difference]: Start difference. First operand 343 states and 594 transitions. Second operand 5 states. [2019-11-28 17:20:16,929 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:20:16,930 INFO L93 Difference]: Finished difference Result 968 states and 1690 transitions. [2019-11-28 17:20:16,930 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-11-28 17:20:16,930 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 45 [2019-11-28 17:20:16,931 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:20:16,934 INFO L225 Difference]: With dead ends: 968 [2019-11-28 17:20:16,935 INFO L226 Difference]: Without dead ends: 652 [2019-11-28 17:20:16,936 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-11-28 17:20:16,937 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 652 states. [2019-11-28 17:20:16,952 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 652 to 343. [2019-11-28 17:20:16,952 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2019-11-28 17:20:16,954 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 593 transitions. [2019-11-28 17:20:16,954 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 593 transitions. Word has length 45 [2019-11-28 17:20:16,954 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:20:16,954 INFO L462 AbstractCegarLoop]: Abstraction has 343 states and 593 transitions. [2019-11-28 17:20:16,955 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-28 17:20:16,955 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 593 transitions. [2019-11-28 17:20:16,956 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2019-11-28 17:20:16,956 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:20:16,956 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:20:16,957 INFO L410 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:20:16,957 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:20:16,957 INFO L82 PathProgramCache]: Analyzing trace with hash -913470578, now seen corresponding path program 1 times [2019-11-28 17:20:16,957 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:20:16,958 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [408611995] [2019-11-28 17:20:16,958 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:20:16,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:20:17,015 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 17:20:17,016 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [408611995] [2019-11-28 17:20:17,016 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:20:17,016 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-28 17:20:17,016 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [911156639] [2019-11-28 17:20:17,017 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-28 17:20:17,017 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:20:17,017 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-28 17:20:17,017 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-28 17:20:17,017 INFO L87 Difference]: Start difference. First operand 343 states and 593 transitions. Second operand 5 states. [2019-11-28 17:20:17,195 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:20:17,195 INFO L93 Difference]: Finished difference Result 973 states and 1695 transitions. [2019-11-28 17:20:17,196 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-11-28 17:20:17,196 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 46 [2019-11-28 17:20:17,196 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:20:17,200 INFO L225 Difference]: With dead ends: 973 [2019-11-28 17:20:17,200 INFO L226 Difference]: Without dead ends: 657 [2019-11-28 17:20:17,202 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-11-28 17:20:17,203 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 657 states. [2019-11-28 17:20:17,220 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 657 to 343. [2019-11-28 17:20:17,220 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2019-11-28 17:20:17,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 592 transitions. [2019-11-28 17:20:17,222 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 592 transitions. Word has length 46 [2019-11-28 17:20:17,222 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:20:17,222 INFO L462 AbstractCegarLoop]: Abstraction has 343 states and 592 transitions. [2019-11-28 17:20:17,222 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-28 17:20:17,222 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 592 transitions. [2019-11-28 17:20:17,223 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2019-11-28 17:20:17,224 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:20:17,224 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:20:17,224 INFO L410 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:20:17,224 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:20:17,224 INFO L82 PathProgramCache]: Analyzing trace with hash -1520446810, now seen corresponding path program 1 times [2019-11-28 17:20:17,225 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:20:17,225 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1552517962] [2019-11-28 17:20:17,225 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:20:17,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:20:17,276 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 17:20:17,276 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1552517962] [2019-11-28 17:20:17,277 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:20:17,277 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-28 17:20:17,277 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [252010534] [2019-11-28 17:20:17,278 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 17:20:17,278 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:20:17,278 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 17:20:17,278 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:20:17,278 INFO L87 Difference]: Start difference. First operand 343 states and 592 transitions. Second operand 3 states. [2019-11-28 17:20:17,312 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:20:17,312 INFO L93 Difference]: Finished difference Result 452 states and 767 transitions. [2019-11-28 17:20:17,313 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 17:20:17,313 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 47 [2019-11-28 17:20:17,313 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:20:17,315 INFO L225 Difference]: With dead ends: 452 [2019-11-28 17:20:17,315 INFO L226 Difference]: Without dead ends: 346 [2019-11-28 17:20:17,316 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:20:17,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 346 states. [2019-11-28 17:20:17,336 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 346 to 345. [2019-11-28 17:20:17,336 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 345 states. [2019-11-28 17:20:17,342 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 345 states to 345 states and 594 transitions. [2019-11-28 17:20:17,343 INFO L78 Accepts]: Start accepts. Automaton has 345 states and 594 transitions. Word has length 47 [2019-11-28 17:20:17,343 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:20:17,343 INFO L462 AbstractCegarLoop]: Abstraction has 345 states and 594 transitions. [2019-11-28 17:20:17,343 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 17:20:17,343 INFO L276 IsEmpty]: Start isEmpty. Operand 345 states and 594 transitions. [2019-11-28 17:20:17,347 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2019-11-28 17:20:17,347 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:20:17,347 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:20:17,348 INFO L410 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:20:17,348 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:20:17,348 INFO L82 PathProgramCache]: Analyzing trace with hash -748805212, now seen corresponding path program 1 times [2019-11-28 17:20:17,348 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:20:17,349 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2058621976] [2019-11-28 17:20:17,349 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:20:17,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:20:17,418 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 17:20:17,419 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2058621976] [2019-11-28 17:20:17,419 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:20:17,419 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-28 17:20:17,419 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1242717679] [2019-11-28 17:20:17,420 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 17:20:17,420 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:20:17,420 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 17:20:17,420 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:20:17,421 INFO L87 Difference]: Start difference. First operand 345 states and 594 transitions. Second operand 3 states. [2019-11-28 17:20:17,477 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:20:17,477 INFO L93 Difference]: Finished difference Result 921 states and 1606 transitions. [2019-11-28 17:20:17,478 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 17:20:17,478 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 53 [2019-11-28 17:20:17,479 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:20:17,482 INFO L225 Difference]: With dead ends: 921 [2019-11-28 17:20:17,482 INFO L226 Difference]: Without dead ends: 607 [2019-11-28 17:20:17,484 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 17:20:17,485 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 607 states. [2019-11-28 17:20:17,513 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 607 to 501. [2019-11-28 17:20:17,513 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 501 states. [2019-11-28 17:20:17,515 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 501 states to 501 states and 880 transitions. [2019-11-28 17:20:17,515 INFO L78 Accepts]: Start accepts. Automaton has 501 states and 880 transitions. Word has length 53 [2019-11-28 17:20:17,517 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:20:17,517 INFO L462 AbstractCegarLoop]: Abstraction has 501 states and 880 transitions. [2019-11-28 17:20:17,517 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 17:20:17,518 INFO L276 IsEmpty]: Start isEmpty. Operand 501 states and 880 transitions. [2019-11-28 17:20:17,519 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2019-11-28 17:20:17,519 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:20:17,519 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:20:17,520 INFO L410 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:20:17,520 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:20:17,520 INFO L82 PathProgramCache]: Analyzing trace with hash 203078211, now seen corresponding path program 1 times [2019-11-28 17:20:17,520 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:20:17,521 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [106004192] [2019-11-28 17:20:17,521 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:20:17,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:20:17,616 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 17:20:17,616 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [106004192] [2019-11-28 17:20:17,616 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:20:17,616 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-28 17:20:17,617 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1343499359] [2019-11-28 17:20:17,617 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-28 17:20:17,617 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:20:17,618 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-28 17:20:17,618 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-28 17:20:17,619 INFO L87 Difference]: Start difference. First operand 501 states and 880 transitions. Second operand 5 states. [2019-11-28 17:20:17,780 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:20:17,781 INFO L93 Difference]: Finished difference Result 1004 states and 1699 transitions. [2019-11-28 17:20:17,781 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-11-28 17:20:17,781 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 54 [2019-11-28 17:20:17,781 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:20:17,786 INFO L225 Difference]: With dead ends: 1004 [2019-11-28 17:20:17,786 INFO L226 Difference]: Without dead ends: 924 [2019-11-28 17:20:17,787 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2019-11-28 17:20:17,789 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 924 states. [2019-11-28 17:20:17,821 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 924 to 584. [2019-11-28 17:20:17,821 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 584 states. [2019-11-28 17:20:17,824 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 584 states to 584 states and 1014 transitions. [2019-11-28 17:20:17,824 INFO L78 Accepts]: Start accepts. Automaton has 584 states and 1014 transitions. Word has length 54 [2019-11-28 17:20:17,824 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:20:17,824 INFO L462 AbstractCegarLoop]: Abstraction has 584 states and 1014 transitions. [2019-11-28 17:20:17,825 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-28 17:20:17,825 INFO L276 IsEmpty]: Start isEmpty. Operand 584 states and 1014 transitions. [2019-11-28 17:20:17,826 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2019-11-28 17:20:17,826 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:20:17,826 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:20:17,826 INFO L410 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:20:17,827 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:20:17,827 INFO L82 PathProgramCache]: Analyzing trace with hash 1846986458, now seen corresponding path program 1 times [2019-11-28 17:20:17,827 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:20:17,827 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1455443451] [2019-11-28 17:20:17,827 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:20:17,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:20:17,908 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 17:20:17,909 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1455443451] [2019-11-28 17:20:17,909 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:20:17,909 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-11-28 17:20:17,910 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [377837266] [2019-11-28 17:20:17,910 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2019-11-28 17:20:17,910 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:20:17,910 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-11-28 17:20:17,911 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-11-28 17:20:17,911 INFO L87 Difference]: Start difference. First operand 584 states and 1014 transitions. Second operand 7 states. [2019-11-28 17:20:18,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:20:18,092 INFO L93 Difference]: Finished difference Result 832 states and 1413 transitions. [2019-11-28 17:20:18,093 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-11-28 17:20:18,093 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 55 [2019-11-28 17:20:18,093 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:20:18,097 INFO L225 Difference]: With dead ends: 832 [2019-11-28 17:20:18,097 INFO L226 Difference]: Without dead ends: 682 [2019-11-28 17:20:18,098 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=64, Invalid=118, Unknown=0, NotChecked=0, Total=182 [2019-11-28 17:20:18,100 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 682 states. [2019-11-28 17:20:18,137 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 682 to 573. [2019-11-28 17:20:18,137 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 573 states. [2019-11-28 17:20:18,140 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 573 states to 573 states and 994 transitions. [2019-11-28 17:20:18,140 INFO L78 Accepts]: Start accepts. Automaton has 573 states and 994 transitions. Word has length 55 [2019-11-28 17:20:18,140 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:20:18,141 INFO L462 AbstractCegarLoop]: Abstraction has 573 states and 994 transitions. [2019-11-28 17:20:18,141 INFO L463 AbstractCegarLoop]: Interpolant automaton has 7 states. [2019-11-28 17:20:18,141 INFO L276 IsEmpty]: Start isEmpty. Operand 573 states and 994 transitions. [2019-11-28 17:20:18,142 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2019-11-28 17:20:18,142 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:20:18,142 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:20:18,143 INFO L410 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:20:18,143 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:20:18,143 INFO L82 PathProgramCache]: Analyzing trace with hash 930934001, now seen corresponding path program 1 times [2019-11-28 17:20:18,144 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:20:18,144 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2005117524] [2019-11-28 17:20:18,144 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:20:18,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:20:18,253 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 17:20:18,253 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2005117524] [2019-11-28 17:20:18,254 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:20:18,254 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-11-28 17:20:18,255 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [992856584] [2019-11-28 17:20:18,255 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2019-11-28 17:20:18,255 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:20:18,256 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-11-28 17:20:18,256 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-11-28 17:20:18,256 INFO L87 Difference]: Start difference. First operand 573 states and 994 transitions. Second operand 7 states. [2019-11-28 17:20:18,958 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:20:18,959 INFO L93 Difference]: Finished difference Result 1134 states and 1876 transitions. [2019-11-28 17:20:18,959 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2019-11-28 17:20:18,959 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 57 [2019-11-28 17:20:18,960 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:20:18,965 INFO L225 Difference]: With dead ends: 1134 [2019-11-28 17:20:18,966 INFO L226 Difference]: Without dead ends: 1100 [2019-11-28 17:20:18,967 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 37 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=80, Invalid=192, Unknown=0, NotChecked=0, Total=272 [2019-11-28 17:20:18,969 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1100 states. [2019-11-28 17:20:19,014 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1100 to 742. [2019-11-28 17:20:19,015 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 742 states. [2019-11-28 17:20:19,018 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 742 states to 742 states and 1264 transitions. [2019-11-28 17:20:19,019 INFO L78 Accepts]: Start accepts. Automaton has 742 states and 1264 transitions. Word has length 57 [2019-11-28 17:20:19,019 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:20:19,019 INFO L462 AbstractCegarLoop]: Abstraction has 742 states and 1264 transitions. [2019-11-28 17:20:19,019 INFO L463 AbstractCegarLoop]: Interpolant automaton has 7 states. [2019-11-28 17:20:19,020 INFO L276 IsEmpty]: Start isEmpty. Operand 742 states and 1264 transitions. [2019-11-28 17:20:19,021 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2019-11-28 17:20:19,021 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:20:19,021 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:20:19,022 INFO L410 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:20:19,022 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:20:19,022 INFO L82 PathProgramCache]: Analyzing trace with hash -1204239761, now seen corresponding path program 1 times [2019-11-28 17:20:19,023 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:20:19,023 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1388788566] [2019-11-28 17:20:19,023 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:20:19,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:20:19,116 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 17:20:19,116 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1388788566] [2019-11-28 17:20:19,117 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:20:19,117 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-11-28 17:20:19,117 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1011003007] [2019-11-28 17:20:19,117 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-11-28 17:20:19,118 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:20:19,118 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-11-28 17:20:19,118 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2019-11-28 17:20:19,118 INFO L87 Difference]: Start difference. First operand 742 states and 1264 transitions. Second operand 8 states. [2019-11-28 17:20:19,424 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:20:19,424 INFO L93 Difference]: Finished difference Result 962 states and 1609 transitions. [2019-11-28 17:20:19,426 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2019-11-28 17:20:19,426 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 58 [2019-11-28 17:20:19,426 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:20:19,431 INFO L225 Difference]: With dead ends: 962 [2019-11-28 17:20:19,431 INFO L226 Difference]: Without dead ends: 706 [2019-11-28 17:20:19,432 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=92, Invalid=180, Unknown=0, NotChecked=0, Total=272 [2019-11-28 17:20:19,433 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 706 states. [2019-11-28 17:20:19,473 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 706 to 659. [2019-11-28 17:20:19,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 659 states. [2019-11-28 17:20:19,476 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 659 states to 659 states and 1126 transitions. [2019-11-28 17:20:19,477 INFO L78 Accepts]: Start accepts. Automaton has 659 states and 1126 transitions. Word has length 58 [2019-11-28 17:20:19,477 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:20:19,477 INFO L462 AbstractCegarLoop]: Abstraction has 659 states and 1126 transitions. [2019-11-28 17:20:19,477 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-11-28 17:20:19,477 INFO L276 IsEmpty]: Start isEmpty. Operand 659 states and 1126 transitions. [2019-11-28 17:20:19,485 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2019-11-28 17:20:19,485 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:20:19,486 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:20:19,486 INFO L410 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:20:19,486 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:20:19,486 INFO L82 PathProgramCache]: Analyzing trace with hash 1949742392, now seen corresponding path program 1 times [2019-11-28 17:20:19,487 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:20:19,487 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1810147499] [2019-11-28 17:20:19,487 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:20:19,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:20:19,585 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 17:20:19,586 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1810147499] [2019-11-28 17:20:19,586 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:20:19,586 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-11-28 17:20:19,587 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [889429904] [2019-11-28 17:20:19,587 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-11-28 17:20:19,587 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:20:19,588 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-11-28 17:20:19,588 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-11-28 17:20:19,588 INFO L87 Difference]: Start difference. First operand 659 states and 1126 transitions. Second operand 6 states. [2019-11-28 17:20:19,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:20:19,670 INFO L93 Difference]: Finished difference Result 766 states and 1284 transitions. [2019-11-28 17:20:19,670 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2019-11-28 17:20:19,670 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 77 [2019-11-28 17:20:19,671 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:20:19,674 INFO L225 Difference]: With dead ends: 766 [2019-11-28 17:20:19,674 INFO L226 Difference]: Without dead ends: 659 [2019-11-28 17:20:19,675 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2019-11-28 17:20:19,677 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 659 states. [2019-11-28 17:20:19,716 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 659 to 659. [2019-11-28 17:20:19,716 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 659 states. [2019-11-28 17:20:19,719 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 659 states to 659 states and 1123 transitions. [2019-11-28 17:20:19,719 INFO L78 Accepts]: Start accepts. Automaton has 659 states and 1123 transitions. Word has length 77 [2019-11-28 17:20:19,719 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:20:19,719 INFO L462 AbstractCegarLoop]: Abstraction has 659 states and 1123 transitions. [2019-11-28 17:20:19,719 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-11-28 17:20:19,720 INFO L276 IsEmpty]: Start isEmpty. Operand 659 states and 1123 transitions. [2019-11-28 17:20:19,722 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2019-11-28 17:20:19,722 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 17:20:19,722 INFO L410 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 17:20:19,722 INFO L410 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 17:20:19,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 17:20:19,723 INFO L82 PathProgramCache]: Analyzing trace with hash 140702341, now seen corresponding path program 1 times [2019-11-28 17:20:19,723 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 17:20:19,723 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1089134642] [2019-11-28 17:20:19,724 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 17:20:19,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 17:20:19,859 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-11-28 17:20:19,860 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1089134642] [2019-11-28 17:20:19,860 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 17:20:19,861 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-11-28 17:20:19,861 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1788053773] [2019-11-28 17:20:19,862 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-11-28 17:20:19,862 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 17:20:19,862 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-11-28 17:20:19,863 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2019-11-28 17:20:19,863 INFO L87 Difference]: Start difference. First operand 659 states and 1123 transitions. Second operand 8 states. [2019-11-28 17:20:20,178 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 17:20:20,179 INFO L93 Difference]: Finished difference Result 659 states and 1123 transitions. [2019-11-28 17:20:20,179 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-11-28 17:20:20,179 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 80 [2019-11-28 17:20:20,179 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 17:20:20,179 INFO L225 Difference]: With dead ends: 659 [2019-11-28 17:20:20,180 INFO L226 Difference]: Without dead ends: 0 [2019-11-28 17:20:20,181 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2019-11-28 17:20:20,181 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2019-11-28 17:20:20,181 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2019-11-28 17:20:20,181 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2019-11-28 17:20:20,181 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2019-11-28 17:20:20,182 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 80 [2019-11-28 17:20:20,182 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 17:20:20,182 INFO L462 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-28 17:20:20,182 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-11-28 17:20:20,182 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2019-11-28 17:20:20,182 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2019-11-28 17:20:20,185 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2019-11-28 17:20:20,321 WARN L192 SmtUtils]: Spent 129.00 ms on a formula simplification. DAG size of input: 111 DAG size of output: 105 [2019-11-28 17:20:20,535 WARN L192 SmtUtils]: Spent 120.00 ms on a formula simplification. DAG size of input: 114 DAG size of output: 108 [2019-11-28 17:20:21,917 WARN L192 SmtUtils]: Spent 443.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-11-28 17:20:22,110 WARN L192 SmtUtils]: Spent 101.00 ms on a formula simplification. DAG size of input: 40 DAG size of output: 25 [2019-11-28 17:20:22,930 WARN L192 SmtUtils]: Spent 464.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 70 [2019-11-28 17:20:23,077 WARN L192 SmtUtils]: Spent 145.00 ms on a formula simplification. DAG size of input: 65 DAG size of output: 50 [2019-11-28 17:20:23,336 WARN L192 SmtUtils]: Spent 256.00 ms on a formula simplification. DAG size of input: 69 DAG size of output: 53 [2019-11-28 17:20:23,882 WARN L192 SmtUtils]: Spent 456.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-11-28 17:20:24,469 WARN L192 SmtUtils]: Spent 427.00 ms on a formula simplification. DAG size of input: 91 DAG size of output: 62 [2019-11-28 17:20:24,867 WARN L192 SmtUtils]: Spent 397.00 ms on a formula simplification. DAG size of input: 91 DAG size of output: 62 [2019-11-28 17:20:24,970 WARN L192 SmtUtils]: Spent 101.00 ms on a formula simplification. DAG size of input: 55 DAG size of output: 40 [2019-11-28 17:20:25,432 WARN L192 SmtUtils]: Spent 148.00 ms on a formula simplification. DAG size of input: 61 DAG size of output: 42 [2019-11-28 17:20:25,973 WARN L192 SmtUtils]: Spent 226.00 ms on a formula simplification. DAG size of input: 65 DAG size of output: 49 [2019-11-28 17:20:26,393 WARN L192 SmtUtils]: Spent 259.00 ms on a formula simplification. DAG size of input: 69 DAG size of output: 53 [2019-11-28 17:20:27,186 WARN L192 SmtUtils]: Spent 404.00 ms on a formula simplification. DAG size of input: 94 DAG size of output: 65 [2019-11-28 17:20:27,886 WARN L192 SmtUtils]: Spent 464.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-11-28 17:20:28,882 WARN L192 SmtUtils]: Spent 477.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-11-28 17:20:29,867 WARN L192 SmtUtils]: Spent 305.00 ms on a formula simplification. DAG size of input: 75 DAG size of output: 59 [2019-11-28 17:20:30,314 WARN L192 SmtUtils]: Spent 445.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-11-28 17:20:30,958 WARN L192 SmtUtils]: Spent 446.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-11-28 17:20:31,414 WARN L192 SmtUtils]: Spent 453.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-11-28 17:20:31,769 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 1866) no Hoare annotation was computed. [2019-11-28 17:20:31,770 INFO L242 CegarLoopResult]: At program point L498(lines 493 501) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~__ste_email_isSigned0~0 0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2019-11-28 17:20:31,770 INFO L246 CegarLoopResult]: For program point L1357(lines 1357 1363) no Hoare annotation was computed. [2019-11-28 17:20:31,770 INFO L246 CegarLoopResult]: For program point L2482(lines 2482 2490) no Hoare annotation was computed. [2019-11-28 17:20:31,770 INFO L246 CegarLoopResult]: For program point L1425(lines 1425 1431) no Hoare annotation was computed. [2019-11-28 17:20:31,770 INFO L246 CegarLoopResult]: For program point L2482-2(lines 2482 2490) no Hoare annotation was computed. [2019-11-28 17:20:31,770 INFO L246 CegarLoopResult]: For program point L1425-1(lines 1425 1431) no Hoare annotation was computed. [2019-11-28 17:20:31,770 INFO L246 CegarLoopResult]: For program point L1161(lines 1161 1167) no Hoare annotation was computed. [2019-11-28 17:20:31,770 INFO L246 CegarLoopResult]: For program point L1161-1(lines 1161 1167) no Hoare annotation was computed. [2019-11-28 17:20:31,771 INFO L246 CegarLoopResult]: For program point L1161-2(lines 1161 1167) no Hoare annotation was computed. [2019-11-28 17:20:31,771 INFO L246 CegarLoopResult]: For program point L1161-3(lines 1161 1167) no Hoare annotation was computed. [2019-11-28 17:20:31,771 INFO L246 CegarLoopResult]: For program point L1161-4(lines 1161 1167) no Hoare annotation was computed. [2019-11-28 17:20:31,771 INFO L242 CegarLoopResult]: At program point L2020(lines 2010 2066) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,771 INFO L246 CegarLoopResult]: For program point L2219(lines 2219 2227) no Hoare annotation was computed. [2019-11-28 17:20:31,771 INFO L242 CegarLoopResult]: At program point L1956(lines 1943 2071) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,771 INFO L246 CegarLoopResult]: For program point L2485(lines 2485 2489) no Hoare annotation was computed. [2019-11-28 17:20:31,771 INFO L246 CegarLoopResult]: For program point L2485-3(lines 2485 2489) no Hoare annotation was computed. [2019-11-28 17:20:31,771 INFO L246 CegarLoopResult]: For program point L1296(lines 1296 1320) no Hoare annotation was computed. [2019-11-28 17:20:31,771 INFO L246 CegarLoopResult]: For program point L1296-1(lines 1296 1320) no Hoare annotation was computed. [2019-11-28 17:20:31,772 INFO L246 CegarLoopResult]: For program point L1296-2(lines 1296 1320) no Hoare annotation was computed. [2019-11-28 17:20:31,772 INFO L246 CegarLoopResult]: For program point L1296-3(lines 1296 1320) no Hoare annotation was computed. [2019-11-28 17:20:31,772 INFO L246 CegarLoopResult]: For program point L1296-4(lines 1296 1320) no Hoare annotation was computed. [2019-11-28 17:20:31,772 INFO L246 CegarLoopResult]: For program point L1297(lines 1297 1305) no Hoare annotation was computed. [2019-11-28 17:20:31,772 INFO L246 CegarLoopResult]: For program point L1231(lines 1231 1277) no Hoare annotation was computed. [2019-11-28 17:20:31,772 INFO L246 CegarLoopResult]: For program point L1297-2(lines 1297 1305) no Hoare annotation was computed. [2019-11-28 17:20:31,772 INFO L246 CegarLoopResult]: For program point L2222(lines 2222 2226) no Hoare annotation was computed. [2019-11-28 17:20:31,772 INFO L246 CegarLoopResult]: For program point L1297-4(lines 1297 1305) no Hoare annotation was computed. [2019-11-28 17:20:31,772 INFO L242 CegarLoopResult]: At program point L2222-2(lines 2215 2230) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_sendEmail_~sender) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,772 INFO L246 CegarLoopResult]: For program point L1297-6(lines 1297 1305) no Hoare annotation was computed. [2019-11-28 17:20:31,773 INFO L246 CegarLoopResult]: For program point L1297-8(lines 1297 1305) no Hoare annotation was computed. [2019-11-28 17:20:31,773 INFO L249 CegarLoopResult]: At program point L2817-1(lines 2812 2820) the Hoare annotation is: true [2019-11-28 17:20:31,773 INFO L242 CegarLoopResult]: At program point L2817(lines 2812 2820) the Hoare annotation is: (let ((.cse3 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse5 (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0)) (.cse13 (= ~bob~0 1)) (.cse15 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse7 (not (= ULTIMATE.start_setClientId_~handle 2))) (.cse18 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse12 (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) (.cse2 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse6 (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0))) (.cse0 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse1 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse14 (= ULTIMATE.start_outgoing_~client 1)) (.cse16 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse17 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse8 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse10 (= ULTIMATE.start_isSigned_~handle 1)) (.cse19 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse20 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) (.cse11 (= 1 ULTIMATE.start_createEmail_~msg~0))) (or (and .cse0 .cse1 (let ((.cse4 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse9 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse2 .cse3 .cse4 .cse5 .cse6 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse2 .cse3 .cse4 .cse5 .cse6 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12))) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20) (and .cse3 .cse5 .cse13 .cse15 .cse7 .cse18 .cse12 .cse2 .cse6 .cse0 .cse1 .cse14 (= ~__ste_email_isSigned0~0 0) .cse16 .cse17 .cse8 .cse10 .cse19 .cse20 .cse11))) [2019-11-28 17:20:31,773 INFO L246 CegarLoopResult]: For program point L1232(lines 1232 1243) no Hoare annotation was computed. [2019-11-28 17:20:31,774 INFO L242 CegarLoopResult]: At program point L1166(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,774 INFO L242 CegarLoopResult]: At program point L1166-1(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,774 INFO L242 CegarLoopResult]: At program point L1166-2(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,774 INFO L242 CegarLoopResult]: At program point L1166-3(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,774 INFO L242 CegarLoopResult]: At program point L1166-4(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,774 INFO L246 CegarLoopResult]: For program point L2025(lines 2025 2032) no Hoare annotation was computed. [2019-11-28 17:20:31,775 INFO L242 CegarLoopResult]: At program point L2555(lines 2594 2606) the Hoare annotation is: (let ((.cse9 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse10 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse11 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse2 (= ~bob~0 1)) (.cse12 (= ULTIMATE.start_outgoing_~client 1)) (.cse3 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse13 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse15 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse5 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse16 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse17 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) (.cse7 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse1 (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0)) (.cse8 (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0))) (.cse4 (not (= ULTIMATE.start_setClientId_~handle 2))) (.cse14 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse18 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse6 (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 (= ~__ste_email_isSigned0~0 0) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18) (and .cse9 .cse10 .cse11 .cse2 .cse12 .cse3 .cse13 .cse15 .cse5 .cse16 .cse17 (let ((.cse19 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse20 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse19 .cse7 .cse0 .cse1 .cse8 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse4 .cse14 .cse20 .cse18 .cse6) (and .cse19 .cse7 .cse0 .cse1 .cse8 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse4 .cse14 .cse20 .cse18 .cse6)))))) [2019-11-28 17:20:31,775 INFO L246 CegarLoopResult]: For program point L1366(lines 1366 1382) no Hoare annotation was computed. [2019-11-28 17:20:31,775 INFO L246 CegarLoopResult]: For program point L1300(lines 1300 1304) no Hoare annotation was computed. [2019-11-28 17:20:31,775 INFO L246 CegarLoopResult]: For program point L1300-3(lines 1300 1304) no Hoare annotation was computed. [2019-11-28 17:20:31,775 INFO L246 CegarLoopResult]: For program point L1300-6(lines 1300 1304) no Hoare annotation was computed. [2019-11-28 17:20:31,776 INFO L246 CegarLoopResult]: For program point L1300-9(lines 1300 1304) no Hoare annotation was computed. [2019-11-28 17:20:31,776 INFO L246 CegarLoopResult]: For program point L1961(lines 1961 1968) no Hoare annotation was computed. [2019-11-28 17:20:31,776 INFO L246 CegarLoopResult]: For program point L1300-12(lines 1300 1304) no Hoare annotation was computed. [2019-11-28 17:20:31,776 INFO L246 CegarLoopResult]: For program point L2688(lines 2688 2692) no Hoare annotation was computed. [2019-11-28 17:20:31,777 INFO L242 CegarLoopResult]: At program point L2622(lines 2617 2625) the Hoare annotation is: (let ((.cse2 (= ~bob~0 1)) (.cse3 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse5 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse7 (not (= 0 |ULTIMATE.start_is_queue_empty_#res|))) (.cse8 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse1 (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0)) (.cse9 (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0))) (.cse4 (not (= ULTIMATE.start_setClientId_~handle 2))) (.cse15 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse19 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse6 (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) (.cse10 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse11 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse12 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse13 (= ULTIMATE.start_outgoing_~client 1)) (.cse14 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse16 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse17 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse18 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 (= ~__ste_email_isSigned0~0 0) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19) (and .cse2 .cse3 .cse5 .cse7 (let ((.cse20 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse21 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse20 .cse8 .cse0 .cse1 .cse9 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse4 .cse15 .cse21 .cse19 .cse6) (and .cse20 .cse8 .cse0 .cse1 .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse4 .cse15 .cse21 .cse19 .cse6))) .cse10 .cse11 .cse12 .cse13 .cse14 .cse16 .cse17 .cse18))) [2019-11-28 17:20:31,777 INFO L246 CegarLoopResult]: For program point L2688-1(lines 2688 2692) no Hoare annotation was computed. [2019-11-28 17:20:31,777 INFO L246 CegarLoopResult]: For program point L1565(lines 1565 1577) no Hoare annotation was computed. [2019-11-28 17:20:31,777 INFO L246 CegarLoopResult]: For program point L1565-2(lines 1565 1577) no Hoare annotation was computed. [2019-11-28 17:20:31,778 INFO L246 CegarLoopResult]: For program point L1565-4(lines 1565 1577) no Hoare annotation was computed. [2019-11-28 17:20:31,778 INFO L246 CegarLoopResult]: For program point L1367(lines 1367 1378) no Hoare annotation was computed. [2019-11-28 17:20:31,778 INFO L246 CegarLoopResult]: For program point L1236(lines 1236 1242) no Hoare annotation was computed. [2019-11-28 17:20:31,778 INFO L242 CegarLoopResult]: At program point L1435(lines 1388 1441) the Hoare annotation is: (let ((.cse9 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse10 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse11 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse2 (= ~bob~0 1)) (.cse12 (= ULTIMATE.start_outgoing_~client 1)) (.cse3 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse13 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse15 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse5 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse16 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse17 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) (.cse7 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse1 (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0)) (.cse8 (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0))) (.cse4 (not (= ULTIMATE.start_setClientId_~handle 2))) (.cse14 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse18 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse6 (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 (= ~__ste_email_isSigned0~0 0) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18) (and .cse9 .cse10 .cse11 .cse2 .cse12 .cse3 .cse13 .cse15 .cse5 .cse16 .cse17 (let ((.cse19 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse20 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse19 .cse7 .cse0 .cse1 .cse8 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse4 .cse14 .cse20 .cse18 .cse6) (and .cse19 .cse7 .cse0 .cse1 .cse8 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse4 .cse14 .cse20 .cse18 .cse6)))))) [2019-11-28 17:20:31,779 INFO L246 CegarLoopResult]: For program point L2426(lines 2426 2437) no Hoare annotation was computed. [2019-11-28 17:20:31,779 INFO L249 CegarLoopResult]: At program point L1435-1(lines 1388 1441) the Hoare annotation is: true [2019-11-28 17:20:31,779 INFO L246 CegarLoopResult]: For program point L2426-1(lines 2426 2437) no Hoare annotation was computed. [2019-11-28 17:20:31,779 INFO L246 CegarLoopResult]: For program point L1568(lines 1568 1576) no Hoare annotation was computed. [2019-11-28 17:20:31,779 INFO L246 CegarLoopResult]: For program point L1568-2(lines 1568 1576) no Hoare annotation was computed. [2019-11-28 17:20:31,779 INFO L246 CegarLoopResult]: For program point L1568-4(lines 1568 1576) no Hoare annotation was computed. [2019-11-28 17:20:31,780 INFO L246 CegarLoopResult]: For program point L2163-1(lines 2163 2174) no Hoare annotation was computed. [2019-11-28 17:20:31,780 INFO L246 CegarLoopResult]: For program point L1106(lines 1106 1122) no Hoare annotation was computed. [2019-11-28 17:20:31,780 INFO L246 CegarLoopResult]: For program point L2163(lines 2163 2174) no Hoare annotation was computed. [2019-11-28 17:20:31,780 INFO L246 CegarLoopResult]: For program point L1106-1(lines 1106 1122) no Hoare annotation was computed. [2019-11-28 17:20:31,780 INFO L246 CegarLoopResult]: For program point L1106-2(lines 1106 1122) no Hoare annotation was computed. [2019-11-28 17:20:31,781 INFO L246 CegarLoopResult]: For program point L1106-3(lines 1106 1122) no Hoare annotation was computed. [2019-11-28 17:20:31,781 INFO L246 CegarLoopResult]: For program point L1371(lines 1371 1377) no Hoare annotation was computed. [2019-11-28 17:20:31,781 INFO L242 CegarLoopResult]: At program point L1768(lines 1749 1770) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,781 INFO L246 CegarLoopResult]: For program point L1571(lines 1571 1575) no Hoare annotation was computed. [2019-11-28 17:20:31,781 INFO L242 CegarLoopResult]: At program point L1571-2(lines 1 2844) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2019-11-28 17:20:31,782 INFO L246 CegarLoopResult]: For program point L1571-3(lines 1571 1575) no Hoare annotation was computed. [2019-11-28 17:20:31,782 INFO L246 CegarLoopResult]: For program point L2430(lines 2430 2436) no Hoare annotation was computed. [2019-11-28 17:20:31,782 INFO L242 CegarLoopResult]: At program point L1571-5(lines 1 2844) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (= ULTIMATE.start_setClientId_~handle 2) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_rjh_~rjh___0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2019-11-28 17:20:31,782 INFO L246 CegarLoopResult]: For program point L1571-6(lines 1571 1575) no Hoare annotation was computed. [2019-11-28 17:20:31,782 INFO L246 CegarLoopResult]: For program point L2430-1(lines 2430 2436) no Hoare annotation was computed. [2019-11-28 17:20:31,783 INFO L242 CegarLoopResult]: At program point L1571-8(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) (= ~bob~0 1) (not (= 2 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_email_isSigned0~0 0) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,783 INFO L246 CegarLoopResult]: For program point L1307(lines 1307 1319) no Hoare annotation was computed. [2019-11-28 17:20:31,783 INFO L242 CegarLoopResult]: At program point L1307-1(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,783 INFO L246 CegarLoopResult]: For program point L1307-2(lines 1307 1319) no Hoare annotation was computed. [2019-11-28 17:20:31,783 INFO L242 CegarLoopResult]: At program point L1307-3(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,784 INFO L246 CegarLoopResult]: For program point L1307-4(lines 1307 1319) no Hoare annotation was computed. [2019-11-28 17:20:31,784 INFO L242 CegarLoopResult]: At program point L1307-5(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,784 INFO L246 CegarLoopResult]: For program point L1307-6(lines 1307 1319) no Hoare annotation was computed. [2019-11-28 17:20:31,784 INFO L242 CegarLoopResult]: At program point L1307-7(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,784 INFO L246 CegarLoopResult]: For program point L1307-8(lines 1307 1319) no Hoare annotation was computed. [2019-11-28 17:20:31,785 INFO L242 CegarLoopResult]: At program point L2034(lines 2021 2065) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,785 INFO L242 CegarLoopResult]: At program point L1307-9(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,785 INFO L246 CegarLoopResult]: For program point L1308(lines 1308 1316) no Hoare annotation was computed. [2019-11-28 17:20:31,785 INFO L246 CegarLoopResult]: For program point L1308-2(lines 1308 1316) no Hoare annotation was computed. [2019-11-28 17:20:31,785 INFO L246 CegarLoopResult]: For program point L1308-4(lines 1308 1316) no Hoare annotation was computed. [2019-11-28 17:20:31,786 INFO L246 CegarLoopResult]: For program point L2167-1(lines 2167 2173) no Hoare annotation was computed. [2019-11-28 17:20:31,786 INFO L246 CegarLoopResult]: For program point L1308-6(lines 1308 1316) no Hoare annotation was computed. [2019-11-28 17:20:31,786 INFO L246 CegarLoopResult]: For program point L1110(lines 1110 1121) no Hoare annotation was computed. [2019-11-28 17:20:31,786 INFO L246 CegarLoopResult]: For program point L2167(lines 2167 2173) no Hoare annotation was computed. [2019-11-28 17:20:31,786 INFO L246 CegarLoopResult]: For program point L1110-1(lines 1110 1121) no Hoare annotation was computed. [2019-11-28 17:20:31,787 INFO L246 CegarLoopResult]: For program point L1308-8(lines 1308 1316) no Hoare annotation was computed. [2019-11-28 17:20:31,787 INFO L246 CegarLoopResult]: For program point L1110-2(lines 1110 1121) no Hoare annotation was computed. [2019-11-28 17:20:31,787 INFO L246 CegarLoopResult]: For program point L1110-3(lines 1110 1121) no Hoare annotation was computed. [2019-11-28 17:20:31,787 INFO L246 CegarLoopResult]: For program point L1177(lines 1177 1189) no Hoare annotation was computed. [2019-11-28 17:20:31,787 INFO L246 CegarLoopResult]: For program point L1177-2(lines 1177 1189) no Hoare annotation was computed. [2019-11-28 17:20:31,787 INFO L246 CegarLoopResult]: For program point L1177-4(lines 1177 1189) no Hoare annotation was computed. [2019-11-28 17:20:31,787 INFO L246 CegarLoopResult]: For program point L1177-6(lines 1177 1189) no Hoare annotation was computed. [2019-11-28 17:20:31,788 INFO L242 CegarLoopResult]: At program point L1970(lines 1957 2070) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,788 INFO L246 CegarLoopResult]: For program point L1177-8(lines 1177 1189) no Hoare annotation was computed. [2019-11-28 17:20:31,788 INFO L242 CegarLoopResult]: At program point L2631(lines 2626 2634) the Hoare annotation is: false [2019-11-28 17:20:31,788 INFO L246 CegarLoopResult]: For program point L1311(lines 1311 1315) no Hoare annotation was computed. [2019-11-28 17:20:31,788 INFO L246 CegarLoopResult]: For program point L1245(lines 1245 1276) no Hoare annotation was computed. [2019-11-28 17:20:31,788 INFO L246 CegarLoopResult]: For program point L1311-3(lines 1311 1315) no Hoare annotation was computed. [2019-11-28 17:20:31,788 INFO L246 CegarLoopResult]: For program point L1311-6(lines 1311 1315) no Hoare annotation was computed. [2019-11-28 17:20:31,788 INFO L246 CegarLoopResult]: For program point L1311-9(lines 1311 1315) no Hoare annotation was computed. [2019-11-28 17:20:31,788 INFO L246 CegarLoopResult]: For program point L1311-12(lines 1311 1315) no Hoare annotation was computed. [2019-11-28 17:20:31,789 INFO L249 CegarLoopResult]: At program point L2435-1(lines 2422 2440) the Hoare annotation is: true [2019-11-28 17:20:31,789 INFO L242 CegarLoopResult]: At program point L2435(lines 2422 2440) the Hoare annotation is: (let ((.cse9 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse10 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse11 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse2 (= ~bob~0 1)) (.cse12 (= ULTIMATE.start_outgoing_~client 1)) (.cse3 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse13 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse15 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse5 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse16 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse17 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) (.cse7 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse1 (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0)) (.cse8 (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0))) (.cse4 (not (= ULTIMATE.start_setClientId_~handle 2))) (.cse14 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse18 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse6 (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 (= ~__ste_email_isSigned0~0 0) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18) (and .cse9 .cse10 .cse11 .cse2 .cse12 .cse3 .cse13 .cse15 .cse5 .cse16 .cse17 (let ((.cse19 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse20 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse19 .cse7 .cse0 .cse1 .cse8 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse4 .cse14 .cse20 .cse18 .cse6) (and .cse19 .cse7 .cse0 .cse1 .cse8 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse4 .cse14 .cse20 .cse18 .cse6)))))) [2019-11-28 17:20:31,789 INFO L246 CegarLoopResult]: For program point L1246(lines 1246 1257) no Hoare annotation was computed. [2019-11-28 17:20:31,789 INFO L246 CegarLoopResult]: For program point L1180(lines 1180 1188) no Hoare annotation was computed. [2019-11-28 17:20:31,789 INFO L246 CegarLoopResult]: For program point L1180-2(lines 1180 1188) no Hoare annotation was computed. [2019-11-28 17:20:31,789 INFO L246 CegarLoopResult]: For program point L1114(lines 1114 1120) no Hoare annotation was computed. [2019-11-28 17:20:31,790 INFO L246 CegarLoopResult]: For program point L1114-1(lines 1114 1120) no Hoare annotation was computed. [2019-11-28 17:20:31,790 INFO L246 CegarLoopResult]: For program point L1180-4(lines 1180 1188) no Hoare annotation was computed. [2019-11-28 17:20:31,790 INFO L246 CegarLoopResult]: For program point L1114-2(lines 1114 1120) no Hoare annotation was computed. [2019-11-28 17:20:31,790 INFO L246 CegarLoopResult]: For program point L2039(lines 2039 2046) no Hoare annotation was computed. [2019-11-28 17:20:31,790 INFO L246 CegarLoopResult]: For program point L1114-3(lines 1114 1120) no Hoare annotation was computed. [2019-11-28 17:20:31,790 INFO L246 CegarLoopResult]: For program point L1180-6(lines 1180 1188) no Hoare annotation was computed. [2019-11-28 17:20:31,790 INFO L246 CegarLoopResult]: For program point L1180-8(lines 1180 1188) no Hoare annotation was computed. [2019-11-28 17:20:31,790 INFO L246 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2019-11-28 17:20:31,791 INFO L242 CegarLoopResult]: At program point L2172(lines 2159 2177) the Hoare annotation is: (let ((.cse9 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse10 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse11 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse2 (= ~bob~0 1)) (.cse12 (= ULTIMATE.start_outgoing_~client 1)) (.cse3 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse13 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse15 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse5 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse16 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse17 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) (.cse7 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse1 (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0)) (.cse8 (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0))) (.cse4 (not (= ULTIMATE.start_setClientId_~handle 2))) (.cse14 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse18 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse6 (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 (= ~__ste_email_isSigned0~0 0) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18) (and .cse9 .cse10 .cse11 .cse2 .cse12 .cse3 .cse13 .cse15 .cse5 .cse16 .cse17 (let ((.cse19 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse20 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse19 .cse7 .cse0 .cse1 .cse8 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse4 .cse14 .cse20 .cse18 .cse6) (and .cse19 .cse7 .cse0 .cse1 .cse8 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse4 .cse14 .cse20 .cse18 .cse6)))))) [2019-11-28 17:20:31,791 INFO L249 CegarLoopResult]: At program point L2172-1(lines 2159 2177) the Hoare annotation is: true [2019-11-28 17:20:31,791 INFO L246 CegarLoopResult]: For program point L1446(lines 1446 1482) no Hoare annotation was computed. [2019-11-28 17:20:31,791 INFO L246 CegarLoopResult]: For program point L1446-1(lines 1446 1482) no Hoare annotation was computed. [2019-11-28 17:20:31,791 INFO L246 CegarLoopResult]: For program point L1446-2(lines 1446 1482) no Hoare annotation was computed. [2019-11-28 17:20:31,791 INFO L246 CegarLoopResult]: For program point L1446-3(lines 1446 1482) no Hoare annotation was computed. [2019-11-28 17:20:31,792 INFO L246 CegarLoopResult]: For program point L1446-4(lines 1446 1482) no Hoare annotation was computed. [2019-11-28 17:20:31,792 INFO L246 CegarLoopResult]: For program point L1975(lines 1975 1982) no Hoare annotation was computed. [2019-11-28 17:20:31,792 INFO L246 CegarLoopResult]: For program point L1447(lines 1447 1455) no Hoare annotation was computed. [2019-11-28 17:20:31,792 INFO L242 CegarLoopResult]: At program point L1381(lines 1334 1387) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,792 INFO L246 CegarLoopResult]: For program point L1447-2(lines 1447 1455) no Hoare annotation was computed. [2019-11-28 17:20:31,792 INFO L246 CegarLoopResult]: For program point L1447-4(lines 1447 1455) no Hoare annotation was computed. [2019-11-28 17:20:31,792 INFO L246 CegarLoopResult]: For program point L1447-6(lines 1447 1455) no Hoare annotation was computed. [2019-11-28 17:20:31,793 INFO L246 CegarLoopResult]: For program point L1183(lines 1183 1187) no Hoare annotation was computed. [2019-11-28 17:20:31,793 INFO L246 CegarLoopResult]: For program point L1447-8(lines 1447 1455) no Hoare annotation was computed. [2019-11-28 17:20:31,793 INFO L242 CegarLoopResult]: At program point L1183-2(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,793 INFO L246 CegarLoopResult]: For program point L1183-3(lines 1183 1187) no Hoare annotation was computed. [2019-11-28 17:20:31,793 INFO L242 CegarLoopResult]: At program point L1183-5(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,794 INFO L246 CegarLoopResult]: For program point L1183-6(lines 1183 1187) no Hoare annotation was computed. [2019-11-28 17:20:31,794 INFO L242 CegarLoopResult]: At program point L1183-8(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,794 INFO L246 CegarLoopResult]: For program point L1183-9(lines 1183 1187) no Hoare annotation was computed. [2019-11-28 17:20:31,794 INFO L242 CegarLoopResult]: At program point L1183-11(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,794 INFO L246 CegarLoopResult]: For program point L1183-12(lines 1183 1187) no Hoare annotation was computed. [2019-11-28 17:20:31,795 INFO L242 CegarLoopResult]: At program point L1183-14(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,795 INFO L246 CegarLoopResult]: For program point L1250(lines 1250 1256) no Hoare annotation was computed. [2019-11-28 17:20:31,795 INFO L246 CegarLoopResult]: For program point L1911(lines 1910 2074) no Hoare annotation was computed. [2019-11-28 17:20:31,795 INFO L242 CegarLoopResult]: At program point L1119(lines 1102 1125) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= ~bob~0 1) (not (= ULTIMATE.start_setClientId_~handle 2)) (= ULTIMATE.start_getClientPrivateKey_~handle 1) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) (= ULTIMATE.start_outgoing_~client 1) (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) (= ~__ste_email_isSigned0~0 0) (= 1 ULTIMATE.start_sendEmail_~sender) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0)) [2019-11-28 17:20:31,796 INFO L242 CegarLoopResult]: At program point L1119-1(lines 1102 1125) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= ~bob~0 1) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= ~__ste_client_privateKey0~0 0)) (= ULTIMATE.start_getClientPrivateKey_~handle 1) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) (= ULTIMATE.start_outgoing_~client 1) (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1) (= 1 ULTIMATE.start_sendEmail_~sender) (= |ULTIMATE.start_createEmail_#res| 1) (= ULTIMATE.start_isSigned_~handle 1) (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0)) [2019-11-28 17:20:31,796 INFO L242 CegarLoopResult]: At program point L1119-2(lines 1102 1125) the Hoare annotation is: false [2019-11-28 17:20:31,796 INFO L242 CegarLoopResult]: At program point L1119-3(lines 1102 1125) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_createEmail_#res| 1) (not (= ~__ste_client_privateKey0~0 0)) (= 1 ULTIMATE.start_createEmail_~msg~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,796 INFO L246 CegarLoopResult]: For program point L1912(lines 1912 1916) no Hoare annotation was computed. [2019-11-28 17:20:31,796 INFO L246 CegarLoopResult]: For program point L1450(lines 1450 1454) no Hoare annotation was computed. [2019-11-28 17:20:31,797 INFO L246 CegarLoopResult]: For program point L1450-3(lines 1450 1454) no Hoare annotation was computed. [2019-11-28 17:20:31,797 INFO L246 CegarLoopResult]: For program point L1450-6(lines 1450 1454) no Hoare annotation was computed. [2019-11-28 17:20:31,797 INFO L246 CegarLoopResult]: For program point L1450-9(lines 1450 1454) no Hoare annotation was computed. [2019-11-28 17:20:31,797 INFO L246 CegarLoopResult]: For program point L63(lines 63 76) no Hoare annotation was computed. [2019-11-28 17:20:31,797 INFO L246 CegarLoopResult]: For program point L1450-12(lines 1450 1454) no Hoare annotation was computed. [2019-11-28 17:20:31,798 INFO L242 CegarLoopResult]: At program point L63-1(lines 54 79) the Hoare annotation is: (let ((.cse1 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse3 (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0)) (.cse12 (= 1 ~queue_empty~0)) (.cse13 (= ~bob~0 1)) (.cse14 (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7)) (.cse5 (not (= ULTIMATE.start_setClientId_~handle 2))) (.cse17 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse10 (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) (.cse0 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse4 (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0))) (.cse11 (= ULTIMATE.start_outgoing_~client 1)) (.cse15 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse16 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse6 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse8 (= ULTIMATE.start_isSigned_~handle 1)) (.cse18 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse19 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) (.cse9 (= 1 ULTIMATE.start_createEmail_~msg~0))) (or (and (let ((.cse2 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse7 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10))) .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19) (and .cse1 .cse3 .cse12 .cse13 .cse14 .cse5 .cse17 .cse10 .cse0 .cse4 .cse11 (= ~__ste_email_isSigned0~0 0) .cse15 .cse16 .cse6 .cse8 .cse18 .cse19 .cse9))) [2019-11-28 17:20:31,798 INFO L246 CegarLoopResult]: For program point L63-2(lines 63 76) no Hoare annotation was computed. [2019-11-28 17:20:31,798 INFO L249 CegarLoopResult]: At program point L63-3(lines 54 79) the Hoare annotation is: true [2019-11-28 17:20:31,798 INFO L242 CegarLoopResult]: At program point L2640(lines 2635 2643) the Hoare annotation is: false [2019-11-28 17:20:31,798 INFO L246 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2019-11-28 17:20:31,799 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1866) no Hoare annotation was computed. [2019-11-28 17:20:31,799 INFO L242 CegarLoopResult]: At program point L2048(lines 2035 2064) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,799 INFO L242 CegarLoopResult]: At program point L2841(lines 2830 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_sendEmail_~sender) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,799 INFO L246 CegarLoopResult]: For program point L2445(lines 2445 2453) no Hoare annotation was computed. [2019-11-28 17:20:31,799 INFO L246 CegarLoopResult]: For program point L2445-2(lines 2445 2453) no Hoare annotation was computed. [2019-11-28 17:20:31,799 INFO L246 CegarLoopResult]: For program point L67(lines 67 73) no Hoare annotation was computed. [2019-11-28 17:20:31,799 INFO L246 CegarLoopResult]: For program point L67-2(lines 67 73) no Hoare annotation was computed. [2019-11-28 17:20:31,799 INFO L246 CegarLoopResult]: For program point L2182(lines 2182 2190) no Hoare annotation was computed. [2019-11-28 17:20:31,799 INFO L246 CegarLoopResult]: For program point L2182-2(lines 2182 2190) no Hoare annotation was computed. [2019-11-28 17:20:31,799 INFO L246 CegarLoopResult]: For program point L2182-4(lines 2182 2190) no Hoare annotation was computed. [2019-11-28 17:20:31,800 INFO L242 CegarLoopResult]: At program point L1984(lines 1971 2069) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,800 INFO L246 CegarLoopResult]: For program point L1918(lines 1918 2073) no Hoare annotation was computed. [2019-11-28 17:20:31,800 INFO L246 CegarLoopResult]: For program point L1457(lines 1457 1481) no Hoare annotation was computed. [2019-11-28 17:20:31,800 INFO L246 CegarLoopResult]: For program point L2448(lines 2448 2452) no Hoare annotation was computed. [2019-11-28 17:20:31,800 INFO L246 CegarLoopResult]: For program point L1457-1(lines 1457 1481) no Hoare annotation was computed. [2019-11-28 17:20:31,800 INFO L246 CegarLoopResult]: For program point L1457-2(lines 1457 1481) no Hoare annotation was computed. [2019-11-28 17:20:31,800 INFO L242 CegarLoopResult]: At program point L2448-2(lines 1 2844) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0)) (.cse1 (= ~bob~0 1)) (.cse2 (not (= ULTIMATE.start_setClientId_~handle 2))) (.cse3 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse4 (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) (.cse5 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse6 (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0))) (.cse7 (= ULTIMATE.start_outgoing_~client 1)) (.cse8 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse9 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse10 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) (.cse11 (= 1 ULTIMATE.start_createEmail_~msg~0))) (or (and .cse0 (= 1 ~queue_empty~0) .cse1 (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= ~__ste_email_isSigned0~0 0) .cse8 .cse9 .cse10 .cse11) (and (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) .cse0 .cse1 .cse2 (not (= ~__ste_client_privateKey0~0 0)) .cse3 .cse4 .cse5 .cse6 (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) .cse7 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse8 .cse9 .cse10 .cse11))) [2019-11-28 17:20:31,800 INFO L246 CegarLoopResult]: For program point L1457-3(lines 1457 1481) no Hoare annotation was computed. [2019-11-28 17:20:31,800 INFO L246 CegarLoopResult]: For program point L1457-4(lines 1457 1481) no Hoare annotation was computed. [2019-11-28 17:20:31,801 INFO L246 CegarLoopResult]: For program point L2448-3(lines 2448 2452) no Hoare annotation was computed. [2019-11-28 17:20:31,801 INFO L246 CegarLoopResult]: For program point L1259(lines 1259 1275) no Hoare annotation was computed. [2019-11-28 17:20:31,801 INFO L242 CegarLoopResult]: At program point L2448-5(lines 1 2844) the Hoare annotation is: false [2019-11-28 17:20:31,801 INFO L246 CegarLoopResult]: For program point L2713-1(lines 2713 2724) no Hoare annotation was computed. [2019-11-28 17:20:31,801 INFO L246 CegarLoopResult]: For program point L2713(lines 2713 2724) no Hoare annotation was computed. [2019-11-28 17:20:31,801 INFO L246 CegarLoopResult]: For program point L1458(lines 1458 1466) no Hoare annotation was computed. [2019-11-28 17:20:31,801 INFO L246 CegarLoopResult]: For program point L1458-2(lines 1458 1466) no Hoare annotation was computed. [2019-11-28 17:20:31,801 INFO L246 CegarLoopResult]: For program point L1392(lines 1392 1438) no Hoare annotation was computed. [2019-11-28 17:20:31,801 INFO L246 CegarLoopResult]: For program point L1392-1(lines 1392 1438) no Hoare annotation was computed. [2019-11-28 17:20:31,801 INFO L246 CegarLoopResult]: For program point L1458-4(lines 1458 1466) no Hoare annotation was computed. [2019-11-28 17:20:31,801 INFO L246 CegarLoopResult]: For program point L1260(lines 1260 1271) no Hoare annotation was computed. [2019-11-28 17:20:31,802 INFO L246 CegarLoopResult]: For program point L1458-6(lines 1458 1466) no Hoare annotation was computed. [2019-11-28 17:20:31,802 INFO L246 CegarLoopResult]: For program point L1458-8(lines 1458 1466) no Hoare annotation was computed. [2019-11-28 17:20:31,802 INFO L246 CegarLoopResult]: For program point L2185(lines 2185 2189) no Hoare annotation was computed. [2019-11-28 17:20:31,802 INFO L246 CegarLoopResult]: For program point L2185-3(lines 2185 2189) no Hoare annotation was computed. [2019-11-28 17:20:31,802 INFO L242 CegarLoopResult]: At program point L2185-2(lines 2178 2193) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_sendEmail_~sender) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,802 INFO L246 CegarLoopResult]: For program point L2053(lines 2053 2060) no Hoare annotation was computed. [2019-11-28 17:20:31,802 INFO L242 CegarLoopResult]: At program point L2185-5(lines 2178 2193) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse1 (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0)) (.cse2 (= ~bob~0 1)) (.cse3 (not (= ULTIMATE.start_setClientId_~handle 2))) (.cse4 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse5 (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) (.cse6 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse7 (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0))) (.cse8 (= ULTIMATE.start_outgoing_~client 1)) (.cse9 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse11 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse10 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse12 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) (.cse13 (= 1 ULTIMATE.start_createEmail_~msg~0))) (or (and .cse0 .cse1 (= 1 ~queue_empty~0) .cse2 (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (= ~__ste_email_isSigned0~0 0) .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) .cse1 .cse2 .cse3 (not (= ~__ste_client_privateKey0~0 0)) .cse4 .cse5 .cse6 .cse7 (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) .cse8 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse9 .cse11 .cse10 .cse12 .cse13))) [2019-11-28 17:20:31,802 INFO L242 CegarLoopResult]: At program point L2053-1(lines 1910 2074) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,802 INFO L246 CegarLoopResult]: For program point L2185-6(lines 2185 2189) no Hoare annotation was computed. [2019-11-28 17:20:31,803 INFO L242 CegarLoopResult]: At program point L2185-8(lines 2178 2193) the Hoare annotation is: false [2019-11-28 17:20:31,803 INFO L246 CegarLoopResult]: For program point L1393(lines 1393 1404) no Hoare annotation was computed. [2019-11-28 17:20:31,803 INFO L246 CegarLoopResult]: For program point L1393-1(lines 1393 1404) no Hoare annotation was computed. [2019-11-28 17:20:31,803 INFO L246 CegarLoopResult]: For program point L1922(lines 1922 1929) no Hoare annotation was computed. [2019-11-28 17:20:31,803 INFO L246 CegarLoopResult]: For program point L1130(lines 1130 1142) no Hoare annotation was computed. [2019-11-28 17:20:31,803 INFO L246 CegarLoopResult]: For program point L1130-2(lines 1130 1142) no Hoare annotation was computed. [2019-11-28 17:20:31,803 INFO L246 CegarLoopResult]: For program point L1130-4(lines 1130 1142) no Hoare annotation was computed. [2019-11-28 17:20:31,803 INFO L246 CegarLoopResult]: For program point L1989(lines 1989 1993) no Hoare annotation was computed. [2019-11-28 17:20:31,803 INFO L246 CegarLoopResult]: For program point L1130-6(lines 1130 1142) no Hoare annotation was computed. [2019-11-28 17:20:31,804 INFO L246 CegarLoopResult]: For program point L1130-8(lines 1130 1142) no Hoare annotation was computed. [2019-11-28 17:20:31,804 INFO L246 CegarLoopResult]: For program point L1130-10(lines 1130 1142) no Hoare annotation was computed. [2019-11-28 17:20:31,804 INFO L242 CegarLoopResult]: At program point L1725(lines 1705 1727) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) (= ~bob~0 1) (not (= 2 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_email_isSigned0~0 0) (not (= ULTIMATE.start_setClientPrivateKey_~handle 2)) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,804 INFO L246 CegarLoopResult]: For program point L1461(lines 1461 1465) no Hoare annotation was computed. [2019-11-28 17:20:31,804 INFO L246 CegarLoopResult]: For program point L1461-3(lines 1461 1465) no Hoare annotation was computed. [2019-11-28 17:20:31,805 INFO L246 CegarLoopResult]: For program point L1461-6(lines 1461 1465) no Hoare annotation was computed. [2019-11-28 17:20:31,805 INFO L246 CegarLoopResult]: For program point L1461-9(lines 1461 1465) no Hoare annotation was computed. [2019-11-28 17:20:31,805 INFO L246 CegarLoopResult]: For program point L1461-12(lines 1461 1465) no Hoare annotation was computed. [2019-11-28 17:20:31,805 INFO L246 CegarLoopResult]: For program point L2717-1(lines 2713 2724) no Hoare annotation was computed. [2019-11-28 17:20:31,805 INFO L246 CegarLoopResult]: For program point L2717(lines 2717 2721) no Hoare annotation was computed. [2019-11-28 17:20:31,805 INFO L246 CegarLoopResult]: For program point L2717-3(lines 2713 2724) no Hoare annotation was computed. [2019-11-28 17:20:31,806 INFO L246 CegarLoopResult]: For program point L2717-2(lines 2717 2721) no Hoare annotation was computed. [2019-11-28 17:20:31,806 INFO L246 CegarLoopResult]: For program point L1264(lines 1264 1270) no Hoare annotation was computed. [2019-11-28 17:20:31,806 INFO L246 CegarLoopResult]: For program point L1397(lines 1397 1403) no Hoare annotation was computed. [2019-11-28 17:20:31,806 INFO L246 CegarLoopResult]: For program point L1397-1(lines 1397 1403) no Hoare annotation was computed. [2019-11-28 17:20:31,806 INFO L246 CegarLoopResult]: For program point L1133(lines 1133 1141) no Hoare annotation was computed. [2019-11-28 17:20:31,807 INFO L246 CegarLoopResult]: For program point L1133-2(lines 1133 1141) no Hoare annotation was computed. [2019-11-28 17:20:31,807 INFO L246 CegarLoopResult]: For program point L1133-4(lines 1133 1141) no Hoare annotation was computed. [2019-11-28 17:20:31,807 INFO L246 CegarLoopResult]: For program point L1133-6(lines 1133 1141) no Hoare annotation was computed. [2019-11-28 17:20:31,807 INFO L246 CegarLoopResult]: For program point L1133-8(lines 1133 1141) no Hoare annotation was computed. [2019-11-28 17:20:31,807 INFO L246 CegarLoopResult]: For program point L1133-10(lines 1133 1141) no Hoare annotation was computed. [2019-11-28 17:20:31,807 INFO L246 CegarLoopResult]: For program point L2653-1(lines 2653 2663) no Hoare annotation was computed. [2019-11-28 17:20:31,808 INFO L246 CegarLoopResult]: For program point L2653(lines 2653 2663) no Hoare annotation was computed. [2019-11-28 17:20:31,808 INFO L246 CegarLoopResult]: For program point L2389-1(lines 2389 2400) no Hoare annotation was computed. [2019-11-28 17:20:31,808 INFO L246 CegarLoopResult]: For program point L2389(lines 2389 2400) no Hoare annotation was computed. [2019-11-28 17:20:31,808 INFO L246 CegarLoopResult]: For program point L2389-3(lines 2389 2400) no Hoare annotation was computed. [2019-11-28 17:20:31,808 INFO L246 CegarLoopResult]: For program point L2389-2(lines 2389 2400) no Hoare annotation was computed. [2019-11-28 17:20:31,808 INFO L246 CegarLoopResult]: For program point L1136(lines 1136 1140) no Hoare annotation was computed. [2019-11-28 17:20:31,809 INFO L242 CegarLoopResult]: At program point L1136-2(lines 1 2844) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2019-11-28 17:20:31,809 INFO L246 CegarLoopResult]: For program point L1136-3(lines 1136 1140) no Hoare annotation was computed. [2019-11-28 17:20:31,809 INFO L242 CegarLoopResult]: At program point L1136-5(lines 1 2844) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (= ULTIMATE.start_setClientId_~handle 2) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_rjh_~rjh___0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2019-11-28 17:20:31,809 INFO L242 CegarLoopResult]: At program point L1995(lines 1985 2068) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,810 INFO L246 CegarLoopResult]: For program point L1136-6(lines 1136 1140) no Hoare annotation was computed. [2019-11-28 17:20:31,810 INFO L242 CegarLoopResult]: At program point L1136-8(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) (= ~bob~0 1) (not (= 2 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_email_isSigned0~0 0) (not (= ULTIMATE.start_setClientPrivateKey_~handle 2)) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,810 INFO L246 CegarLoopResult]: For program point L1136-9(lines 1136 1140) no Hoare annotation was computed. [2019-11-28 17:20:31,810 INFO L242 CegarLoopResult]: At program point L1136-11(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,810 INFO L246 CegarLoopResult]: For program point L1136-12(lines 1136 1140) no Hoare annotation was computed. [2019-11-28 17:20:31,811 INFO L242 CegarLoopResult]: At program point L1136-14(lines 1851 1860) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,811 INFO L246 CegarLoopResult]: For program point L1136-15(lines 1136 1140) no Hoare annotation was computed. [2019-11-28 17:20:31,811 INFO L242 CegarLoopResult]: At program point L1136-17(lines 1841 1850) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,811 INFO L246 CegarLoopResult]: For program point L2657-1(lines 2657 2662) no Hoare annotation was computed. [2019-11-28 17:20:31,811 INFO L246 CegarLoopResult]: For program point L2657(lines 2657 2662) no Hoare annotation was computed. [2019-11-28 17:20:31,812 INFO L246 CegarLoopResult]: For program point L1468(lines 1468 1480) no Hoare annotation was computed. [2019-11-28 17:20:31,812 INFO L242 CegarLoopResult]: At program point L1468-1(lines 1442 1485) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,812 INFO L246 CegarLoopResult]: For program point L1468-2(lines 1468 1480) no Hoare annotation was computed. [2019-11-28 17:20:31,812 INFO L242 CegarLoopResult]: At program point L1468-3(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,813 INFO L246 CegarLoopResult]: For program point L2393-1(lines 2393 2399) no Hoare annotation was computed. [2019-11-28 17:20:31,813 INFO L246 CegarLoopResult]: For program point L1468-4(lines 1468 1480) no Hoare annotation was computed. [2019-11-28 17:20:31,813 INFO L246 CegarLoopResult]: For program point L2393(lines 2393 2399) no Hoare annotation was computed. [2019-11-28 17:20:31,813 INFO L242 CegarLoopResult]: At program point L1468-5(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,813 INFO L246 CegarLoopResult]: For program point L2393-3(lines 2393 2399) no Hoare annotation was computed. [2019-11-28 17:20:31,814 INFO L246 CegarLoopResult]: For program point L1468-6(lines 1468 1480) no Hoare annotation was computed. [2019-11-28 17:20:31,814 INFO L246 CegarLoopResult]: For program point L2393-2(lines 2393 2399) no Hoare annotation was computed. [2019-11-28 17:20:31,814 INFO L242 CegarLoopResult]: At program point L1468-7(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,814 INFO L246 CegarLoopResult]: For program point L1204(lines 1204 1214) no Hoare annotation was computed. [2019-11-28 17:20:31,814 INFO L246 CegarLoopResult]: For program point L1468-8(lines 1468 1480) no Hoare annotation was computed. [2019-11-28 17:20:31,814 INFO L246 CegarLoopResult]: For program point L1204-1(lines 1204 1214) no Hoare annotation was computed. [2019-11-28 17:20:31,815 INFO L242 CegarLoopResult]: At program point L1468-9(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,815 INFO L246 CegarLoopResult]: For program point L1204-2(lines 1204 1214) no Hoare annotation was computed. [2019-11-28 17:20:31,815 INFO L246 CegarLoopResult]: For program point L1204-3(lines 1204 1214) no Hoare annotation was computed. [2019-11-28 17:20:31,815 INFO L246 CegarLoopResult]: For program point L1204-4(lines 1204 1214) no Hoare annotation was computed. [2019-11-28 17:20:31,816 INFO L242 CegarLoopResult]: At program point L1931(lines 1918 2073) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,816 INFO L246 CegarLoopResult]: For program point L1469(lines 1469 1477) no Hoare annotation was computed. [2019-11-28 17:20:31,816 INFO L246 CegarLoopResult]: For program point L1469-2(lines 1469 1477) no Hoare annotation was computed. [2019-11-28 17:20:31,816 INFO L246 CegarLoopResult]: For program point L1469-4(lines 1469 1477) no Hoare annotation was computed. [2019-11-28 17:20:31,816 INFO L246 CegarLoopResult]: For program point L1469-6(lines 1469 1477) no Hoare annotation was computed. [2019-11-28 17:20:31,816 INFO L246 CegarLoopResult]: For program point L1469-8(lines 1469 1477) no Hoare annotation was computed. [2019-11-28 17:20:31,817 INFO L246 CegarLoopResult]: For program point L1866(line 1866) no Hoare annotation was computed. [2019-11-28 17:20:31,817 INFO L246 CegarLoopResult]: For program point L1866-1(line 1866) no Hoare annotation was computed. [2019-11-28 17:20:31,817 INFO L246 CegarLoopResult]: For program point L1338(lines 1338 1384) no Hoare annotation was computed. [2019-11-28 17:20:31,817 INFO L246 CegarLoopResult]: For program point L1339(lines 1339 1350) no Hoare annotation was computed. [2019-11-28 17:20:31,817 INFO L246 CegarLoopResult]: For program point L2000(lines 2000 2007) no Hoare annotation was computed. [2019-11-28 17:20:31,817 INFO L246 CegarLoopResult]: For program point L1472(lines 1472 1476) no Hoare annotation was computed. [2019-11-28 17:20:31,818 INFO L246 CegarLoopResult]: For program point L1406(lines 1406 1437) no Hoare annotation was computed. [2019-11-28 17:20:31,818 INFO L246 CegarLoopResult]: For program point L1472-3(lines 1472 1476) no Hoare annotation was computed. [2019-11-28 17:20:31,818 INFO L246 CegarLoopResult]: For program point L1406-1(lines 1406 1437) no Hoare annotation was computed. [2019-11-28 17:20:31,818 INFO L242 CegarLoopResult]: At program point L1274(lines 1227 1280) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,818 INFO L246 CegarLoopResult]: For program point L1472-6(lines 1472 1476) no Hoare annotation was computed. [2019-11-28 17:20:31,819 INFO L246 CegarLoopResult]: For program point L1472-9(lines 1472 1476) no Hoare annotation was computed. [2019-11-28 17:20:31,819 INFO L246 CegarLoopResult]: For program point L1472-12(lines 1472 1476) no Hoare annotation was computed. [2019-11-28 17:20:31,819 INFO L242 CegarLoopResult]: At program point L2398(lines 2385 2403) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse1 (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0)) (.cse2 (= ~bob~0 1)) (.cse3 (not (= ULTIMATE.start_setClientId_~handle 2))) (.cse4 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse5 (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) (.cse6 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse7 (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0))) (.cse8 (= ULTIMATE.start_outgoing_~client 1)) (.cse9 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse11 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse10 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse12 (= ULTIMATE.start_isSigned_~handle 1)) (.cse13 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse14 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) (.cse15 (= 1 ULTIMATE.start_createEmail_~msg~0))) (or (and .cse0 .cse1 (= 1 ~queue_empty~0) .cse2 (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (= ~__ste_email_isSigned0~0 0) .cse9 .cse10 .cse11 .cse12 (= |ULTIMATE.start_isSigned_#res| 0) .cse13 .cse14 .cse15) (and .cse0 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) .cse1 .cse2 .cse3 (not (= ~__ste_client_privateKey0~0 0)) .cse4 .cse5 .cse6 .cse7 (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) .cse8 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse9 .cse11 .cse10 .cse12 .cse13 .cse14 .cse15))) [2019-11-28 17:20:31,819 INFO L246 CegarLoopResult]: For program point L1407(lines 1407 1418) no Hoare annotation was computed. [2019-11-28 17:20:31,819 INFO L246 CegarLoopResult]: For program point L1407-1(lines 1407 1418) no Hoare annotation was computed. [2019-11-28 17:20:31,820 INFO L246 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2019-11-28 17:20:31,820 INFO L242 CegarLoopResult]: At program point L2398-2(lines 2385 2403) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_isSigned_#res| 0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,820 INFO L242 CegarLoopResult]: At program point L2398-1(lines 2385 2403) the Hoare annotation is: (let ((.cse9 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse10 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse11 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse2 (= ~bob~0 1)) (.cse12 (= ULTIMATE.start_outgoing_~client 1)) (.cse3 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse13 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse15 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse5 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse16 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse17 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) (.cse7 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse1 (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0)) (.cse8 (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0))) (.cse4 (not (= ULTIMATE.start_setClientId_~handle 2))) (.cse14 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse18 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse6 (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 (= ~__ste_email_isSigned0~0 0) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18) (and .cse9 .cse10 .cse11 .cse2 .cse12 .cse3 .cse13 .cse15 .cse5 .cse16 .cse17 (let ((.cse19 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse20 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse19 .cse7 .cse0 .cse1 .cse8 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse4 .cse14 .cse20 .cse18 .cse6) (and .cse19 .cse7 .cse0 .cse1 .cse8 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse4 .cse14 .cse20 .cse18 .cse6)))))) [2019-11-28 17:20:31,820 INFO L249 CegarLoopResult]: At program point L2398-3(lines 2385 2403) the Hoare annotation is: true [2019-11-28 17:20:31,821 INFO L246 CegarLoopResult]: For program point L2200(lines 2200 2211) no Hoare annotation was computed. [2019-11-28 17:20:31,821 INFO L246 CegarLoopResult]: For program point L2200-1(lines 2200 2211) no Hoare annotation was computed. [2019-11-28 17:20:31,821 INFO L246 CegarLoopResult]: For program point L1936(lines 1936 1940) no Hoare annotation was computed. [2019-11-28 17:20:31,821 INFO L246 CegarLoopResult]: For program point L1738(lines 1738 1745) no Hoare annotation was computed. [2019-11-28 17:20:31,821 INFO L249 CegarLoopResult]: At program point L1738-1(lines 1738 1745) the Hoare annotation is: true [2019-11-28 17:20:31,821 INFO L246 CegarLoopResult]: For program point L2730(lines 2730 2744) no Hoare annotation was computed. [2019-11-28 17:20:31,822 INFO L246 CegarLoopResult]: For program point L2730-2(lines 2730 2744) no Hoare annotation was computed. [2019-11-28 17:20:31,822 INFO L242 CegarLoopResult]: At program point L2730-1(lines 2700 2747) the Hoare annotation is: (let ((.cse9 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse10 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse11 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse2 (= ~bob~0 1)) (.cse12 (= ULTIMATE.start_outgoing_~client 1)) (.cse3 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse13 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse15 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse5 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse16 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse17 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) (.cse7 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse1 (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0)) (.cse8 (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0))) (.cse4 (not (= ULTIMATE.start_setClientId_~handle 2))) (.cse14 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse18 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse6 (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 (= ~__ste_email_isSigned0~0 0) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18) (and .cse9 .cse10 .cse11 .cse2 .cse12 .cse3 .cse13 .cse15 .cse5 .cse16 .cse17 (let ((.cse19 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse20 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse19 .cse7 .cse0 .cse1 .cse8 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse4 .cse14 .cse20 .cse18 .cse6) (and .cse19 .cse7 .cse0 .cse1 .cse8 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse4 .cse14 .cse20 .cse18 .cse6)))))) [2019-11-28 17:20:31,822 INFO L249 CegarLoopResult]: At program point L2730-3(lines 2700 2747) the Hoare annotation is: true [2019-11-28 17:20:31,822 INFO L246 CegarLoopResult]: For program point L1541(lines 1541 1557) no Hoare annotation was computed. [2019-11-28 17:20:31,822 INFO L246 CegarLoopResult]: For program point L1541-1(lines 1541 1557) no Hoare annotation was computed. [2019-11-28 17:20:31,823 INFO L246 CegarLoopResult]: For program point L1343(lines 1343 1349) no Hoare annotation was computed. [2019-11-28 17:20:31,823 INFO L249 CegarLoopResult]: At program point L2665-1(lines 2644 2668) the Hoare annotation is: true [2019-11-28 17:20:31,823 INFO L242 CegarLoopResult]: At program point L2665(lines 2644 2668) the Hoare annotation is: (let ((.cse9 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse10 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse11 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse2 (= ~bob~0 1)) (.cse12 (= ULTIMATE.start_outgoing_~client 1)) (.cse3 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse13 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse15 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse5 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse16 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse17 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) (.cse7 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse1 (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0)) (.cse8 (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0))) (.cse4 (not (= ULTIMATE.start_setClientId_~handle 2))) (.cse14 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse18 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse6 (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 (= ~__ste_email_isSigned0~0 0) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18) (and .cse9 .cse10 .cse11 .cse2 .cse12 .cse3 .cse13 .cse15 .cse5 .cse16 .cse17 (let ((.cse19 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse20 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse19 .cse7 .cse0 .cse1 .cse8 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse4 .cse14 .cse20 .cse18 .cse6) (and .cse19 .cse7 .cse0 .cse1 .cse8 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse4 .cse14 .cse20 .cse18 .cse6)))))) [2019-11-28 17:20:31,823 INFO L246 CegarLoopResult]: For program point L1411(lines 1411 1417) no Hoare annotation was computed. [2019-11-28 17:20:31,823 INFO L246 CegarLoopResult]: For program point L1411-1(lines 1411 1417) no Hoare annotation was computed. [2019-11-28 17:20:31,824 INFO L242 CegarLoopResult]: At program point L1213(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,824 INFO L246 CegarLoopResult]: For program point L2204(lines 2204 2210) no Hoare annotation was computed. [2019-11-28 17:20:31,824 INFO L242 CegarLoopResult]: At program point L1213-1(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,824 INFO L242 CegarLoopResult]: At program point L1213-2(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,825 INFO L242 CegarLoopResult]: At program point L1213-3(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,825 INFO L246 CegarLoopResult]: For program point L2204-1(lines 2204 2210) no Hoare annotation was computed. [2019-11-28 17:20:31,825 INFO L242 CegarLoopResult]: At program point L1213-4(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,825 INFO L246 CegarLoopResult]: For program point L1545(lines 1545 1556) no Hoare annotation was computed. [2019-11-28 17:20:31,825 INFO L246 CegarLoopResult]: For program point L1545-1(lines 1545 1556) no Hoare annotation was computed. [2019-11-28 17:20:31,825 INFO L242 CegarLoopResult]: At program point L1942(lines 1932 2072) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,826 INFO L246 CegarLoopResult]: For program point L2735(lines 2735 2741) no Hoare annotation was computed. [2019-11-28 17:20:31,826 INFO L246 CegarLoopResult]: For program point L2735-2(lines 2735 2741) no Hoare annotation was computed. [2019-11-28 17:20:31,826 INFO L242 CegarLoopResult]: At program point L2075(lines 1909 2076) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,826 INFO L242 CegarLoopResult]: At program point L2009(lines 1996 2067) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-11-28 17:20:31,826 INFO L242 CegarLoopResult]: At program point L490(lines 1 2844) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~__ste_email_isSigned0~0 0)) [2019-11-28 17:20:31,827 INFO L246 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2019-11-28 17:20:31,827 INFO L249 CegarLoopResult]: At program point L1746(lines 1728 1748) the Hoare annotation is: true [2019-11-28 17:20:31,827 INFO L249 CegarLoopResult]: At program point L2209-1(lines 2196 2214) the Hoare annotation is: true [2019-11-28 17:20:31,827 INFO L242 CegarLoopResult]: At program point L2209(lines 2196 2214) the Hoare annotation is: (let ((.cse1 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse3 (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0)) (.cse12 (= 1 ~queue_empty~0)) (.cse13 (= ~bob~0 1)) (.cse14 (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7)) (.cse5 (not (= ULTIMATE.start_setClientId_~handle 2))) (.cse17 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse10 (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) (.cse0 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse4 (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0))) (.cse11 (= ULTIMATE.start_outgoing_~client 1)) (.cse15 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse16 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse6 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse8 (= ULTIMATE.start_isSigned_~handle 1)) (.cse18 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse19 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) (.cse9 (= 1 ULTIMATE.start_createEmail_~msg~0))) (or (and (let ((.cse2 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse7 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10))) .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19) (and .cse1 .cse3 .cse12 .cse13 .cse14 .cse5 .cse17 .cse10 .cse0 .cse4 .cse11 (= ~__ste_email_isSigned0~0 0) .cse15 .cse16 .cse6 .cse8 .cse18 .cse19 .cse9))) [2019-11-28 17:20:31,828 INFO L246 CegarLoopResult]: For program point L1549(lines 1549 1555) no Hoare annotation was computed. [2019-11-28 17:20:31,828 INFO L246 CegarLoopResult]: For program point L1549-1(lines 1549 1555) no Hoare annotation was computed. [2019-11-28 17:20:31,828 INFO L246 CegarLoopResult]: For program point L2408(lines 2408 2416) no Hoare annotation was computed. [2019-11-28 17:20:31,828 INFO L246 CegarLoopResult]: For program point L2408-2(lines 2408 2416) no Hoare annotation was computed. [2019-11-28 17:20:31,828 INFO L246 CegarLoopResult]: For program point L1285(lines 1285 1321) no Hoare annotation was computed. [2019-11-28 17:20:31,828 INFO L246 CegarLoopResult]: For program point L1285-1(lines 1285 1321) no Hoare annotation was computed. [2019-11-28 17:20:31,828 INFO L246 CegarLoopResult]: For program point L1285-2(lines 1285 1321) no Hoare annotation was computed. [2019-11-28 17:20:31,829 INFO L246 CegarLoopResult]: For program point L1285-3(lines 1285 1321) no Hoare annotation was computed. [2019-11-28 17:20:31,829 INFO L246 CegarLoopResult]: For program point L1153(lines 1153 1169) no Hoare annotation was computed. [2019-11-28 17:20:31,829 INFO L246 CegarLoopResult]: For program point L1285-4(lines 1285 1321) no Hoare annotation was computed. [2019-11-28 17:20:31,829 INFO L246 CegarLoopResult]: For program point L1153-1(lines 1153 1169) no Hoare annotation was computed. [2019-11-28 17:20:31,829 INFO L246 CegarLoopResult]: For program point L1153-2(lines 1153 1169) no Hoare annotation was computed. [2019-11-28 17:20:31,829 INFO L246 CegarLoopResult]: For program point L1153-3(lines 1153 1169) no Hoare annotation was computed. [2019-11-28 17:20:31,830 INFO L246 CegarLoopResult]: For program point L1153-4(lines 1153 1169) no Hoare annotation was computed. [2019-11-28 17:20:31,830 INFO L246 CegarLoopResult]: For program point L1682(lines 1682 1690) no Hoare annotation was computed. [2019-11-28 17:20:31,830 INFO L246 CegarLoopResult]: For program point L1352(lines 1352 1383) no Hoare annotation was computed. [2019-11-28 17:20:31,830 INFO L246 CegarLoopResult]: For program point L1286(lines 1286 1294) no Hoare annotation was computed. [2019-11-28 17:20:31,830 INFO L246 CegarLoopResult]: For program point L1286-2(lines 1286 1294) no Hoare annotation was computed. [2019-11-28 17:20:31,830 INFO L246 CegarLoopResult]: For program point L1286-4(lines 1286 1294) no Hoare annotation was computed. [2019-11-28 17:20:31,831 INFO L246 CegarLoopResult]: For program point L1286-6(lines 1286 1294) no Hoare annotation was computed. [2019-11-28 17:20:31,831 INFO L246 CegarLoopResult]: For program point L1286-8(lines 1286 1294) no Hoare annotation was computed. [2019-11-28 17:20:31,831 INFO L246 CegarLoopResult]: For program point L1947(lines 1947 1954) no Hoare annotation was computed. [2019-11-28 17:20:31,831 INFO L246 CegarLoopResult]: For program point L1353(lines 1353 1364) no Hoare annotation was computed. [2019-11-28 17:20:31,831 INFO L246 CegarLoopResult]: For program point L2014(lines 2014 2018) no Hoare annotation was computed. [2019-11-28 17:20:31,831 INFO L246 CegarLoopResult]: For program point L1420(lines 1420 1436) no Hoare annotation was computed. [2019-11-28 17:20:31,832 INFO L246 CegarLoopResult]: For program point L1420-1(lines 1420 1436) no Hoare annotation was computed. [2019-11-28 17:20:31,832 INFO L246 CegarLoopResult]: For program point L2411(lines 2411 2415) no Hoare annotation was computed. [2019-11-28 17:20:31,832 INFO L246 CegarLoopResult]: For program point L2411-3(lines 2411 2415) no Hoare annotation was computed. [2019-11-28 17:20:31,832 INFO L242 CegarLoopResult]: At program point L2411-2(lines 2404 2419) the Hoare annotation is: (and (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= ~bob~0 1) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= ~__ste_client_privateKey0~0 0)) (= ULTIMATE.start_getClientPrivateKey_~handle 1) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) (= ULTIMATE.start_outgoing_~client 1) (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) (= 1 ULTIMATE.start_sendEmail_~sender) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0)) [2019-11-28 17:20:31,832 INFO L242 CegarLoopResult]: At program point L2411-5(lines 2404 2419) the Hoare annotation is: false [2019-11-28 17:20:31,832 INFO L246 CegarLoopResult]: For program point L1421(lines 1421 1432) no Hoare annotation was computed. [2019-11-28 17:20:31,833 INFO L246 CegarLoopResult]: For program point L1421-1(lines 1421 1432) no Hoare annotation was computed. [2019-11-28 17:20:31,833 INFO L246 CegarLoopResult]: For program point L1289(lines 1289 1293) no Hoare annotation was computed. [2019-11-28 17:20:31,833 INFO L246 CegarLoopResult]: For program point L1289-3(lines 1289 1293) no Hoare annotation was computed. [2019-11-28 17:20:31,833 INFO L246 CegarLoopResult]: For program point L1157(lines 1157 1168) no Hoare annotation was computed. [2019-11-28 17:20:31,833 INFO L246 CegarLoopResult]: For program point L1157-1(lines 1157 1168) no Hoare annotation was computed. [2019-11-28 17:20:31,833 INFO L246 CegarLoopResult]: For program point L1157-2(lines 1157 1168) no Hoare annotation was computed. [2019-11-28 17:20:31,834 INFO L246 CegarLoopResult]: For program point L1289-6(lines 1289 1293) no Hoare annotation was computed. [2019-11-28 17:20:31,834 INFO L246 CegarLoopResult]: For program point L1157-3(lines 1157 1168) no Hoare annotation was computed. [2019-11-28 17:20:31,834 INFO L246 CegarLoopResult]: For program point L1157-4(lines 1157 1168) no Hoare annotation was computed. [2019-11-28 17:20:31,834 INFO L246 CegarLoopResult]: For program point L1289-9(lines 1289 1293) no Hoare annotation was computed. [2019-11-28 17:20:31,834 INFO L246 CegarLoopResult]: For program point L1289-12(lines 1289 1293) no Hoare annotation was computed. [2019-11-28 17:20:31,835 INFO L242 CegarLoopResult]: At program point L1554(lines 1537 1560) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse1 (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0)) (.cse2 (= ~bob~0 1)) (.cse3 (not (= ULTIMATE.start_setClientId_~handle 2))) (.cse4 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse5 (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) (.cse6 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse7 (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0))) (.cse8 (= ULTIMATE.start_outgoing_~client 1)) (.cse9 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse11 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse10 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse12 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) (.cse13 (= 1 ULTIMATE.start_createEmail_~msg~0))) (or (and .cse0 .cse1 (= 1 ~queue_empty~0) .cse2 (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (= ~__ste_email_isSigned0~0 0) .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) .cse1 .cse2 .cse3 (not (= ~__ste_client_privateKey0~0 0)) .cse4 .cse5 .cse6 .cse7 (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) .cse8 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse9 .cse11 .cse10 .cse12 .cse13))) [2019-11-28 17:20:31,835 INFO L242 CegarLoopResult]: At program point L1554-1(lines 1537 1560) the Hoare annotation is: false [2019-11-28 17:20:31,906 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.11 05:20:31 BoogieIcfgContainer [2019-11-28 17:20:31,906 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-11-28 17:20:31,907 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-11-28 17:20:31,907 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-11-28 17:20:31,907 INFO L275 PluginConnector]: Witness Printer initialized [2019-11-28 17:20:31,908 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 05:20:14" (3/4) ... [2019-11-28 17:20:31,912 INFO L137 WitnessPrinter]: Generating witness for correct program [2019-11-28 17:20:31,949 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 132 nodes and edges [2019-11-28 17:20:31,952 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 76 nodes and edges [2019-11-28 17:20:31,956 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 6 nodes and edges [2019-11-28 17:20:31,960 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2019-11-28 17:20:31,963 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2019-11-28 17:20:31,967 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-11-28 17:20:32,005 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (1 == queue_empty && __ste_email_isSigned0 == 0) && \result == queue_empty [2019-11-28 17:20:32,006 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty [2019-11-28 17:20:32,006 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty [2019-11-28 17:20:32,006 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && handle == 2) && handle == rjh___0) && \result == queue_empty [2019-11-28 17:20:32,007 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && handle == 2) && !(handle == 1)) && handle == rjh___0) && \result == queue_empty [2019-11-28 17:20:32,007 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && bob == 1) && !(2 == chuck___0)) && __ste_email_isSigned0 == 0) && !(handle == 1)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,008 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && bob == 1) && !(2 == chuck___0)) && __ste_email_isSigned0 == 0) && !(handle == 2)) && !(handle == 1)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,008 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && bob == 1) && !(2 == chuck___0)) && __ste_email_isSigned0 == 0) && !(handle == 2)) && !(handle == 1)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,009 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,009 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,010 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,010 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,010 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,011 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,011 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,011 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,012 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,012 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,012 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,013 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,013 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,014 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,014 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && 1 == sender) && \result == queue_empty) && 1 == msg) && !(1 == chuck___0) [2019-11-28 17:20:32,015 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,015 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && 1 == sender) && \result == queue_empty) && 1 == msg) && !(1 == chuck___0) [2019-11-28 17:20:32,015 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,016 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,016 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,016 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) && !(1 == chuck___0) [2019-11-28 17:20:32,017 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,017 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,017 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,018 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,018 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,018 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,019 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,019 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,019 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,020 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,020 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,020 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,021 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,021 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,021 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,022 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((handle == chuck___0 && bob == 1) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && __ste_email_isSigned0 == 0) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg [2019-11-28 17:20:32,022 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,023 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,023 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,023 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,024 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,024 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((handle == chuck___0 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && client == 1) && __ste_email_isSigned0 == 0) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) || ((((((((((((((((privkey == __ste_client_privateKey0 && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) [2019-11-28 17:20:32,024 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,025 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,025 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((privkey == __ste_client_privateKey0 && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg [2019-11-28 17:20:32,026 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,026 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && \result == queue_empty) && 1 == msg) || ((((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && client == 1) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) [2019-11-28 17:20:32,026 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && \result == queue_empty) && 1 == msg) || ((((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && client == 1) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) [2019-11-28 17:20:32,027 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,027 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-11-28 17:20:32,027 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && handle == 1) && \result == 0) && client == 1) && \result == queue_empty) && 1 == msg) || ((((((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && client == 1) && 1 == sender) && \result == 1) && handle == 1) && client == 1) && \result == queue_empty) && 1 == msg) [2019-11-28 17:20:32,027 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && !(1 == chuck___0)) || (((((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && !(1 == chuck___0))) && client == 1) && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) || ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && 1 == sender) && \result == 1) && handle == 1) && client == 1) && \result == queue_empty) && 1 == msg) [2019-11-28 17:20:32,028 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && client == 1) && 1 == sender) && \result == 1) && handle == 1) && client == 1) && \result == queue_empty) && 1 == msg [2019-11-28 17:20:32,028 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && !(1 == chuck___0)) || (((((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && !(1 == chuck___0))) && client == 1) && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) || ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && 1 == sender) && \result == 1) && handle == 1) && client == 1) && \result == queue_empty) && 1 == msg) [2019-11-28 17:20:32,028 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((\result == 1 && 1 == tmp) && ((((((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && !(1 == chuck___0)) || (((((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && !(1 == chuck___0)))) && bob == 1) && client == 1) && !(\result == 0)) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) || (((((((((((((((((((1 == msg && handle == chuck___0) && bob == 1) && !(\result == 0)) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && 1 == sender) && \result == 1) && handle == 1) && client == 1) && \result == queue_empty) && 1 == msg) [2019-11-28 17:20:32,028 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((1 == msg && handle == chuck___0) && bob == 1) && !(\result == 0)) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && client == 1) && \result == queue_empty) && 1 == msg) || (((((((((((\result == 1 && !(tmp == 0)) && 1 == tmp) && bob == 1) && client == 1) && !(\result == 0)) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) && (((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)) || ((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)))) [2019-11-28 17:20:32,029 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((1 == msg && handle == chuck___0) && bob == 1) && !(\result == 0)) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && client == 1) && \result == queue_empty) && 1 == msg) || (((((((((((\result == 1 && !(tmp == 0)) && 1 == tmp) && bob == 1) && client == 1) && !(\result == 0)) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) && (((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)) || ((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)))) [2019-11-28 17:20:32,029 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((1 == msg && handle == chuck___0) && bob == 1) && !(\result == 0)) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && client == 1) && \result == queue_empty) && 1 == msg) || (((((((((((\result == 1 && !(tmp == 0)) && 1 == tmp) && bob == 1) && client == 1) && !(\result == 0)) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) && (((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)) || ((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)))) [2019-11-28 17:20:32,029 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((1 == msg && handle == chuck___0) && bob == 1) && !(\result == 0)) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && !(0 == \result)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && client == 1) && \result == queue_empty) && 1 == msg) || ((((((((((((bob == 1 && !(\result == 0)) && handle == 1) && !(0 == \result)) && (((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)) || ((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)))) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) [2019-11-28 17:20:32,030 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((1 == msg && handle == chuck___0) && bob == 1) && !(\result == 0)) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && client == 1) && \result == queue_empty) && 1 == msg) || (((((((((((\result == 1 && !(tmp == 0)) && 1 == tmp) && bob == 1) && client == 1) && !(\result == 0)) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) && (((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)) || ((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)))) [2019-11-28 17:20:32,030 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((1 == msg && handle == chuck___0) && bob == 1) && !(\result == 0)) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && client == 1) && \result == queue_empty) && 1 == msg) || (((((((((((\result == 1 && !(tmp == 0)) && 1 == tmp) && bob == 1) && client == 1) && !(\result == 0)) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) && (((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)) || ((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)))) [2019-11-28 17:20:32,031 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((1 == msg && handle == chuck___0) && bob == 1) && !(\result == 0)) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && client == 1) && \result == queue_empty) && 1 == msg) || (((((((((((\result == 1 && !(tmp == 0)) && 1 == tmp) && bob == 1) && client == 1) && !(\result == 0)) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) && (((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)) || ((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)))) [2019-11-28 17:20:32,032 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((1 == msg && handle == chuck___0) && bob == 1) && !(\result == 0)) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && client == 1) && \result == queue_empty) && 1 == msg) || (((((((((((\result == 1 && !(tmp == 0)) && 1 == tmp) && bob == 1) && client == 1) && !(\result == 0)) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) && (((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)) || ((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)))) [2019-11-28 17:20:32,032 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && \result == 0) && !(1 == chuck___0) [2019-11-28 17:20:32,033 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((handle == chuck___0 && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0) [2019-11-28 17:20:32,242 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2019-11-28 17:20:32,242 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-11-28 17:20:32,244 INFO L168 Benchmark]: Toolchain (without parser) took 20817.32 ms. Allocated memory was 1.0 GB in the beginning and 1.5 GB in the end (delta: 428.9 MB). Free memory was 951.0 MB in the beginning and 873.7 MB in the end (delta: 77.2 MB). Peak memory consumption was 506.1 MB. Max. memory is 11.5 GB. [2019-11-28 17:20:32,244 INFO L168 Benchmark]: CDTParser took 0.29 ms. Allocated memory is still 1.0 GB. Free memory is still 981.8 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-11-28 17:20:32,245 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1141.14 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 129.5 MB). Free memory was 951.0 MB in the beginning and 1.1 GB in the end (delta: -120.5 MB). Peak memory consumption was 26.3 MB. Max. memory is 11.5 GB. [2019-11-28 17:20:32,245 INFO L168 Benchmark]: Boogie Procedure Inliner took 155.58 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 13.5 MB). Peak memory consumption was 13.5 MB. Max. memory is 11.5 GB. [2019-11-28 17:20:32,246 INFO L168 Benchmark]: Boogie Preprocessor took 104.30 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2019-11-28 17:20:32,246 INFO L168 Benchmark]: RCFGBuilder took 1982.28 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 870.5 MB in the end (delta: 180.8 MB). Peak memory consumption was 180.8 MB. Max. memory is 11.5 GB. [2019-11-28 17:20:32,246 INFO L168 Benchmark]: TraceAbstraction took 17091.18 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 299.4 MB). Free memory was 870.5 MB in the beginning and 922.7 MB in the end (delta: -52.1 MB). Peak memory consumption was 370.9 MB. Max. memory is 11.5 GB. [2019-11-28 17:20:32,247 INFO L168 Benchmark]: Witness Printer took 335.19 ms. Allocated memory is still 1.5 GB. Free memory was 922.7 MB in the beginning and 873.7 MB in the end (delta: 48.9 MB). Peak memory consumption was 48.9 MB. Max. memory is 11.5 GB. [2019-11-28 17:20:32,249 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29 ms. Allocated memory is still 1.0 GB. Free memory is still 981.8 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1141.14 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 129.5 MB). Free memory was 951.0 MB in the beginning and 1.1 GB in the end (delta: -120.5 MB). Peak memory consumption was 26.3 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 155.58 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 13.5 MB). Peak memory consumption was 13.5 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 104.30 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1982.28 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 870.5 MB in the end (delta: 180.8 MB). Peak memory consumption was 180.8 MB. Max. memory is 11.5 GB. * TraceAbstraction took 17091.18 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 299.4 MB). Free memory was 870.5 MB in the beginning and 922.7 MB in the end (delta: -52.1 MB). Peak memory consumption was 370.9 MB. Max. memory is 11.5 GB. * Witness Printer took 335.19 ms. Allocated memory is still 1.5 GB. Free memory was 922.7 MB in the beginning and 873.7 MB in the end (delta: 48.9 MB). Peak memory consumption was 48.9 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 1866]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 1866]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 2 specifications checked. All of them hold - InvariantResult [Line: 2422]: Loop Invariant Derived loop invariant: (((((((((((((((((((1 == msg && handle == chuck___0) && bob == 1) && !(\result == 0)) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && client == 1) && \result == queue_empty) && 1 == msg) || (((((((((((\result == 1 && !(tmp == 0)) && 1 == tmp) && bob == 1) && client == 1) && !(\result == 0)) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) && (((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)) || ((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)))) - InvariantResult [Line: 2830]: Loop Invariant Derived loop invariant: ((((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) && !(1 == chuck___0) - InvariantResult [Line: 1943]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2422]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2617]: Loop Invariant Derived loop invariant: ((((((((((((((((((((1 == msg && handle == chuck___0) && bob == 1) && !(\result == 0)) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && !(0 == \result)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && client == 1) && \result == queue_empty) && 1 == msg) || ((((((((((((bob == 1 && !(\result == 0)) && handle == 1) && !(0 == \result)) && (((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)) || ((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)))) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: (((((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && client == 1) && 1 == sender) && \result == 1) && handle == 1) && client == 1) && \result == queue_empty) && 1 == msg - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1537]: Loop Invariant Derived loop invariant: ((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && \result == queue_empty) && 1 == msg) || ((((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && client == 1) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) - InvariantResult [Line: 1537]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: ((((((handle == chuck___0 && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0) - InvariantResult [Line: 2159]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2159]: Loop Invariant Derived loop invariant: (((((((((((((((((((1 == msg && handle == chuck___0) && bob == 1) && !(\result == 0)) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && client == 1) && \result == queue_empty) && 1 == msg) || (((((((((((\result == 1 && !(tmp == 0)) && 1 == tmp) && bob == 1) && client == 1) && !(\result == 0)) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) && (((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)) || ((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)))) - InvariantResult [Line: 2635]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1932]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1918]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2196]: Loop Invariant Derived loop invariant: (((((((((((((((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && !(1 == chuck___0)) || (((((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && !(1 == chuck___0))) && client == 1) && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) || ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && 1 == sender) && \result == 1) && handle == 1) && client == 1) && \result == queue_empty) && 1 == msg) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (((((((((((((((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && !(1 == chuck___0)) || (((((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && !(1 == chuck___0))) && client == 1) && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) || ((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && 1 == sender) && \result == 1) && handle == 1) && client == 1) && \result == queue_empty) && 1 == msg) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 1 == queue_empty && __ste_email_isSigned0 == 0 - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: ((((((((((((((handle == chuck___0 && bob == 1) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && __ste_email_isSigned0 == 0) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg - InvariantResult [Line: 2035]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2196]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1738]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2404]: Loop Invariant Derived loop invariant: (((((((((((((((privkey == __ste_client_privateKey0 && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg - InvariantResult [Line: 2021]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: (1 == queue_empty && __ste_email_isSigned0 == 0) && \result == queue_empty - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2404]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((handle == chuck___0 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && client == 1) && __ste_email_isSigned0 == 0) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) || ((((((((((((((((privkey == __ste_client_privateKey0 && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) - InvariantResult [Line: 2010]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2178]: Loop Invariant Derived loop invariant: ((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && \result == queue_empty) && 1 == msg) || ((((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && client == 1) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) - InvariantResult [Line: 1910]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1996]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1851]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2812]: Loop Invariant Derived loop invariant: ((((((((((\result == 1 && 1 == tmp) && ((((((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && !(1 == chuck___0)) || (((((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && !(1 == chuck___0)))) && bob == 1) && client == 1) && !(\result == 0)) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) || (((((((((((((((((((1 == msg && handle == chuck___0) && bob == 1) && !(\result == 0)) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && 1 == sender) && \result == 1) && handle == 1) && client == 1) && \result == queue_empty) && 1 == msg) - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2178]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1841]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2812]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2700]: Loop Invariant Derived loop invariant: (((((((((((((((((((1 == msg && handle == chuck___0) && bob == 1) && !(\result == 0)) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && client == 1) && \result == queue_empty) && 1 == msg) || (((((((((((\result == 1 && !(tmp == 0)) && 1 == tmp) && bob == 1) && client == 1) && !(\result == 0)) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) && (((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)) || ((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)))) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && handle == 2) && handle == rjh___0) && \result == queue_empty - InvariantResult [Line: 1728]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2626]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2700]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && bob == 1) && !(2 == chuck___0)) && __ste_email_isSigned0 == 0) && !(handle == 2)) && !(handle == 1)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2178]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && 1 == sender) && \result == queue_empty) && 1 == msg) && !(1 == chuck___0) - InvariantResult [Line: 1749]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1909]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && bob == 1) && !(2 == chuck___0)) && __ste_email_isSigned0 == 0) && !(handle == 1)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1442]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1388]: Loop Invariant Derived loop invariant: (((((((((((((((((((1 == msg && handle == chuck___0) && bob == 1) && !(\result == 0)) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && client == 1) && \result == queue_empty) && 1 == msg) || (((((((((((\result == 1 && !(tmp == 0)) && 1 == tmp) && bob == 1) && client == 1) && !(\result == 0)) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) && (((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)) || ((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)))) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1227]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1388]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty - InvariantResult [Line: 1985]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && handle == 2) && !(handle == 1)) && handle == rjh___0) && \result == queue_empty - InvariantResult [Line: 2215]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && 1 == sender) && \result == queue_empty) && 1 == msg) && !(1 == chuck___0) - InvariantResult [Line: 1971]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2385]: Loop Invariant Derived loop invariant: (((((((((((((((((((1 == msg && handle == chuck___0) && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && handle == 1) && \result == 0) && client == 1) && \result == queue_empty) && 1 == msg) || ((((((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && client == 1) && 1 == sender) && \result == 1) && handle == 1) && client == 1) && \result == queue_empty) && 1 == msg) - InvariantResult [Line: 2644]: Loop Invariant Derived loop invariant: (((((((((((((((((((1 == msg && handle == chuck___0) && bob == 1) && !(\result == 0)) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && client == 1) && \result == queue_empty) && 1 == msg) || (((((((((((\result == 1 && !(tmp == 0)) && 1 == tmp) && bob == 1) && client == 1) && !(\result == 0)) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) && (((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)) || ((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)))) - InvariantResult [Line: 1957]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1705]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && bob == 1) && !(2 == chuck___0)) && __ste_email_isSigned0 == 0) && !(handle == 2)) && !(handle == 1)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2385]: Loop Invariant Derived loop invariant: (((((((((((((((((((1 == msg && handle == chuck___0) && bob == 1) && !(\result == 0)) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && client == 1) && \result == queue_empty) && 1 == msg) || (((((((((((\result == 1 && !(tmp == 0)) && 1 == tmp) && bob == 1) && client == 1) && !(\result == 0)) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) && (((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)) || ((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)))) - InvariantResult [Line: 2644]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2594]: Loop Invariant Derived loop invariant: (((((((((((((((((((1 == msg && handle == chuck___0) && bob == 1) && !(\result == 0)) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && __ste_email_isSigned0 == 0) && client == 1) && \result == 1) && 1 == sender) && client == 1) && \result == queue_empty) && 1 == msg) || (((((((((((\result == 1 && !(tmp == 0)) && 1 == tmp) && bob == 1) && client == 1) && !(\result == 0)) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) && (((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && !(0 == tmp)) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)) || ((((((((((privkey == __ste_client_privateKey0 && 1 == msg) && 1 == msg) && handle == chuck___0) && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0)))) - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2385]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2385]: Loop Invariant Derived loop invariant: (((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && \result == 0) && !(1 == chuck___0) - InvariantResult [Line: 1334]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 383 locations, 2 error locations. Result: SAFE, OverallTime: 5.2s, OverallIterations: 14, TraceHistogramMax: 2, AutomataDifference: 2.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 11.5s, HoareTripleCheckerStatistics: 9561 SDtfs, 16618 SDslu, 16106 SDs, 0 SdLazy, 612 SolverSat, 81 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 1.1s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 115 GetRequests, 28 SyntacticMatches, 0 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 87 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=742occurred in iteration=11, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 14 MinimizatonAttempts, 2225 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 93 LocationsWithAnnotation, 93 PreInvPairs, 256 NumberOfFragments, 4392 HoareAnnotationTreeSize, 93 FomulaSimplifications, 100234 FormulaSimplificationTreeSizeReduction, 1.2s HoareSimplificationTime, 93 FomulaSimplificationsInter, 61063 FormulaSimplificationTreeSizeReductionInter, 10.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 741 NumberOfCodeBlocks, 741 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 727 ConstructedInterpolants, 0 QuantifiedInterpolants, 72341 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 14 InterpolantComputations, 14 PerfectInterpolantSequences, 14/14 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...