./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/email_spec4_product13.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version cad46833 Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_bd265442-66d3-4a01-a2c5-e39895f8dcaf/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_bd265442-66d3-4a01-a2c5-e39895f8dcaf/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_bd265442-66d3-4a01-a2c5-e39895f8dcaf/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_bd265442-66d3-4a01-a2c5-e39895f8dcaf/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/email_spec4_product13.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_bd265442-66d3-4a01-a2c5-e39895f8dcaf/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_bd265442-66d3-4a01-a2c5-e39895f8dcaf/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 70d32ce76add0a705a911f06bde28b97180fa1ae .............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.24-cad4683 [2019-10-22 11:22:10,213 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-10-22 11:22:10,216 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-10-22 11:22:10,229 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-10-22 11:22:10,230 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-10-22 11:22:10,232 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-10-22 11:22:10,233 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-10-22 11:22:10,237 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-10-22 11:22:10,239 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-10-22 11:22:10,240 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-10-22 11:22:10,243 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-10-22 11:22:10,244 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-10-22 11:22:10,250 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-10-22 11:22:10,251 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-10-22 11:22:10,252 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-10-22 11:22:10,253 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-10-22 11:22:10,253 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-10-22 11:22:10,254 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-10-22 11:22:10,255 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-10-22 11:22:10,257 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-10-22 11:22:10,258 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-10-22 11:22:10,259 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-10-22 11:22:10,260 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-10-22 11:22:10,260 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-10-22 11:22:10,262 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-10-22 11:22:10,262 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-10-22 11:22:10,262 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-10-22 11:22:10,263 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-10-22 11:22:10,263 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-10-22 11:22:10,264 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-10-22 11:22:10,265 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-10-22 11:22:10,265 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-10-22 11:22:10,266 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-10-22 11:22:10,267 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-10-22 11:22:10,267 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-10-22 11:22:10,268 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-10-22 11:22:10,268 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-10-22 11:22:10,269 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-10-22 11:22:10,269 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-10-22 11:22:10,269 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-10-22 11:22:10,270 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-10-22 11:22:10,271 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_bd265442-66d3-4a01-a2c5-e39895f8dcaf/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf [2019-10-22 11:22:10,282 INFO L113 SettingsManager]: Loading preferences was successful [2019-10-22 11:22:10,282 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-10-22 11:22:10,283 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-10-22 11:22:10,283 INFO L138 SettingsManager]: * User list type=DISABLED [2019-10-22 11:22:10,283 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-10-22 11:22:10,284 INFO L138 SettingsManager]: * Explicit value domain=true [2019-10-22 11:22:10,284 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2019-10-22 11:22:10,284 INFO L138 SettingsManager]: * Octagon Domain=false [2019-10-22 11:22:10,284 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-10-22 11:22:10,285 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2019-10-22 11:22:10,285 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2019-10-22 11:22:10,285 INFO L138 SettingsManager]: * Interval Domain=false [2019-10-22 11:22:10,286 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-10-22 11:22:10,286 INFO L138 SettingsManager]: * sizeof long=4 [2019-10-22 11:22:10,286 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-10-22 11:22:10,286 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-10-22 11:22:10,286 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-10-22 11:22:10,287 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-10-22 11:22:10,287 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-10-22 11:22:10,287 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-10-22 11:22:10,287 INFO L138 SettingsManager]: * sizeof long double=12 [2019-10-22 11:22:10,287 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-10-22 11:22:10,288 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-10-22 11:22:10,288 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-10-22 11:22:10,288 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-10-22 11:22:10,289 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-10-22 11:22:10,289 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-10-22 11:22:10,289 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-10-22 11:22:10,289 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-10-22 11:22:10,289 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-10-22 11:22:10,290 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-10-22 11:22:10,290 INFO L138 SettingsManager]: * Trace refinement strategy=TAIPAN [2019-10-22 11:22:10,290 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-10-22 11:22:10,290 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-10-22 11:22:10,290 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-10-22 11:22:10,291 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_bd265442-66d3-4a01-a2c5-e39895f8dcaf/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 70d32ce76add0a705a911f06bde28b97180fa1ae [2019-10-22 11:22:10,318 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-10-22 11:22:10,329 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-10-22 11:22:10,333 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-10-22 11:22:10,334 INFO L271 PluginConnector]: Initializing CDTParser... [2019-10-22 11:22:10,334 INFO L275 PluginConnector]: CDTParser initialized [2019-10-22 11:22:10,335 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_bd265442-66d3-4a01-a2c5-e39895f8dcaf/bin/utaipan/../../sv-benchmarks/c/product-lines/email_spec4_product13.cil.c [2019-10-22 11:22:10,387 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_bd265442-66d3-4a01-a2c5-e39895f8dcaf/bin/utaipan/data/20b8e8206/1c8dba401807449a8bb3d0c6aa88774c/FLAGfc7c93131 [2019-10-22 11:22:10,911 INFO L306 CDTParser]: Found 1 translation units. [2019-10-22 11:22:10,912 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_bd265442-66d3-4a01-a2c5-e39895f8dcaf/sv-benchmarks/c/product-lines/email_spec4_product13.cil.c [2019-10-22 11:22:10,933 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_bd265442-66d3-4a01-a2c5-e39895f8dcaf/bin/utaipan/data/20b8e8206/1c8dba401807449a8bb3d0c6aa88774c/FLAGfc7c93131 [2019-10-22 11:22:11,356 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_bd265442-66d3-4a01-a2c5-e39895f8dcaf/bin/utaipan/data/20b8e8206/1c8dba401807449a8bb3d0c6aa88774c [2019-10-22 11:22:11,360 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-10-22 11:22:11,362 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-10-22 11:22:11,363 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-10-22 11:22:11,363 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-10-22 11:22:11,369 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-10-22 11:22:11,370 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.10 11:22:11" (1/1) ... [2019-10-22 11:22:11,373 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@17ed864e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.10 11:22:11, skipping insertion in model container [2019-10-22 11:22:11,374 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.10 11:22:11" (1/1) ... [2019-10-22 11:22:11,383 INFO L142 MainTranslator]: Starting translation in SV-COMP mode [2019-10-22 11:22:11,457 INFO L173 MainTranslator]: Built tables and reachable declarations [2019-10-22 11:22:12,091 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-10-22 11:22:12,107 INFO L188 MainTranslator]: Completed pre-run [2019-10-22 11:22:12,244 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-10-22 11:22:12,322 INFO L192 MainTranslator]: Completed translation [2019-10-22 11:22:12,322 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.10 11:22:12 WrapperNode [2019-10-22 11:22:12,322 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-10-22 11:22:12,323 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-10-22 11:22:12,323 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-10-22 11:22:12,323 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-10-22 11:22:12,329 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.10 11:22:12" (1/1) ... [2019-10-22 11:22:12,378 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.10 11:22:12" (1/1) ... [2019-10-22 11:22:12,473 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-10-22 11:22:12,474 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-10-22 11:22:12,474 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-10-22 11:22:12,474 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-10-22 11:22:12,484 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.10 11:22:12" (1/1) ... [2019-10-22 11:22:12,484 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.10 11:22:12" (1/1) ... [2019-10-22 11:22:12,490 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.10 11:22:12" (1/1) ... [2019-10-22 11:22:12,491 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.10 11:22:12" (1/1) ... [2019-10-22 11:22:12,515 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.10 11:22:12" (1/1) ... [2019-10-22 11:22:12,537 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.10 11:22:12" (1/1) ... [2019-10-22 11:22:12,541 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.10 11:22:12" (1/1) ... [2019-10-22 11:22:12,549 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-10-22 11:22:12,550 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-10-22 11:22:12,550 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-10-22 11:22:12,550 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-10-22 11:22:12,551 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.10 11:22:12" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_bd265442-66d3-4a01-a2c5-e39895f8dcaf/bin/utaipan/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-10-22 11:22:12,618 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2019-10-22 11:22:12,618 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-10-22 11:22:12,619 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2019-10-22 11:22:12,619 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-10-22 11:22:12,619 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-10-22 11:22:14,369 INFO L279 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-10-22 11:22:14,370 INFO L284 CfgBuilder]: Removed 235 assume(true) statements. [2019-10-22 11:22:14,371 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.10 11:22:14 BoogieIcfgContainer [2019-10-22 11:22:14,371 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-10-22 11:22:14,373 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-10-22 11:22:14,373 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-10-22 11:22:14,376 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-10-22 11:22:14,376 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.10 11:22:11" (1/3) ... [2019-10-22 11:22:14,377 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2ffca174 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.10 11:22:14, skipping insertion in model container [2019-10-22 11:22:14,377 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.10 11:22:12" (2/3) ... [2019-10-22 11:22:14,378 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2ffca174 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.10 11:22:14, skipping insertion in model container [2019-10-22 11:22:14,378 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.10 11:22:14" (3/3) ... [2019-10-22 11:22:14,380 INFO L109 eAbstractionObserver]: Analyzing ICFG email_spec4_product13.cil.c [2019-10-22 11:22:14,390 INFO L152 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-10-22 11:22:14,398 INFO L164 ceAbstractionStarter]: Appying trace abstraction to program that has 2 error locations. [2019-10-22 11:22:14,409 INFO L249 AbstractCegarLoop]: Starting to check reachability of 2 error locations. [2019-10-22 11:22:14,437 INFO L373 AbstractCegarLoop]: Interprodecural is true [2019-10-22 11:22:14,438 INFO L374 AbstractCegarLoop]: Hoare is true [2019-10-22 11:22:14,438 INFO L375 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-10-22 11:22:14,438 INFO L376 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-10-22 11:22:14,438 INFO L377 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-10-22 11:22:14,438 INFO L378 AbstractCegarLoop]: Difference is false [2019-10-22 11:22:14,438 INFO L379 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-10-22 11:22:14,438 INFO L383 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-10-22 11:22:14,460 INFO L276 IsEmpty]: Start isEmpty. Operand 383 states. [2019-10-22 11:22:14,470 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2019-10-22 11:22:14,471 INFO L372 BasicCegarLoop]: Found error trace [2019-10-22 11:22:14,471 INFO L380 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-22 11:22:14,474 INFO L410 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-22 11:22:14,479 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-22 11:22:14,479 INFO L82 PathProgramCache]: Analyzing trace with hash -2045115247, now seen corresponding path program 1 times [2019-10-22 11:22:14,488 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-22 11:22:14,489 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1597444693] [2019-10-22 11:22:14,489 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:14,489 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:14,490 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-22 11:22:14,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-22 11:22:14,784 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-10-22 11:22:14,785 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1597444693] [2019-10-22 11:22:14,786 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-22 11:22:14,786 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-10-22 11:22:14,787 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [597272983] [2019-10-22 11:22:14,794 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-10-22 11:22:14,795 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-22 11:22:14,805 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-10-22 11:22:14,805 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-10-22 11:22:14,807 INFO L87 Difference]: Start difference. First operand 383 states. Second operand 3 states. [2019-10-22 11:22:14,976 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-22 11:22:14,977 INFO L93 Difference]: Finished difference Result 1114 states and 1961 transitions. [2019-10-22 11:22:14,977 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-10-22 11:22:14,979 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 40 [2019-10-22 11:22:14,979 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-22 11:22:14,995 INFO L225 Difference]: With dead ends: 1114 [2019-10-22 11:22:14,996 INFO L226 Difference]: Without dead ends: 668 [2019-10-22 11:22:15,003 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-10-22 11:22:15,024 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 668 states. [2019-10-22 11:22:15,079 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 668 to 343. [2019-10-22 11:22:15,084 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2019-10-22 11:22:15,086 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 598 transitions. [2019-10-22 11:22:15,087 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 598 transitions. Word has length 40 [2019-10-22 11:22:15,087 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-22 11:22:15,088 INFO L462 AbstractCegarLoop]: Abstraction has 343 states and 598 transitions. [2019-10-22 11:22:15,088 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-10-22 11:22:15,088 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 598 transitions. [2019-10-22 11:22:15,090 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2019-10-22 11:22:15,090 INFO L372 BasicCegarLoop]: Found error trace [2019-10-22 11:22:15,090 INFO L380 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-22 11:22:15,091 INFO L410 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-22 11:22:15,091 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-22 11:22:15,091 INFO L82 PathProgramCache]: Analyzing trace with hash 581557763, now seen corresponding path program 1 times [2019-10-22 11:22:15,091 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-22 11:22:15,092 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2030566705] [2019-10-22 11:22:15,092 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:15,092 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:15,092 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-22 11:22:15,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-22 11:22:15,242 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-10-22 11:22:15,242 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2030566705] [2019-10-22 11:22:15,242 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-22 11:22:15,242 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-10-22 11:22:15,243 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [320338478] [2019-10-22 11:22:15,245 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-10-22 11:22:15,245 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-22 11:22:15,245 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-10-22 11:22:15,245 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-10-22 11:22:15,246 INFO L87 Difference]: Start difference. First operand 343 states and 598 transitions. Second operand 5 states. [2019-10-22 11:22:15,514 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-22 11:22:15,515 INFO L93 Difference]: Finished difference Result 978 states and 1710 transitions. [2019-10-22 11:22:15,516 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-10-22 11:22:15,516 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 42 [2019-10-22 11:22:15,517 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-22 11:22:15,520 INFO L225 Difference]: With dead ends: 978 [2019-10-22 11:22:15,522 INFO L226 Difference]: Without dead ends: 654 [2019-10-22 11:22:15,524 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2019-10-22 11:22:15,528 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 654 states. [2019-10-22 11:22:15,560 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 654 to 343. [2019-10-22 11:22:15,563 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2019-10-22 11:22:15,565 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 597 transitions. [2019-10-22 11:22:15,565 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 597 transitions. Word has length 42 [2019-10-22 11:22:15,565 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-22 11:22:15,565 INFO L462 AbstractCegarLoop]: Abstraction has 343 states and 597 transitions. [2019-10-22 11:22:15,565 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-10-22 11:22:15,566 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 597 transitions. [2019-10-22 11:22:15,568 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2019-10-22 11:22:15,573 INFO L372 BasicCegarLoop]: Found error trace [2019-10-22 11:22:15,573 INFO L380 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-22 11:22:15,573 INFO L410 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-22 11:22:15,573 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-22 11:22:15,574 INFO L82 PathProgramCache]: Analyzing trace with hash -668907248, now seen corresponding path program 1 times [2019-10-22 11:22:15,574 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-22 11:22:15,574 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1486086459] [2019-10-22 11:22:15,574 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:15,574 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:15,574 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-22 11:22:15,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-22 11:22:15,664 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-10-22 11:22:15,665 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1486086459] [2019-10-22 11:22:15,665 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-22 11:22:15,665 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-10-22 11:22:15,665 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [840174599] [2019-10-22 11:22:15,666 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-10-22 11:22:15,666 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-22 11:22:15,666 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-10-22 11:22:15,666 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-10-22 11:22:15,666 INFO L87 Difference]: Start difference. First operand 343 states and 597 transitions. Second operand 3 states. [2019-10-22 11:22:15,703 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-22 11:22:15,704 INFO L93 Difference]: Finished difference Result 668 states and 1168 transitions. [2019-10-22 11:22:15,705 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-10-22 11:22:15,705 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 43 [2019-10-22 11:22:15,706 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-22 11:22:15,707 INFO L225 Difference]: With dead ends: 668 [2019-10-22 11:22:15,708 INFO L226 Difference]: Without dead ends: 348 [2019-10-22 11:22:15,709 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-10-22 11:22:15,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 348 states. [2019-10-22 11:22:15,723 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 348 to 343. [2019-10-22 11:22:15,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2019-10-22 11:22:15,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 596 transitions. [2019-10-22 11:22:15,734 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 596 transitions. Word has length 43 [2019-10-22 11:22:15,734 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-22 11:22:15,734 INFO L462 AbstractCegarLoop]: Abstraction has 343 states and 596 transitions. [2019-10-22 11:22:15,734 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-10-22 11:22:15,735 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 596 transitions. [2019-10-22 11:22:15,736 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2019-10-22 11:22:15,736 INFO L372 BasicCegarLoop]: Found error trace [2019-10-22 11:22:15,736 INFO L380 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-22 11:22:15,737 INFO L410 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-22 11:22:15,738 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-22 11:22:15,738 INFO L82 PathProgramCache]: Analyzing trace with hash 836086358, now seen corresponding path program 1 times [2019-10-22 11:22:15,738 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-22 11:22:15,738 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1065469887] [2019-10-22 11:22:15,738 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:15,739 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:15,739 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-22 11:22:15,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-22 11:22:15,823 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-10-22 11:22:15,823 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1065469887] [2019-10-22 11:22:15,824 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-22 11:22:15,824 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-10-22 11:22:15,824 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1835456349] [2019-10-22 11:22:15,824 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-10-22 11:22:15,825 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-22 11:22:15,825 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-10-22 11:22:15,825 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-10-22 11:22:15,825 INFO L87 Difference]: Start difference. First operand 343 states and 596 transitions. Second operand 3 states. [2019-10-22 11:22:15,864 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-22 11:22:15,865 INFO L93 Difference]: Finished difference Result 678 states and 1181 transitions. [2019-10-22 11:22:15,865 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-10-22 11:22:15,865 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 44 [2019-10-22 11:22:15,865 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-22 11:22:15,867 INFO L225 Difference]: With dead ends: 678 [2019-10-22 11:22:15,867 INFO L226 Difference]: Without dead ends: 343 [2019-10-22 11:22:15,868 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-10-22 11:22:15,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2019-10-22 11:22:15,884 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2019-10-22 11:22:15,884 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2019-10-22 11:22:15,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 594 transitions. [2019-10-22 11:22:15,886 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 594 transitions. Word has length 44 [2019-10-22 11:22:15,886 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-22 11:22:15,886 INFO L462 AbstractCegarLoop]: Abstraction has 343 states and 594 transitions. [2019-10-22 11:22:15,886 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-10-22 11:22:15,886 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 594 transitions. [2019-10-22 11:22:15,887 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2019-10-22 11:22:15,887 INFO L372 BasicCegarLoop]: Found error trace [2019-10-22 11:22:15,887 INFO L380 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-22 11:22:15,887 INFO L410 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-22 11:22:15,888 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-22 11:22:15,888 INFO L82 PathProgramCache]: Analyzing trace with hash -1027434837, now seen corresponding path program 1 times [2019-10-22 11:22:15,889 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-22 11:22:15,889 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [437574371] [2019-10-22 11:22:15,889 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:15,890 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:15,890 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-22 11:22:15,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-22 11:22:15,963 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-10-22 11:22:15,964 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [437574371] [2019-10-22 11:22:15,964 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-22 11:22:15,964 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-10-22 11:22:15,964 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1953299993] [2019-10-22 11:22:15,965 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-10-22 11:22:15,965 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-22 11:22:15,965 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-10-22 11:22:15,965 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-10-22 11:22:15,965 INFO L87 Difference]: Start difference. First operand 343 states and 594 transitions. Second operand 5 states. [2019-10-22 11:22:16,132 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-22 11:22:16,132 INFO L93 Difference]: Finished difference Result 968 states and 1690 transitions. [2019-10-22 11:22:16,133 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-10-22 11:22:16,133 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 45 [2019-10-22 11:22:16,133 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-22 11:22:16,136 INFO L225 Difference]: With dead ends: 968 [2019-10-22 11:22:16,136 INFO L226 Difference]: Without dead ends: 652 [2019-10-22 11:22:16,138 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-10-22 11:22:16,139 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 652 states. [2019-10-22 11:22:16,152 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 652 to 343. [2019-10-22 11:22:16,152 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2019-10-22 11:22:16,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 593 transitions. [2019-10-22 11:22:16,154 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 593 transitions. Word has length 45 [2019-10-22 11:22:16,154 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-22 11:22:16,156 INFO L462 AbstractCegarLoop]: Abstraction has 343 states and 593 transitions. [2019-10-22 11:22:16,156 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-10-22 11:22:16,156 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 593 transitions. [2019-10-22 11:22:16,156 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2019-10-22 11:22:16,157 INFO L372 BasicCegarLoop]: Found error trace [2019-10-22 11:22:16,157 INFO L380 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-22 11:22:16,157 INFO L410 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-22 11:22:16,157 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-22 11:22:16,157 INFO L82 PathProgramCache]: Analyzing trace with hash -913470578, now seen corresponding path program 1 times [2019-10-22 11:22:16,157 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-22 11:22:16,158 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [718843950] [2019-10-22 11:22:16,158 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:16,158 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:16,158 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-22 11:22:16,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-22 11:22:16,236 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-10-22 11:22:16,236 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [718843950] [2019-10-22 11:22:16,236 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-22 11:22:16,237 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-10-22 11:22:16,237 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [964299856] [2019-10-22 11:22:16,237 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-10-22 11:22:16,237 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-22 11:22:16,237 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-10-22 11:22:16,238 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-10-22 11:22:16,238 INFO L87 Difference]: Start difference. First operand 343 states and 593 transitions. Second operand 5 states. [2019-10-22 11:22:16,386 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-22 11:22:16,387 INFO L93 Difference]: Finished difference Result 973 states and 1695 transitions. [2019-10-22 11:22:16,387 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-10-22 11:22:16,387 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 46 [2019-10-22 11:22:16,387 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-22 11:22:16,389 INFO L225 Difference]: With dead ends: 973 [2019-10-22 11:22:16,390 INFO L226 Difference]: Without dead ends: 657 [2019-10-22 11:22:16,390 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-10-22 11:22:16,391 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 657 states. [2019-10-22 11:22:16,405 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 657 to 343. [2019-10-22 11:22:16,405 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2019-10-22 11:22:16,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 592 transitions. [2019-10-22 11:22:16,407 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 592 transitions. Word has length 46 [2019-10-22 11:22:16,407 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-22 11:22:16,407 INFO L462 AbstractCegarLoop]: Abstraction has 343 states and 592 transitions. [2019-10-22 11:22:16,407 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-10-22 11:22:16,407 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 592 transitions. [2019-10-22 11:22:16,408 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2019-10-22 11:22:16,413 INFO L372 BasicCegarLoop]: Found error trace [2019-10-22 11:22:16,413 INFO L380 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-22 11:22:16,413 INFO L410 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-22 11:22:16,413 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-22 11:22:16,414 INFO L82 PathProgramCache]: Analyzing trace with hash -1520446810, now seen corresponding path program 1 times [2019-10-22 11:22:16,414 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-22 11:22:16,414 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [318869404] [2019-10-22 11:22:16,414 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:16,414 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:16,414 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-22 11:22:16,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-22 11:22:16,478 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-10-22 11:22:16,478 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [318869404] [2019-10-22 11:22:16,478 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-22 11:22:16,478 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-10-22 11:22:16,479 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1238891583] [2019-10-22 11:22:16,479 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-10-22 11:22:16,479 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-22 11:22:16,479 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-10-22 11:22:16,479 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-10-22 11:22:16,480 INFO L87 Difference]: Start difference. First operand 343 states and 592 transitions. Second operand 3 states. [2019-10-22 11:22:16,507 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-22 11:22:16,507 INFO L93 Difference]: Finished difference Result 452 states and 767 transitions. [2019-10-22 11:22:16,508 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-10-22 11:22:16,508 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 47 [2019-10-22 11:22:16,508 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-22 11:22:16,510 INFO L225 Difference]: With dead ends: 452 [2019-10-22 11:22:16,510 INFO L226 Difference]: Without dead ends: 346 [2019-10-22 11:22:16,510 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-10-22 11:22:16,511 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 346 states. [2019-10-22 11:22:16,525 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 346 to 345. [2019-10-22 11:22:16,525 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 345 states. [2019-10-22 11:22:16,527 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 345 states to 345 states and 594 transitions. [2019-10-22 11:22:16,527 INFO L78 Accepts]: Start accepts. Automaton has 345 states and 594 transitions. Word has length 47 [2019-10-22 11:22:16,528 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-22 11:22:16,528 INFO L462 AbstractCegarLoop]: Abstraction has 345 states and 594 transitions. [2019-10-22 11:22:16,528 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-10-22 11:22:16,528 INFO L276 IsEmpty]: Start isEmpty. Operand 345 states and 594 transitions. [2019-10-22 11:22:16,529 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2019-10-22 11:22:16,530 INFO L372 BasicCegarLoop]: Found error trace [2019-10-22 11:22:16,530 INFO L380 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-22 11:22:16,530 INFO L410 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-22 11:22:16,531 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-22 11:22:16,531 INFO L82 PathProgramCache]: Analyzing trace with hash -748805212, now seen corresponding path program 1 times [2019-10-22 11:22:16,531 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-22 11:22:16,531 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1827878914] [2019-10-22 11:22:16,531 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:16,531 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:16,532 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-22 11:22:16,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-22 11:22:16,575 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-10-22 11:22:16,576 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1827878914] [2019-10-22 11:22:16,576 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-22 11:22:16,576 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-10-22 11:22:16,576 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2045868763] [2019-10-22 11:22:16,576 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-10-22 11:22:16,577 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-22 11:22:16,577 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-10-22 11:22:16,577 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-10-22 11:22:16,577 INFO L87 Difference]: Start difference. First operand 345 states and 594 transitions. Second operand 3 states. [2019-10-22 11:22:16,614 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-22 11:22:16,614 INFO L93 Difference]: Finished difference Result 921 states and 1606 transitions. [2019-10-22 11:22:16,615 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-10-22 11:22:16,615 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 53 [2019-10-22 11:22:16,615 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-22 11:22:16,617 INFO L225 Difference]: With dead ends: 921 [2019-10-22 11:22:16,617 INFO L226 Difference]: Without dead ends: 607 [2019-10-22 11:22:16,618 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-10-22 11:22:16,619 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 607 states. [2019-10-22 11:22:16,640 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 607 to 501. [2019-10-22 11:22:16,640 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 501 states. [2019-10-22 11:22:16,642 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 501 states to 501 states and 880 transitions. [2019-10-22 11:22:16,642 INFO L78 Accepts]: Start accepts. Automaton has 501 states and 880 transitions. Word has length 53 [2019-10-22 11:22:16,642 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-22 11:22:16,642 INFO L462 AbstractCegarLoop]: Abstraction has 501 states and 880 transitions. [2019-10-22 11:22:16,643 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-10-22 11:22:16,643 INFO L276 IsEmpty]: Start isEmpty. Operand 501 states and 880 transitions. [2019-10-22 11:22:16,643 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2019-10-22 11:22:16,643 INFO L372 BasicCegarLoop]: Found error trace [2019-10-22 11:22:16,643 INFO L380 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-22 11:22:16,644 INFO L410 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-22 11:22:16,644 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-22 11:22:16,644 INFO L82 PathProgramCache]: Analyzing trace with hash 203078211, now seen corresponding path program 1 times [2019-10-22 11:22:16,644 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-22 11:22:16,645 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1006865253] [2019-10-22 11:22:16,645 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:16,645 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:16,645 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-22 11:22:16,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-22 11:22:16,725 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-10-22 11:22:16,726 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1006865253] [2019-10-22 11:22:16,726 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-22 11:22:16,726 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-10-22 11:22:16,726 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [996509781] [2019-10-22 11:22:16,726 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-10-22 11:22:16,727 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-22 11:22:16,727 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-10-22 11:22:16,727 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-10-22 11:22:16,727 INFO L87 Difference]: Start difference. First operand 501 states and 880 transitions. Second operand 5 states. [2019-10-22 11:22:16,882 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-22 11:22:16,882 INFO L93 Difference]: Finished difference Result 1004 states and 1699 transitions. [2019-10-22 11:22:16,882 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-10-22 11:22:16,882 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 54 [2019-10-22 11:22:16,883 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-22 11:22:16,885 INFO L225 Difference]: With dead ends: 1004 [2019-10-22 11:22:16,886 INFO L226 Difference]: Without dead ends: 924 [2019-10-22 11:22:16,886 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2019-10-22 11:22:16,887 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 924 states. [2019-10-22 11:22:16,916 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 924 to 584. [2019-10-22 11:22:16,916 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 584 states. [2019-10-22 11:22:16,919 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 584 states to 584 states and 1014 transitions. [2019-10-22 11:22:16,919 INFO L78 Accepts]: Start accepts. Automaton has 584 states and 1014 transitions. Word has length 54 [2019-10-22 11:22:16,919 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-22 11:22:16,919 INFO L462 AbstractCegarLoop]: Abstraction has 584 states and 1014 transitions. [2019-10-22 11:22:16,919 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-10-22 11:22:16,919 INFO L276 IsEmpty]: Start isEmpty. Operand 584 states and 1014 transitions. [2019-10-22 11:22:16,923 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2019-10-22 11:22:16,923 INFO L372 BasicCegarLoop]: Found error trace [2019-10-22 11:22:16,923 INFO L380 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-22 11:22:16,924 INFO L410 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-22 11:22:16,924 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-22 11:22:16,924 INFO L82 PathProgramCache]: Analyzing trace with hash 1846986458, now seen corresponding path program 1 times [2019-10-22 11:22:16,924 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-22 11:22:16,924 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [472693476] [2019-10-22 11:22:16,924 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:16,925 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:16,925 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-22 11:22:16,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-22 11:22:17,020 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-10-22 11:22:17,020 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [472693476] [2019-10-22 11:22:17,020 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-22 11:22:17,020 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-10-22 11:22:17,021 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [725734804] [2019-10-22 11:22:17,021 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2019-10-22 11:22:17,021 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-22 11:22:17,021 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-10-22 11:22:17,021 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-10-22 11:22:17,022 INFO L87 Difference]: Start difference. First operand 584 states and 1014 transitions. Second operand 7 states. [2019-10-22 11:22:17,178 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-22 11:22:17,178 INFO L93 Difference]: Finished difference Result 832 states and 1413 transitions. [2019-10-22 11:22:17,179 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-10-22 11:22:17,179 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 55 [2019-10-22 11:22:17,179 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-22 11:22:17,182 INFO L225 Difference]: With dead ends: 832 [2019-10-22 11:22:17,182 INFO L226 Difference]: Without dead ends: 682 [2019-10-22 11:22:17,183 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=64, Invalid=118, Unknown=0, NotChecked=0, Total=182 [2019-10-22 11:22:17,184 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 682 states. [2019-10-22 11:22:17,220 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 682 to 573. [2019-10-22 11:22:17,221 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 573 states. [2019-10-22 11:22:17,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 573 states to 573 states and 994 transitions. [2019-10-22 11:22:17,223 INFO L78 Accepts]: Start accepts. Automaton has 573 states and 994 transitions. Word has length 55 [2019-10-22 11:22:17,224 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-22 11:22:17,224 INFO L462 AbstractCegarLoop]: Abstraction has 573 states and 994 transitions. [2019-10-22 11:22:17,225 INFO L463 AbstractCegarLoop]: Interpolant automaton has 7 states. [2019-10-22 11:22:17,225 INFO L276 IsEmpty]: Start isEmpty. Operand 573 states and 994 transitions. [2019-10-22 11:22:17,226 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2019-10-22 11:22:17,226 INFO L372 BasicCegarLoop]: Found error trace [2019-10-22 11:22:17,227 INFO L380 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-22 11:22:17,227 INFO L410 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-22 11:22:17,227 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-22 11:22:17,227 INFO L82 PathProgramCache]: Analyzing trace with hash 930934001, now seen corresponding path program 1 times [2019-10-22 11:22:17,227 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-22 11:22:17,227 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1848258037] [2019-10-22 11:22:17,228 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:17,228 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:17,228 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-22 11:22:17,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-22 11:22:17,353 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-10-22 11:22:17,353 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1848258037] [2019-10-22 11:22:17,353 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-22 11:22:17,354 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-10-22 11:22:17,354 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [665822269] [2019-10-22 11:22:17,354 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2019-10-22 11:22:17,354 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-22 11:22:17,354 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-10-22 11:22:17,355 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-10-22 11:22:17,355 INFO L87 Difference]: Start difference. First operand 573 states and 994 transitions. Second operand 7 states. [2019-10-22 11:22:17,866 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-22 11:22:17,867 INFO L93 Difference]: Finished difference Result 1134 states and 1876 transitions. [2019-10-22 11:22:17,867 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2019-10-22 11:22:17,867 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 57 [2019-10-22 11:22:17,867 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-22 11:22:17,871 INFO L225 Difference]: With dead ends: 1134 [2019-10-22 11:22:17,871 INFO L226 Difference]: Without dead ends: 1100 [2019-10-22 11:22:17,872 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 37 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=80, Invalid=192, Unknown=0, NotChecked=0, Total=272 [2019-10-22 11:22:17,873 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1100 states. [2019-10-22 11:22:17,917 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1100 to 742. [2019-10-22 11:22:17,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 742 states. [2019-10-22 11:22:17,920 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 742 states to 742 states and 1264 transitions. [2019-10-22 11:22:17,920 INFO L78 Accepts]: Start accepts. Automaton has 742 states and 1264 transitions. Word has length 57 [2019-10-22 11:22:17,921 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-22 11:22:17,921 INFO L462 AbstractCegarLoop]: Abstraction has 742 states and 1264 transitions. [2019-10-22 11:22:17,921 INFO L463 AbstractCegarLoop]: Interpolant automaton has 7 states. [2019-10-22 11:22:17,921 INFO L276 IsEmpty]: Start isEmpty. Operand 742 states and 1264 transitions. [2019-10-22 11:22:17,922 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2019-10-22 11:22:17,922 INFO L372 BasicCegarLoop]: Found error trace [2019-10-22 11:22:17,922 INFO L380 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-22 11:22:17,922 INFO L410 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-22 11:22:17,922 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-22 11:22:17,922 INFO L82 PathProgramCache]: Analyzing trace with hash -1204239761, now seen corresponding path program 1 times [2019-10-22 11:22:17,922 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-22 11:22:17,923 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1423496238] [2019-10-22 11:22:17,923 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:17,923 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:17,923 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-22 11:22:17,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-22 11:22:18,010 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-10-22 11:22:18,010 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1423496238] [2019-10-22 11:22:18,010 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-22 11:22:18,010 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-10-22 11:22:18,011 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1333228531] [2019-10-22 11:22:18,011 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-10-22 11:22:18,011 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-22 11:22:18,011 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-10-22 11:22:18,011 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2019-10-22 11:22:18,012 INFO L87 Difference]: Start difference. First operand 742 states and 1264 transitions. Second operand 8 states. [2019-10-22 11:22:18,257 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-22 11:22:18,257 INFO L93 Difference]: Finished difference Result 962 states and 1609 transitions. [2019-10-22 11:22:18,258 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2019-10-22 11:22:18,258 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 58 [2019-10-22 11:22:18,258 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-22 11:22:18,260 INFO L225 Difference]: With dead ends: 962 [2019-10-22 11:22:18,260 INFO L226 Difference]: Without dead ends: 706 [2019-10-22 11:22:18,261 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=92, Invalid=180, Unknown=0, NotChecked=0, Total=272 [2019-10-22 11:22:18,262 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 706 states. [2019-10-22 11:22:18,295 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 706 to 659. [2019-10-22 11:22:18,295 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 659 states. [2019-10-22 11:22:18,297 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 659 states to 659 states and 1126 transitions. [2019-10-22 11:22:18,297 INFO L78 Accepts]: Start accepts. Automaton has 659 states and 1126 transitions. Word has length 58 [2019-10-22 11:22:18,298 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-22 11:22:18,298 INFO L462 AbstractCegarLoop]: Abstraction has 659 states and 1126 transitions. [2019-10-22 11:22:18,298 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-10-22 11:22:18,298 INFO L276 IsEmpty]: Start isEmpty. Operand 659 states and 1126 transitions. [2019-10-22 11:22:18,299 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2019-10-22 11:22:18,299 INFO L372 BasicCegarLoop]: Found error trace [2019-10-22 11:22:18,299 INFO L380 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-22 11:22:18,299 INFO L410 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-22 11:22:18,300 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-22 11:22:18,300 INFO L82 PathProgramCache]: Analyzing trace with hash 1949742392, now seen corresponding path program 1 times [2019-10-22 11:22:18,300 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-22 11:22:18,300 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [140884019] [2019-10-22 11:22:18,300 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:18,300 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:18,300 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-22 11:22:18,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-22 11:22:18,360 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-10-22 11:22:18,360 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [140884019] [2019-10-22 11:22:18,360 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-22 11:22:18,361 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-10-22 11:22:18,361 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [667553114] [2019-10-22 11:22:18,361 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-10-22 11:22:18,361 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-22 11:22:18,361 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-10-22 11:22:18,362 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-10-22 11:22:18,362 INFO L87 Difference]: Start difference. First operand 659 states and 1126 transitions. Second operand 6 states. [2019-10-22 11:22:18,429 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-22 11:22:18,429 INFO L93 Difference]: Finished difference Result 766 states and 1284 transitions. [2019-10-22 11:22:18,430 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2019-10-22 11:22:18,430 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 77 [2019-10-22 11:22:18,430 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-22 11:22:18,432 INFO L225 Difference]: With dead ends: 766 [2019-10-22 11:22:18,432 INFO L226 Difference]: Without dead ends: 659 [2019-10-22 11:22:18,433 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2019-10-22 11:22:18,434 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 659 states. [2019-10-22 11:22:18,470 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 659 to 659. [2019-10-22 11:22:18,470 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 659 states. [2019-10-22 11:22:18,472 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 659 states to 659 states and 1123 transitions. [2019-10-22 11:22:18,472 INFO L78 Accepts]: Start accepts. Automaton has 659 states and 1123 transitions. Word has length 77 [2019-10-22 11:22:18,472 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-22 11:22:18,473 INFO L462 AbstractCegarLoop]: Abstraction has 659 states and 1123 transitions. [2019-10-22 11:22:18,473 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-10-22 11:22:18,473 INFO L276 IsEmpty]: Start isEmpty. Operand 659 states and 1123 transitions. [2019-10-22 11:22:18,474 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2019-10-22 11:22:18,474 INFO L372 BasicCegarLoop]: Found error trace [2019-10-22 11:22:18,474 INFO L380 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-22 11:22:18,474 INFO L410 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-22 11:22:18,474 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-22 11:22:18,474 INFO L82 PathProgramCache]: Analyzing trace with hash 140702341, now seen corresponding path program 1 times [2019-10-22 11:22:18,475 INFO L157 tionRefinementEngine]: Executing refinement strategy TAIPAN [2019-10-22 11:22:18,475 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [773765159] [2019-10-22 11:22:18,475 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:18,475 INFO L116 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-22 11:22:18,475 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-22 11:22:18,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-22 11:22:18,551 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-10-22 11:22:18,551 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [773765159] [2019-10-22 11:22:18,551 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-22 11:22:18,551 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-10-22 11:22:18,552 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [712100614] [2019-10-22 11:22:18,552 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-10-22 11:22:18,552 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy TAIPAN [2019-10-22 11:22:18,552 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-10-22 11:22:18,552 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2019-10-22 11:22:18,552 INFO L87 Difference]: Start difference. First operand 659 states and 1123 transitions. Second operand 8 states. [2019-10-22 11:22:18,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-22 11:22:18,789 INFO L93 Difference]: Finished difference Result 659 states and 1123 transitions. [2019-10-22 11:22:18,789 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-10-22 11:22:18,789 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 80 [2019-10-22 11:22:18,789 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-22 11:22:18,789 INFO L225 Difference]: With dead ends: 659 [2019-10-22 11:22:18,789 INFO L226 Difference]: Without dead ends: 0 [2019-10-22 11:22:18,790 INFO L600 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2019-10-22 11:22:18,790 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2019-10-22 11:22:18,790 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2019-10-22 11:22:18,790 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2019-10-22 11:22:18,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2019-10-22 11:22:18,791 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 80 [2019-10-22 11:22:18,791 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-22 11:22:18,791 INFO L462 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-10-22 11:22:18,791 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-10-22 11:22:18,791 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2019-10-22 11:22:18,791 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2019-10-22 11:22:18,795 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2019-10-22 11:22:20,212 WARN L191 SmtUtils]: Spent 364.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-10-22 11:22:20,980 WARN L191 SmtUtils]: Spent 380.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 70 [2019-10-22 11:22:21,085 WARN L191 SmtUtils]: Spent 104.00 ms on a formula simplification. DAG size of input: 65 DAG size of output: 50 [2019-10-22 11:22:21,294 WARN L191 SmtUtils]: Spent 206.00 ms on a formula simplification. DAG size of input: 69 DAG size of output: 53 [2019-10-22 11:22:21,396 WARN L191 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 50 DAG size of output: 25 [2019-10-22 11:22:21,757 WARN L191 SmtUtils]: Spent 359.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-10-22 11:22:22,163 WARN L191 SmtUtils]: Spent 294.00 ms on a formula simplification. DAG size of input: 91 DAG size of output: 62 [2019-10-22 11:22:22,388 WARN L191 SmtUtils]: Spent 223.00 ms on a formula simplification. DAG size of input: 91 DAG size of output: 62 [2019-10-22 11:22:22,940 WARN L191 SmtUtils]: Spent 106.00 ms on a formula simplification. DAG size of input: 65 DAG size of output: 49 [2019-10-22 11:22:23,143 WARN L191 SmtUtils]: Spent 122.00 ms on a formula simplification. DAG size of input: 69 DAG size of output: 53 [2019-10-22 11:22:23,579 WARN L191 SmtUtils]: Spent 236.00 ms on a formula simplification. DAG size of input: 94 DAG size of output: 65 [2019-10-22 11:22:23,993 WARN L191 SmtUtils]: Spent 255.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-10-22 11:22:24,456 WARN L191 SmtUtils]: Spent 229.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-10-22 11:22:24,950 WARN L191 SmtUtils]: Spent 138.00 ms on a formula simplification. DAG size of input: 75 DAG size of output: 59 [2019-10-22 11:22:25,247 WARN L191 SmtUtils]: Spent 296.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-10-22 11:22:25,585 WARN L191 SmtUtils]: Spent 237.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-10-22 11:22:25,902 WARN L191 SmtUtils]: Spent 315.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2019-10-22 11:22:26,112 INFO L439 ceAbstractionStarter]: At program point L498(lines 493 501) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~__ste_email_isSigned0~0 0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2019-10-22 11:22:26,113 INFO L443 ceAbstractionStarter]: For program point L1357(lines 1357 1363) no Hoare annotation was computed. [2019-10-22 11:22:26,113 INFO L443 ceAbstractionStarter]: For program point L2482(lines 2482 2490) no Hoare annotation was computed. [2019-10-22 11:22:26,113 INFO L443 ceAbstractionStarter]: For program point L1425(lines 1425 1431) no Hoare annotation was computed. [2019-10-22 11:22:26,113 INFO L443 ceAbstractionStarter]: For program point L2482-2(lines 2482 2490) no Hoare annotation was computed. [2019-10-22 11:22:26,113 INFO L443 ceAbstractionStarter]: For program point L1425-1(lines 1425 1431) no Hoare annotation was computed. [2019-10-22 11:22:26,113 INFO L443 ceAbstractionStarter]: For program point L1161(lines 1161 1167) no Hoare annotation was computed. [2019-10-22 11:22:26,113 INFO L443 ceAbstractionStarter]: For program point L1161-1(lines 1161 1167) no Hoare annotation was computed. [2019-10-22 11:22:26,113 INFO L443 ceAbstractionStarter]: For program point L1161-2(lines 1161 1167) no Hoare annotation was computed. [2019-10-22 11:22:26,113 INFO L443 ceAbstractionStarter]: For program point L1161-3(lines 1161 1167) no Hoare annotation was computed. [2019-10-22 11:22:26,113 INFO L443 ceAbstractionStarter]: For program point L1161-4(lines 1161 1167) no Hoare annotation was computed. [2019-10-22 11:22:26,113 INFO L439 ceAbstractionStarter]: At program point L2020(lines 2010 2066) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,113 INFO L443 ceAbstractionStarter]: For program point L2219(lines 2219 2227) no Hoare annotation was computed. [2019-10-22 11:22:26,114 INFO L439 ceAbstractionStarter]: At program point L1956(lines 1943 2071) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,114 INFO L443 ceAbstractionStarter]: For program point L2485(lines 2485 2489) no Hoare annotation was computed. [2019-10-22 11:22:26,114 INFO L443 ceAbstractionStarter]: For program point L2485-3(lines 2485 2489) no Hoare annotation was computed. [2019-10-22 11:22:26,114 INFO L443 ceAbstractionStarter]: For program point L1296(lines 1296 1320) no Hoare annotation was computed. [2019-10-22 11:22:26,114 INFO L443 ceAbstractionStarter]: For program point L1296-1(lines 1296 1320) no Hoare annotation was computed. [2019-10-22 11:22:26,114 INFO L443 ceAbstractionStarter]: For program point L1296-2(lines 1296 1320) no Hoare annotation was computed. [2019-10-22 11:22:26,114 INFO L443 ceAbstractionStarter]: For program point L1296-3(lines 1296 1320) no Hoare annotation was computed. [2019-10-22 11:22:26,114 INFO L443 ceAbstractionStarter]: For program point L1296-4(lines 1296 1320) no Hoare annotation was computed. [2019-10-22 11:22:26,114 INFO L443 ceAbstractionStarter]: For program point L1297(lines 1297 1305) no Hoare annotation was computed. [2019-10-22 11:22:26,114 INFO L443 ceAbstractionStarter]: For program point L1231(lines 1231 1277) no Hoare annotation was computed. [2019-10-22 11:22:26,114 INFO L443 ceAbstractionStarter]: For program point L1297-2(lines 1297 1305) no Hoare annotation was computed. [2019-10-22 11:22:26,114 INFO L443 ceAbstractionStarter]: For program point L2222(lines 2222 2226) no Hoare annotation was computed. [2019-10-22 11:22:26,114 INFO L443 ceAbstractionStarter]: For program point L1297-4(lines 1297 1305) no Hoare annotation was computed. [2019-10-22 11:22:26,114 INFO L439 ceAbstractionStarter]: At program point L2222-2(lines 2215 2230) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_sendEmail_~sender) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,114 INFO L443 ceAbstractionStarter]: For program point L1297-6(lines 1297 1305) no Hoare annotation was computed. [2019-10-22 11:22:26,115 INFO L443 ceAbstractionStarter]: For program point L1297-8(lines 1297 1305) no Hoare annotation was computed. [2019-10-22 11:22:26,115 INFO L446 ceAbstractionStarter]: At program point L2817-1(lines 2812 2820) the Hoare annotation is: true [2019-10-22 11:22:26,115 INFO L439 ceAbstractionStarter]: At program point L2817(lines 2812 2820) the Hoare annotation is: (let ((.cse0 (= ~bob~0 1)) (.cse1 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse10 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse11 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse12 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse13 (= ULTIMATE.start_outgoing_~client 1)) (.cse14 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse15 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse2 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse3 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse6 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse8 (= ULTIMATE.start_isSigned_~handle 1)) (.cse9 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse16 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse17 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 (let ((.cse4 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse7 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse2 .cse3 .cse4 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse2 .cse3 .cse4 .cse5 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse6 .cse7 .cse8 .cse9))) .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17) (and .cse0 .cse1 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 (and .cse2 .cse3 .cse6 (and (= ~__ste_email_isSigned0~0 0) .cse5) .cse8 .cse9) .cse16 .cse17))) [2019-10-22 11:22:26,115 INFO L443 ceAbstractionStarter]: For program point L1232(lines 1232 1243) no Hoare annotation was computed. [2019-10-22 11:22:26,115 INFO L439 ceAbstractionStarter]: At program point L1166(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,115 INFO L439 ceAbstractionStarter]: At program point L1166-1(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,115 INFO L439 ceAbstractionStarter]: At program point L1166-2(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,115 INFO L439 ceAbstractionStarter]: At program point L1166-3(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,115 INFO L439 ceAbstractionStarter]: At program point L1166-4(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,115 INFO L443 ceAbstractionStarter]: For program point L2025(lines 2025 2032) no Hoare annotation was computed. [2019-10-22 11:22:26,116 INFO L439 ceAbstractionStarter]: At program point L2555(lines 2594 2606) the Hoare annotation is: (let ((.cse12 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse13 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse15 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse14 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse16 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse0 (= ~bob~0 1)) (.cse1 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse5 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse6 (= ULTIMATE.start_outgoing_~client 1)) (.cse7 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse8 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse17 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse18 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (let ((.cse9 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse10 (not (= ~__ste_client_privateKey0~0 0))) (.cse11 (and .cse12 .cse13 .cse14 .cse15 .cse16))) (or (and .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse10 .cse11) (and .cse9 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse10 .cse11))) .cse17 .cse18) (and (and .cse12 .cse13 .cse15 (and (= ~__ste_email_isSigned0~0 0) .cse14) .cse16) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse17 .cse18))) [2019-10-22 11:22:26,116 INFO L443 ceAbstractionStarter]: For program point L1366(lines 1366 1382) no Hoare annotation was computed. [2019-10-22 11:22:26,116 INFO L443 ceAbstractionStarter]: For program point L1300(lines 1300 1304) no Hoare annotation was computed. [2019-10-22 11:22:26,116 INFO L443 ceAbstractionStarter]: For program point L1300-3(lines 1300 1304) no Hoare annotation was computed. [2019-10-22 11:22:26,117 INFO L443 ceAbstractionStarter]: For program point L1300-6(lines 1300 1304) no Hoare annotation was computed. [2019-10-22 11:22:26,117 INFO L443 ceAbstractionStarter]: For program point L1300-9(lines 1300 1304) no Hoare annotation was computed. [2019-10-22 11:22:26,117 INFO L443 ceAbstractionStarter]: For program point L1961(lines 1961 1968) no Hoare annotation was computed. [2019-10-22 11:22:26,117 INFO L443 ceAbstractionStarter]: For program point L1300-12(lines 1300 1304) no Hoare annotation was computed. [2019-10-22 11:22:26,117 INFO L443 ceAbstractionStarter]: For program point L2688(lines 2688 2692) no Hoare annotation was computed. [2019-10-22 11:22:26,117 INFO L439 ceAbstractionStarter]: At program point L2622(lines 2617 2625) the Hoare annotation is: (let ((.cse13 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse14 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse16 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse15 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse17 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse0 (= ~bob~0 1)) (.cse1 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (not (= 0 |ULTIMATE.start_is_queue_empty_#res|))) (.cse4 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse5 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse6 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse7 (= ULTIMATE.start_outgoing_~client 1)) (.cse8 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse9 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse18 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse19 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (let ((.cse10 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse11 (not (= ~__ste_client_privateKey0~0 0))) (.cse12 (and .cse13 .cse14 .cse15 .cse16 .cse17))) (or (and .cse10 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse11 .cse12) (and .cse10 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse11 .cse12))) .cse18 .cse19) (and (and .cse13 .cse14 .cse16 (and (= ~__ste_email_isSigned0~0 0) .cse15) .cse17) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse18 .cse19))) [2019-10-22 11:22:26,118 INFO L443 ceAbstractionStarter]: For program point L2688-1(lines 2688 2692) no Hoare annotation was computed. [2019-10-22 11:22:26,118 INFO L443 ceAbstractionStarter]: For program point L1565(lines 1565 1577) no Hoare annotation was computed. [2019-10-22 11:22:26,118 INFO L443 ceAbstractionStarter]: For program point L1565-2(lines 1565 1577) no Hoare annotation was computed. [2019-10-22 11:22:26,118 INFO L443 ceAbstractionStarter]: For program point L1565-4(lines 1565 1577) no Hoare annotation was computed. [2019-10-22 11:22:26,118 INFO L443 ceAbstractionStarter]: For program point L1367(lines 1367 1378) no Hoare annotation was computed. [2019-10-22 11:22:26,118 INFO L443 ceAbstractionStarter]: For program point L1236(lines 1236 1242) no Hoare annotation was computed. [2019-10-22 11:22:26,118 INFO L439 ceAbstractionStarter]: At program point L1435(lines 1388 1441) the Hoare annotation is: (let ((.cse12 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse13 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse15 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse14 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse16 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse0 (= ~bob~0 1)) (.cse1 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse5 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse6 (= ULTIMATE.start_outgoing_~client 1)) (.cse7 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse8 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse17 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse18 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (let ((.cse9 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse10 (not (= ~__ste_client_privateKey0~0 0))) (.cse11 (and .cse12 .cse13 .cse14 .cse15 .cse16))) (or (and .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse10 .cse11) (and .cse9 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse10 .cse11))) .cse17 .cse18) (and (and .cse12 .cse13 .cse15 (and (= ~__ste_email_isSigned0~0 0) .cse14) .cse16) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse17 .cse18))) [2019-10-22 11:22:26,118 INFO L443 ceAbstractionStarter]: For program point L2426(lines 2426 2437) no Hoare annotation was computed. [2019-10-22 11:22:26,118 INFO L446 ceAbstractionStarter]: At program point L1435-1(lines 1388 1441) the Hoare annotation is: true [2019-10-22 11:22:26,119 INFO L443 ceAbstractionStarter]: For program point L2426-1(lines 2426 2437) no Hoare annotation was computed. [2019-10-22 11:22:26,119 INFO L443 ceAbstractionStarter]: For program point L1568(lines 1568 1576) no Hoare annotation was computed. [2019-10-22 11:22:26,119 INFO L443 ceAbstractionStarter]: For program point L1568-2(lines 1568 1576) no Hoare annotation was computed. [2019-10-22 11:22:26,119 INFO L443 ceAbstractionStarter]: For program point L1568-4(lines 1568 1576) no Hoare annotation was computed. [2019-10-22 11:22:26,119 INFO L443 ceAbstractionStarter]: For program point L2163-1(lines 2163 2174) no Hoare annotation was computed. [2019-10-22 11:22:26,119 INFO L443 ceAbstractionStarter]: For program point L1106(lines 1106 1122) no Hoare annotation was computed. [2019-10-22 11:22:26,119 INFO L443 ceAbstractionStarter]: For program point L2163(lines 2163 2174) no Hoare annotation was computed. [2019-10-22 11:22:26,119 INFO L443 ceAbstractionStarter]: For program point L1106-1(lines 1106 1122) no Hoare annotation was computed. [2019-10-22 11:22:26,119 INFO L443 ceAbstractionStarter]: For program point L1106-2(lines 1106 1122) no Hoare annotation was computed. [2019-10-22 11:22:26,119 INFO L443 ceAbstractionStarter]: For program point L1106-3(lines 1106 1122) no Hoare annotation was computed. [2019-10-22 11:22:26,119 INFO L443 ceAbstractionStarter]: For program point L1371(lines 1371 1377) no Hoare annotation was computed. [2019-10-22 11:22:26,120 INFO L439 ceAbstractionStarter]: At program point L1768(lines 1749 1770) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,120 INFO L443 ceAbstractionStarter]: For program point L1571(lines 1571 1575) no Hoare annotation was computed. [2019-10-22 11:22:26,120 INFO L439 ceAbstractionStarter]: At program point L1571-2(lines 1 2844) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2019-10-22 11:22:26,120 INFO L443 ceAbstractionStarter]: For program point L1571-3(lines 1571 1575) no Hoare annotation was computed. [2019-10-22 11:22:26,120 INFO L443 ceAbstractionStarter]: For program point L2430(lines 2430 2436) no Hoare annotation was computed. [2019-10-22 11:22:26,120 INFO L439 ceAbstractionStarter]: At program point L1571-5(lines 1 2844) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (= ULTIMATE.start_setClientId_~handle 2) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_rjh_~rjh___0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2019-10-22 11:22:26,120 INFO L443 ceAbstractionStarter]: For program point L1571-6(lines 1571 1575) no Hoare annotation was computed. [2019-10-22 11:22:26,120 INFO L443 ceAbstractionStarter]: For program point L2430-1(lines 2430 2436) no Hoare annotation was computed. [2019-10-22 11:22:26,120 INFO L439 ceAbstractionStarter]: At program point L1571-8(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) (= ~bob~0 1) (not (= 2 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_email_isSigned0~0 0) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,121 INFO L443 ceAbstractionStarter]: For program point L1307(lines 1307 1319) no Hoare annotation was computed. [2019-10-22 11:22:26,121 INFO L439 ceAbstractionStarter]: At program point L1307-1(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,121 INFO L443 ceAbstractionStarter]: For program point L1307-2(lines 1307 1319) no Hoare annotation was computed. [2019-10-22 11:22:26,121 INFO L439 ceAbstractionStarter]: At program point L1307-3(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,121 INFO L443 ceAbstractionStarter]: For program point L1307-4(lines 1307 1319) no Hoare annotation was computed. [2019-10-22 11:22:26,121 INFO L439 ceAbstractionStarter]: At program point L1307-5(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,121 INFO L443 ceAbstractionStarter]: For program point L1307-6(lines 1307 1319) no Hoare annotation was computed. [2019-10-22 11:22:26,121 INFO L439 ceAbstractionStarter]: At program point L1307-7(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,121 INFO L443 ceAbstractionStarter]: For program point L1307-8(lines 1307 1319) no Hoare annotation was computed. [2019-10-22 11:22:26,122 INFO L439 ceAbstractionStarter]: At program point L2034(lines 2021 2065) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,122 INFO L439 ceAbstractionStarter]: At program point L1307-9(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,122 INFO L443 ceAbstractionStarter]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1866) no Hoare annotation was computed. [2019-10-22 11:22:26,122 INFO L443 ceAbstractionStarter]: For program point L1308(lines 1308 1316) no Hoare annotation was computed. [2019-10-22 11:22:26,122 INFO L443 ceAbstractionStarter]: For program point L1308-2(lines 1308 1316) no Hoare annotation was computed. [2019-10-22 11:22:26,122 INFO L443 ceAbstractionStarter]: For program point L1308-4(lines 1308 1316) no Hoare annotation was computed. [2019-10-22 11:22:26,122 INFO L443 ceAbstractionStarter]: For program point L2167-1(lines 2167 2173) no Hoare annotation was computed. [2019-10-22 11:22:26,122 INFO L443 ceAbstractionStarter]: For program point L1308-6(lines 1308 1316) no Hoare annotation was computed. [2019-10-22 11:22:26,122 INFO L443 ceAbstractionStarter]: For program point L1110(lines 1110 1121) no Hoare annotation was computed. [2019-10-22 11:22:26,123 INFO L443 ceAbstractionStarter]: For program point L2167(lines 2167 2173) no Hoare annotation was computed. [2019-10-22 11:22:26,123 INFO L443 ceAbstractionStarter]: For program point L1110-1(lines 1110 1121) no Hoare annotation was computed. [2019-10-22 11:22:26,123 INFO L443 ceAbstractionStarter]: For program point L1308-8(lines 1308 1316) no Hoare annotation was computed. [2019-10-22 11:22:26,123 INFO L443 ceAbstractionStarter]: For program point L1110-2(lines 1110 1121) no Hoare annotation was computed. [2019-10-22 11:22:26,123 INFO L443 ceAbstractionStarter]: For program point L1110-3(lines 1110 1121) no Hoare annotation was computed. [2019-10-22 11:22:26,123 INFO L443 ceAbstractionStarter]: For program point L1177(lines 1177 1189) no Hoare annotation was computed. [2019-10-22 11:22:26,123 INFO L443 ceAbstractionStarter]: For program point L1177-2(lines 1177 1189) no Hoare annotation was computed. [2019-10-22 11:22:26,123 INFO L443 ceAbstractionStarter]: For program point L1177-4(lines 1177 1189) no Hoare annotation was computed. [2019-10-22 11:22:26,123 INFO L443 ceAbstractionStarter]: For program point L1177-6(lines 1177 1189) no Hoare annotation was computed. [2019-10-22 11:22:26,123 INFO L439 ceAbstractionStarter]: At program point L1970(lines 1957 2070) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,123 INFO L443 ceAbstractionStarter]: For program point L1177-8(lines 1177 1189) no Hoare annotation was computed. [2019-10-22 11:22:26,124 INFO L439 ceAbstractionStarter]: At program point L2631(lines 2626 2634) the Hoare annotation is: false [2019-10-22 11:22:26,124 INFO L443 ceAbstractionStarter]: For program point L1311(lines 1311 1315) no Hoare annotation was computed. [2019-10-22 11:22:26,124 INFO L443 ceAbstractionStarter]: For program point L1245(lines 1245 1276) no Hoare annotation was computed. [2019-10-22 11:22:26,124 INFO L443 ceAbstractionStarter]: For program point L1311-3(lines 1311 1315) no Hoare annotation was computed. [2019-10-22 11:22:26,124 INFO L443 ceAbstractionStarter]: For program point L1311-6(lines 1311 1315) no Hoare annotation was computed. [2019-10-22 11:22:26,124 INFO L443 ceAbstractionStarter]: For program point L1311-9(lines 1311 1315) no Hoare annotation was computed. [2019-10-22 11:22:26,124 INFO L443 ceAbstractionStarter]: For program point L1311-12(lines 1311 1315) no Hoare annotation was computed. [2019-10-22 11:22:26,124 INFO L446 ceAbstractionStarter]: At program point L2435-1(lines 2422 2440) the Hoare annotation is: true [2019-10-22 11:22:26,124 INFO L439 ceAbstractionStarter]: At program point L2435(lines 2422 2440) the Hoare annotation is: (let ((.cse12 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse13 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse15 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse14 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse16 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse0 (= ~bob~0 1)) (.cse1 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse5 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse6 (= ULTIMATE.start_outgoing_~client 1)) (.cse7 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse8 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse17 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse18 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (let ((.cse9 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse10 (not (= ~__ste_client_privateKey0~0 0))) (.cse11 (and .cse12 .cse13 .cse14 .cse15 .cse16))) (or (and .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse10 .cse11) (and .cse9 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse10 .cse11))) .cse17 .cse18) (and (and .cse12 .cse13 .cse15 (and (= ~__ste_email_isSigned0~0 0) .cse14) .cse16) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse17 .cse18))) [2019-10-22 11:22:26,125 INFO L443 ceAbstractionStarter]: For program point L1246(lines 1246 1257) no Hoare annotation was computed. [2019-10-22 11:22:26,125 INFO L443 ceAbstractionStarter]: For program point L1180(lines 1180 1188) no Hoare annotation was computed. [2019-10-22 11:22:26,125 INFO L443 ceAbstractionStarter]: For program point L1180-2(lines 1180 1188) no Hoare annotation was computed. [2019-10-22 11:22:26,125 INFO L443 ceAbstractionStarter]: For program point L1114(lines 1114 1120) no Hoare annotation was computed. [2019-10-22 11:22:26,125 INFO L443 ceAbstractionStarter]: For program point L1114-1(lines 1114 1120) no Hoare annotation was computed. [2019-10-22 11:22:26,125 INFO L443 ceAbstractionStarter]: For program point L1180-4(lines 1180 1188) no Hoare annotation was computed. [2019-10-22 11:22:26,125 INFO L443 ceAbstractionStarter]: For program point L1114-2(lines 1114 1120) no Hoare annotation was computed. [2019-10-22 11:22:26,125 INFO L443 ceAbstractionStarter]: For program point L2039(lines 2039 2046) no Hoare annotation was computed. [2019-10-22 11:22:26,125 INFO L443 ceAbstractionStarter]: For program point L1114-3(lines 1114 1120) no Hoare annotation was computed. [2019-10-22 11:22:26,125 INFO L443 ceAbstractionStarter]: For program point L1180-6(lines 1180 1188) no Hoare annotation was computed. [2019-10-22 11:22:26,125 INFO L443 ceAbstractionStarter]: For program point L1180-8(lines 1180 1188) no Hoare annotation was computed. [2019-10-22 11:22:26,125 INFO L443 ceAbstractionStarter]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2019-10-22 11:22:26,126 INFO L439 ceAbstractionStarter]: At program point L2172(lines 2159 2177) the Hoare annotation is: (let ((.cse12 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse13 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse15 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse14 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse16 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse0 (= ~bob~0 1)) (.cse1 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse5 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse6 (= ULTIMATE.start_outgoing_~client 1)) (.cse7 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse8 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse17 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse18 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (let ((.cse9 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse10 (not (= ~__ste_client_privateKey0~0 0))) (.cse11 (and .cse12 .cse13 .cse14 .cse15 .cse16))) (or (and .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse10 .cse11) (and .cse9 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse10 .cse11))) .cse17 .cse18) (and (and .cse12 .cse13 .cse15 (and (= ~__ste_email_isSigned0~0 0) .cse14) .cse16) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse17 .cse18))) [2019-10-22 11:22:26,126 INFO L446 ceAbstractionStarter]: At program point L2172-1(lines 2159 2177) the Hoare annotation is: true [2019-10-22 11:22:26,126 INFO L443 ceAbstractionStarter]: For program point L1446(lines 1446 1482) no Hoare annotation was computed. [2019-10-22 11:22:26,126 INFO L443 ceAbstractionStarter]: For program point L1446-1(lines 1446 1482) no Hoare annotation was computed. [2019-10-22 11:22:26,126 INFO L443 ceAbstractionStarter]: For program point L1446-2(lines 1446 1482) no Hoare annotation was computed. [2019-10-22 11:22:26,126 INFO L443 ceAbstractionStarter]: For program point L1446-3(lines 1446 1482) no Hoare annotation was computed. [2019-10-22 11:22:26,126 INFO L443 ceAbstractionStarter]: For program point L1446-4(lines 1446 1482) no Hoare annotation was computed. [2019-10-22 11:22:26,126 INFO L443 ceAbstractionStarter]: For program point L1975(lines 1975 1982) no Hoare annotation was computed. [2019-10-22 11:22:26,126 INFO L443 ceAbstractionStarter]: For program point L1447(lines 1447 1455) no Hoare annotation was computed. [2019-10-22 11:22:26,127 INFO L439 ceAbstractionStarter]: At program point L1381(lines 1334 1387) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,127 INFO L443 ceAbstractionStarter]: For program point L1447-2(lines 1447 1455) no Hoare annotation was computed. [2019-10-22 11:22:26,127 INFO L443 ceAbstractionStarter]: For program point L1447-4(lines 1447 1455) no Hoare annotation was computed. [2019-10-22 11:22:26,127 INFO L443 ceAbstractionStarter]: For program point L1447-6(lines 1447 1455) no Hoare annotation was computed. [2019-10-22 11:22:26,127 INFO L443 ceAbstractionStarter]: For program point L1183(lines 1183 1187) no Hoare annotation was computed. [2019-10-22 11:22:26,127 INFO L443 ceAbstractionStarter]: For program point L1447-8(lines 1447 1455) no Hoare annotation was computed. [2019-10-22 11:22:26,127 INFO L439 ceAbstractionStarter]: At program point L1183-2(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,127 INFO L443 ceAbstractionStarter]: For program point L1183-3(lines 1183 1187) no Hoare annotation was computed. [2019-10-22 11:22:26,127 INFO L439 ceAbstractionStarter]: At program point L1183-5(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,127 INFO L443 ceAbstractionStarter]: For program point L1183-6(lines 1183 1187) no Hoare annotation was computed. [2019-10-22 11:22:26,128 INFO L439 ceAbstractionStarter]: At program point L1183-8(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,128 INFO L443 ceAbstractionStarter]: For program point L1183-9(lines 1183 1187) no Hoare annotation was computed. [2019-10-22 11:22:26,128 INFO L439 ceAbstractionStarter]: At program point L1183-11(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,128 INFO L443 ceAbstractionStarter]: For program point L1183-12(lines 1183 1187) no Hoare annotation was computed. [2019-10-22 11:22:26,129 INFO L439 ceAbstractionStarter]: At program point L1183-14(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,129 INFO L443 ceAbstractionStarter]: For program point L1250(lines 1250 1256) no Hoare annotation was computed. [2019-10-22 11:22:26,129 INFO L443 ceAbstractionStarter]: For program point L1911(lines 1910 2074) no Hoare annotation was computed. [2019-10-22 11:22:26,129 INFO L439 ceAbstractionStarter]: At program point L1119(lines 1102 1125) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= ~bob~0 1) (not (= ULTIMATE.start_setClientId_~handle 2)) (= ULTIMATE.start_getClientPrivateKey_~handle 1) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) (= ULTIMATE.start_outgoing_~client 1) (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) (= ~__ste_email_isSigned0~0 0) (= 1 ULTIMATE.start_sendEmail_~sender) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0)) [2019-10-22 11:22:26,129 INFO L439 ceAbstractionStarter]: At program point L1119-1(lines 1102 1125) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= ~bob~0 1) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= ~__ste_client_privateKey0~0 0)) (= ULTIMATE.start_getClientPrivateKey_~handle 1) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) (= ULTIMATE.start_outgoing_~client 1) (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1) (= 1 ULTIMATE.start_sendEmail_~sender) (= |ULTIMATE.start_createEmail_#res| 1) (= ULTIMATE.start_isSigned_~handle 1) (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0)) [2019-10-22 11:22:26,129 INFO L439 ceAbstractionStarter]: At program point L1119-2(lines 1102 1125) the Hoare annotation is: false [2019-10-22 11:22:26,129 INFO L439 ceAbstractionStarter]: At program point L1119-3(lines 1102 1125) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_createEmail_#res| 1) (not (= ~__ste_client_privateKey0~0 0)) (= 1 ULTIMATE.start_createEmail_~msg~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,129 INFO L443 ceAbstractionStarter]: For program point L1912(lines 1912 1916) no Hoare annotation was computed. [2019-10-22 11:22:26,130 INFO L443 ceAbstractionStarter]: For program point L1450(lines 1450 1454) no Hoare annotation was computed. [2019-10-22 11:22:26,130 INFO L443 ceAbstractionStarter]: For program point L1450-3(lines 1450 1454) no Hoare annotation was computed. [2019-10-22 11:22:26,130 INFO L443 ceAbstractionStarter]: For program point L1450-6(lines 1450 1454) no Hoare annotation was computed. [2019-10-22 11:22:26,130 INFO L443 ceAbstractionStarter]: For program point L1450-9(lines 1450 1454) no Hoare annotation was computed. [2019-10-22 11:22:26,130 INFO L443 ceAbstractionStarter]: For program point L63(lines 63 76) no Hoare annotation was computed. [2019-10-22 11:22:26,130 INFO L443 ceAbstractionStarter]: For program point L1450-12(lines 1450 1454) no Hoare annotation was computed. [2019-10-22 11:22:26,130 INFO L439 ceAbstractionStarter]: At program point L63-1(lines 54 79) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_outgoing_~client 1)) (.cse1 (= 1 ~queue_empty~0)) (.cse2 (= ~bob~0 1)) (.cse3 (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7)) (.cse4 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse5 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse6 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse7 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse9 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse8 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse10 (= ULTIMATE.start_isSigned_~handle 1)) (.cse11 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse12 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse13 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse14 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (and .cse6 .cse7 .cse8 (and (= ~__ste_email_isSigned0~0 0) .cse9) .cse10 .cse11) .cse12 .cse13 .cse14) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (let ((.cse15 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse16 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse6 .cse7 .cse15 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse9 .cse8 .cse16 .cse10 .cse11) (and .cse6 .cse7 .cse15 .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse8 .cse16 .cse10 .cse11))) .cse12 .cse13 .cse14))) [2019-10-22 11:22:26,130 INFO L443 ceAbstractionStarter]: For program point L63-2(lines 63 76) no Hoare annotation was computed. [2019-10-22 11:22:26,130 INFO L446 ceAbstractionStarter]: At program point L63-3(lines 54 79) the Hoare annotation is: true [2019-10-22 11:22:26,130 INFO L439 ceAbstractionStarter]: At program point L2640(lines 2635 2643) the Hoare annotation is: false [2019-10-22 11:22:26,131 INFO L443 ceAbstractionStarter]: For program point L-1(line -1) no Hoare annotation was computed. [2019-10-22 11:22:26,131 INFO L439 ceAbstractionStarter]: At program point L2048(lines 2035 2064) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,131 INFO L439 ceAbstractionStarter]: At program point L2841(lines 2830 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_sendEmail_~sender) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,131 INFO L443 ceAbstractionStarter]: For program point L2445(lines 2445 2453) no Hoare annotation was computed. [2019-10-22 11:22:26,131 INFO L443 ceAbstractionStarter]: For program point L2445-2(lines 2445 2453) no Hoare annotation was computed. [2019-10-22 11:22:26,131 INFO L443 ceAbstractionStarter]: For program point L67(lines 67 73) no Hoare annotation was computed. [2019-10-22 11:22:26,131 INFO L443 ceAbstractionStarter]: For program point L67-2(lines 67 73) no Hoare annotation was computed. [2019-10-22 11:22:26,131 INFO L443 ceAbstractionStarter]: For program point L2182(lines 2182 2190) no Hoare annotation was computed. [2019-10-22 11:22:26,131 INFO L443 ceAbstractionStarter]: For program point L2182-2(lines 2182 2190) no Hoare annotation was computed. [2019-10-22 11:22:26,131 INFO L443 ceAbstractionStarter]: For program point L2182-4(lines 2182 2190) no Hoare annotation was computed. [2019-10-22 11:22:26,132 INFO L439 ceAbstractionStarter]: At program point L1984(lines 1971 2069) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,132 INFO L443 ceAbstractionStarter]: For program point L1918(lines 1918 2073) no Hoare annotation was computed. [2019-10-22 11:22:26,132 INFO L443 ceAbstractionStarter]: For program point L1457(lines 1457 1481) no Hoare annotation was computed. [2019-10-22 11:22:26,132 INFO L443 ceAbstractionStarter]: For program point L2448(lines 2448 2452) no Hoare annotation was computed. [2019-10-22 11:22:26,132 INFO L443 ceAbstractionStarter]: For program point L1457-1(lines 1457 1481) no Hoare annotation was computed. [2019-10-22 11:22:26,133 INFO L443 ceAbstractionStarter]: For program point L1457-2(lines 1457 1481) no Hoare annotation was computed. [2019-10-22 11:22:26,133 INFO L439 ceAbstractionStarter]: At program point L2448-2(lines 1 2844) the Hoare annotation is: (let ((.cse3 (= ULTIMATE.start_outgoing_~client 1)) (.cse0 (= ~bob~0 1)) (.cse5 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse2 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse4 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse6 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse8 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse1 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse7 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) .cse0 (not (= ~__ste_client_privateKey0~0 0)) .cse1 .cse2 (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) .cse3 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse3 (= 1 ~queue_empty~0) .cse0 (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) .cse5 (and .cse2 (= ~__ste_email_isSigned0~0 0) .cse4 .cse6 .cse8) .cse1 .cse7))) [2019-10-22 11:22:26,133 INFO L443 ceAbstractionStarter]: For program point L1457-3(lines 1457 1481) no Hoare annotation was computed. [2019-10-22 11:22:26,133 INFO L443 ceAbstractionStarter]: For program point L1457-4(lines 1457 1481) no Hoare annotation was computed. [2019-10-22 11:22:26,133 INFO L443 ceAbstractionStarter]: For program point L2448-3(lines 2448 2452) no Hoare annotation was computed. [2019-10-22 11:22:26,133 INFO L443 ceAbstractionStarter]: For program point L1259(lines 1259 1275) no Hoare annotation was computed. [2019-10-22 11:22:26,133 INFO L439 ceAbstractionStarter]: At program point L2448-5(lines 1 2844) the Hoare annotation is: false [2019-10-22 11:22:26,133 INFO L443 ceAbstractionStarter]: For program point L2713-1(lines 2713 2724) no Hoare annotation was computed. [2019-10-22 11:22:26,134 INFO L443 ceAbstractionStarter]: For program point L2713(lines 2713 2724) no Hoare annotation was computed. [2019-10-22 11:22:26,134 INFO L443 ceAbstractionStarter]: For program point L1458(lines 1458 1466) no Hoare annotation was computed. [2019-10-22 11:22:26,134 INFO L443 ceAbstractionStarter]: For program point L1458-2(lines 1458 1466) no Hoare annotation was computed. [2019-10-22 11:22:26,134 INFO L443 ceAbstractionStarter]: For program point L1392(lines 1392 1438) no Hoare annotation was computed. [2019-10-22 11:22:26,134 INFO L443 ceAbstractionStarter]: For program point L1392-1(lines 1392 1438) no Hoare annotation was computed. [2019-10-22 11:22:26,134 INFO L443 ceAbstractionStarter]: For program point L1458-4(lines 1458 1466) no Hoare annotation was computed. [2019-10-22 11:22:26,134 INFO L443 ceAbstractionStarter]: For program point L1260(lines 1260 1271) no Hoare annotation was computed. [2019-10-22 11:22:26,134 INFO L443 ceAbstractionStarter]: For program point L1458-6(lines 1458 1466) no Hoare annotation was computed. [2019-10-22 11:22:26,134 INFO L443 ceAbstractionStarter]: For program point L1458-8(lines 1458 1466) no Hoare annotation was computed. [2019-10-22 11:22:26,134 INFO L443 ceAbstractionStarter]: For program point L2185(lines 2185 2189) no Hoare annotation was computed. [2019-10-22 11:22:26,134 INFO L443 ceAbstractionStarter]: For program point L2185-3(lines 2185 2189) no Hoare annotation was computed. [2019-10-22 11:22:26,134 INFO L439 ceAbstractionStarter]: At program point L2185-2(lines 2178 2193) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 1 ULTIMATE.start_sendEmail_~sender) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,135 INFO L443 ceAbstractionStarter]: For program point L2053(lines 2053 2060) no Hoare annotation was computed. [2019-10-22 11:22:26,135 INFO L439 ceAbstractionStarter]: At program point L2185-5(lines 2178 2193) the Hoare annotation is: (let ((.cse4 (= ULTIMATE.start_outgoing_~client 1)) (.cse1 (= ~bob~0 1)) (.cse3 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse5 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse8 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse10 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse6 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse7 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse9 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) .cse1 (not (= ~__ste_client_privateKey0~0 0)) .cse2 .cse3 (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) .cse4 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse4 (= 1 ~queue_empty~0) .cse1 (and .cse3 .cse0 (= ~__ste_email_isSigned0~0 0) .cse5 .cse8 .cse10) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) .cse6 .cse7 .cse2 .cse9))) [2019-10-22 11:22:26,135 INFO L439 ceAbstractionStarter]: At program point L2053-1(lines 1910 2074) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,135 INFO L443 ceAbstractionStarter]: For program point L2185-6(lines 2185 2189) no Hoare annotation was computed. [2019-10-22 11:22:26,135 INFO L439 ceAbstractionStarter]: At program point L2185-8(lines 2178 2193) the Hoare annotation is: false [2019-10-22 11:22:26,135 INFO L443 ceAbstractionStarter]: For program point L1393(lines 1393 1404) no Hoare annotation was computed. [2019-10-22 11:22:26,135 INFO L443 ceAbstractionStarter]: For program point L1393-1(lines 1393 1404) no Hoare annotation was computed. [2019-10-22 11:22:26,135 INFO L443 ceAbstractionStarter]: For program point L1922(lines 1922 1929) no Hoare annotation was computed. [2019-10-22 11:22:26,135 INFO L443 ceAbstractionStarter]: For program point L1130(lines 1130 1142) no Hoare annotation was computed. [2019-10-22 11:22:26,135 INFO L443 ceAbstractionStarter]: For program point L1130-2(lines 1130 1142) no Hoare annotation was computed. [2019-10-22 11:22:26,135 INFO L443 ceAbstractionStarter]: For program point L1130-4(lines 1130 1142) no Hoare annotation was computed. [2019-10-22 11:22:26,136 INFO L443 ceAbstractionStarter]: For program point L1989(lines 1989 1993) no Hoare annotation was computed. [2019-10-22 11:22:26,136 INFO L443 ceAbstractionStarter]: For program point L1130-6(lines 1130 1142) no Hoare annotation was computed. [2019-10-22 11:22:26,136 INFO L443 ceAbstractionStarter]: For program point L1130-8(lines 1130 1142) no Hoare annotation was computed. [2019-10-22 11:22:26,136 INFO L443 ceAbstractionStarter]: For program point L1130-10(lines 1130 1142) no Hoare annotation was computed. [2019-10-22 11:22:26,136 INFO L439 ceAbstractionStarter]: At program point L1725(lines 1705 1727) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) (= ~bob~0 1) (not (= 2 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_email_isSigned0~0 0) (not (= ULTIMATE.start_setClientPrivateKey_~handle 2)) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,137 INFO L443 ceAbstractionStarter]: For program point L1461(lines 1461 1465) no Hoare annotation was computed. [2019-10-22 11:22:26,137 INFO L443 ceAbstractionStarter]: For program point L1461-3(lines 1461 1465) no Hoare annotation was computed. [2019-10-22 11:22:26,137 INFO L443 ceAbstractionStarter]: For program point L1461-6(lines 1461 1465) no Hoare annotation was computed. [2019-10-22 11:22:26,137 INFO L443 ceAbstractionStarter]: For program point L1461-9(lines 1461 1465) no Hoare annotation was computed. [2019-10-22 11:22:26,137 INFO L443 ceAbstractionStarter]: For program point L1461-12(lines 1461 1465) no Hoare annotation was computed. [2019-10-22 11:22:26,137 INFO L443 ceAbstractionStarter]: For program point L2717-1(lines 2713 2724) no Hoare annotation was computed. [2019-10-22 11:22:26,137 INFO L443 ceAbstractionStarter]: For program point L2717(lines 2717 2721) no Hoare annotation was computed. [2019-10-22 11:22:26,137 INFO L443 ceAbstractionStarter]: For program point L2717-3(lines 2713 2724) no Hoare annotation was computed. [2019-10-22 11:22:26,137 INFO L443 ceAbstractionStarter]: For program point L2717-2(lines 2717 2721) no Hoare annotation was computed. [2019-10-22 11:22:26,137 INFO L443 ceAbstractionStarter]: For program point L1264(lines 1264 1270) no Hoare annotation was computed. [2019-10-22 11:22:26,138 INFO L443 ceAbstractionStarter]: For program point L1397(lines 1397 1403) no Hoare annotation was computed. [2019-10-22 11:22:26,138 INFO L443 ceAbstractionStarter]: For program point L1397-1(lines 1397 1403) no Hoare annotation was computed. [2019-10-22 11:22:26,138 INFO L443 ceAbstractionStarter]: For program point L1133(lines 1133 1141) no Hoare annotation was computed. [2019-10-22 11:22:26,138 INFO L443 ceAbstractionStarter]: For program point L1133-2(lines 1133 1141) no Hoare annotation was computed. [2019-10-22 11:22:26,138 INFO L443 ceAbstractionStarter]: For program point L1133-4(lines 1133 1141) no Hoare annotation was computed. [2019-10-22 11:22:26,138 INFO L443 ceAbstractionStarter]: For program point L1133-6(lines 1133 1141) no Hoare annotation was computed. [2019-10-22 11:22:26,138 INFO L443 ceAbstractionStarter]: For program point L1133-8(lines 1133 1141) no Hoare annotation was computed. [2019-10-22 11:22:26,138 INFO L443 ceAbstractionStarter]: For program point L1133-10(lines 1133 1141) no Hoare annotation was computed. [2019-10-22 11:22:26,138 INFO L443 ceAbstractionStarter]: For program point L2653-1(lines 2653 2663) no Hoare annotation was computed. [2019-10-22 11:22:26,138 INFO L443 ceAbstractionStarter]: For program point L2653(lines 2653 2663) no Hoare annotation was computed. [2019-10-22 11:22:26,138 INFO L443 ceAbstractionStarter]: For program point L2389-1(lines 2389 2400) no Hoare annotation was computed. [2019-10-22 11:22:26,138 INFO L443 ceAbstractionStarter]: For program point L2389(lines 2389 2400) no Hoare annotation was computed. [2019-10-22 11:22:26,138 INFO L443 ceAbstractionStarter]: For program point L2389-3(lines 2389 2400) no Hoare annotation was computed. [2019-10-22 11:22:26,139 INFO L443 ceAbstractionStarter]: For program point L2389-2(lines 2389 2400) no Hoare annotation was computed. [2019-10-22 11:22:26,139 INFO L443 ceAbstractionStarter]: For program point L1136(lines 1136 1140) no Hoare annotation was computed. [2019-10-22 11:22:26,139 INFO L439 ceAbstractionStarter]: At program point L1136-2(lines 1 2844) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2019-10-22 11:22:26,139 INFO L443 ceAbstractionStarter]: For program point L1136-3(lines 1136 1140) no Hoare annotation was computed. [2019-10-22 11:22:26,139 INFO L439 ceAbstractionStarter]: At program point L1136-5(lines 1 2844) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (= ULTIMATE.start_setClientId_~handle 2) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_rjh_~rjh___0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2019-10-22 11:22:26,139 INFO L439 ceAbstractionStarter]: At program point L1995(lines 1985 2068) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,139 INFO L443 ceAbstractionStarter]: For program point L1136-6(lines 1136 1140) no Hoare annotation was computed. [2019-10-22 11:22:26,139 INFO L439 ceAbstractionStarter]: At program point L1136-8(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) (= ~bob~0 1) (not (= 2 ULTIMATE.start_setup_chuck_~chuck___0)) (= ~__ste_email_isSigned0~0 0) (not (= ULTIMATE.start_setClientPrivateKey_~handle 2)) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,139 INFO L443 ceAbstractionStarter]: For program point L1136-9(lines 1136 1140) no Hoare annotation was computed. [2019-10-22 11:22:26,140 INFO L439 ceAbstractionStarter]: At program point L1136-11(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,140 INFO L443 ceAbstractionStarter]: For program point L1136-12(lines 1136 1140) no Hoare annotation was computed. [2019-10-22 11:22:26,140 INFO L439 ceAbstractionStarter]: At program point L1136-14(lines 1851 1860) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,140 INFO L443 ceAbstractionStarter]: For program point L1136-15(lines 1136 1140) no Hoare annotation was computed. [2019-10-22 11:22:26,141 INFO L439 ceAbstractionStarter]: At program point L1136-17(lines 1841 1850) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,141 INFO L443 ceAbstractionStarter]: For program point L2657-1(lines 2657 2662) no Hoare annotation was computed. [2019-10-22 11:22:26,141 INFO L443 ceAbstractionStarter]: For program point L2657(lines 2657 2662) no Hoare annotation was computed. [2019-10-22 11:22:26,141 INFO L443 ceAbstractionStarter]: For program point L1468(lines 1468 1480) no Hoare annotation was computed. [2019-10-22 11:22:26,141 INFO L439 ceAbstractionStarter]: At program point L1468-1(lines 1442 1485) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,141 INFO L443 ceAbstractionStarter]: For program point L1468-2(lines 1468 1480) no Hoare annotation was computed. [2019-10-22 11:22:26,141 INFO L439 ceAbstractionStarter]: At program point L1468-3(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,141 INFO L443 ceAbstractionStarter]: For program point L2393-1(lines 2393 2399) no Hoare annotation was computed. [2019-10-22 11:22:26,142 INFO L443 ceAbstractionStarter]: For program point L1468-4(lines 1468 1480) no Hoare annotation was computed. [2019-10-22 11:22:26,142 INFO L443 ceAbstractionStarter]: For program point L2393(lines 2393 2399) no Hoare annotation was computed. [2019-10-22 11:22:26,142 INFO L439 ceAbstractionStarter]: At program point L1468-5(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,142 INFO L443 ceAbstractionStarter]: For program point L2393-3(lines 2393 2399) no Hoare annotation was computed. [2019-10-22 11:22:26,142 INFO L443 ceAbstractionStarter]: For program point L1468-6(lines 1468 1480) no Hoare annotation was computed. [2019-10-22 11:22:26,142 INFO L443 ceAbstractionStarter]: For program point L2393-2(lines 2393 2399) no Hoare annotation was computed. [2019-10-22 11:22:26,142 INFO L439 ceAbstractionStarter]: At program point L1468-7(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,142 INFO L443 ceAbstractionStarter]: For program point L1204(lines 1204 1214) no Hoare annotation was computed. [2019-10-22 11:22:26,142 INFO L443 ceAbstractionStarter]: For program point L1468-8(lines 1468 1480) no Hoare annotation was computed. [2019-10-22 11:22:26,142 INFO L443 ceAbstractionStarter]: For program point L1204-1(lines 1204 1214) no Hoare annotation was computed. [2019-10-22 11:22:26,143 INFO L439 ceAbstractionStarter]: At program point L1468-9(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,143 INFO L443 ceAbstractionStarter]: For program point L1204-2(lines 1204 1214) no Hoare annotation was computed. [2019-10-22 11:22:26,143 INFO L443 ceAbstractionStarter]: For program point L1204-3(lines 1204 1214) no Hoare annotation was computed. [2019-10-22 11:22:26,143 INFO L443 ceAbstractionStarter]: For program point L1204-4(lines 1204 1214) no Hoare annotation was computed. [2019-10-22 11:22:26,143 INFO L439 ceAbstractionStarter]: At program point L1931(lines 1918 2073) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,143 INFO L443 ceAbstractionStarter]: For program point L1469(lines 1469 1477) no Hoare annotation was computed. [2019-10-22 11:22:26,143 INFO L443 ceAbstractionStarter]: For program point L1469-2(lines 1469 1477) no Hoare annotation was computed. [2019-10-22 11:22:26,143 INFO L443 ceAbstractionStarter]: For program point L1469-4(lines 1469 1477) no Hoare annotation was computed. [2019-10-22 11:22:26,143 INFO L443 ceAbstractionStarter]: For program point L1469-6(lines 1469 1477) no Hoare annotation was computed. [2019-10-22 11:22:26,143 INFO L443 ceAbstractionStarter]: For program point L1469-8(lines 1469 1477) no Hoare annotation was computed. [2019-10-22 11:22:26,143 INFO L443 ceAbstractionStarter]: For program point L1866(line 1866) no Hoare annotation was computed. [2019-10-22 11:22:26,144 INFO L443 ceAbstractionStarter]: For program point L1866-1(line 1866) no Hoare annotation was computed. [2019-10-22 11:22:26,144 INFO L443 ceAbstractionStarter]: For program point L1338(lines 1338 1384) no Hoare annotation was computed. [2019-10-22 11:22:26,144 INFO L443 ceAbstractionStarter]: For program point L1339(lines 1339 1350) no Hoare annotation was computed. [2019-10-22 11:22:26,144 INFO L443 ceAbstractionStarter]: For program point L2000(lines 2000 2007) no Hoare annotation was computed. [2019-10-22 11:22:26,144 INFO L443 ceAbstractionStarter]: For program point L1472(lines 1472 1476) no Hoare annotation was computed. [2019-10-22 11:22:26,144 INFO L443 ceAbstractionStarter]: For program point L1406(lines 1406 1437) no Hoare annotation was computed. [2019-10-22 11:22:26,145 INFO L443 ceAbstractionStarter]: For program point L1472-3(lines 1472 1476) no Hoare annotation was computed. [2019-10-22 11:22:26,145 INFO L443 ceAbstractionStarter]: For program point L1406-1(lines 1406 1437) no Hoare annotation was computed. [2019-10-22 11:22:26,145 INFO L439 ceAbstractionStarter]: At program point L1274(lines 1227 1280) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,145 INFO L443 ceAbstractionStarter]: For program point L1472-6(lines 1472 1476) no Hoare annotation was computed. [2019-10-22 11:22:26,145 INFO L443 ceAbstractionStarter]: For program point L1472-9(lines 1472 1476) no Hoare annotation was computed. [2019-10-22 11:22:26,145 INFO L443 ceAbstractionStarter]: For program point L1472-12(lines 1472 1476) no Hoare annotation was computed. [2019-10-22 11:22:26,145 INFO L439 ceAbstractionStarter]: At program point L2398(lines 2385 2403) the Hoare annotation is: (let ((.cse4 (= ULTIMATE.start_outgoing_~client 1)) (.cse1 (= ~bob~0 1)) (.cse3 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse5 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse8 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse9 (= ULTIMATE.start_isSigned_~handle 1)) (.cse12 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse6 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse7 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse10 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse11 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) .cse1 (not (= ~__ste_client_privateKey0~0 0)) .cse2 .cse3 (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) .cse4 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse4 (= 1 ~queue_empty~0) .cse1 (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (and .cse3 .cse0 (= ~__ste_email_isSigned0~0 0) .cse5 .cse8 .cse9 (= |ULTIMATE.start_isSigned_#res| 0) .cse12) .cse6 .cse7 .cse2 .cse10 .cse11))) [2019-10-22 11:22:26,145 INFO L443 ceAbstractionStarter]: For program point L1407(lines 1407 1418) no Hoare annotation was computed. [2019-10-22 11:22:26,146 INFO L443 ceAbstractionStarter]: For program point L1407-1(lines 1407 1418) no Hoare annotation was computed. [2019-10-22 11:22:26,146 INFO L443 ceAbstractionStarter]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2019-10-22 11:22:26,146 INFO L439 ceAbstractionStarter]: At program point L2398-2(lines 2385 2403) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_isSigned_#res| 0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,146 INFO L439 ceAbstractionStarter]: At program point L2398-1(lines 2385 2403) the Hoare annotation is: (let ((.cse12 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse13 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse15 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse14 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse16 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse0 (= ~bob~0 1)) (.cse1 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse5 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse6 (= ULTIMATE.start_outgoing_~client 1)) (.cse7 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse8 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse17 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse18 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (let ((.cse9 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse10 (not (= ~__ste_client_privateKey0~0 0))) (.cse11 (and .cse12 .cse13 .cse14 .cse15 .cse16))) (or (and .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse10 .cse11) (and .cse9 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse10 .cse11))) .cse17 .cse18) (and (and .cse12 .cse13 .cse15 (and (= ~__ste_email_isSigned0~0 0) .cse14) .cse16) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse17 .cse18))) [2019-10-22 11:22:26,146 INFO L446 ceAbstractionStarter]: At program point L2398-3(lines 2385 2403) the Hoare annotation is: true [2019-10-22 11:22:26,146 INFO L443 ceAbstractionStarter]: For program point L2200(lines 2200 2211) no Hoare annotation was computed. [2019-10-22 11:22:26,146 INFO L443 ceAbstractionStarter]: For program point L2200-1(lines 2200 2211) no Hoare annotation was computed. [2019-10-22 11:22:26,146 INFO L443 ceAbstractionStarter]: For program point L1936(lines 1936 1940) no Hoare annotation was computed. [2019-10-22 11:22:26,146 INFO L443 ceAbstractionStarter]: For program point L1738(lines 1738 1745) no Hoare annotation was computed. [2019-10-22 11:22:26,146 INFO L446 ceAbstractionStarter]: At program point L1738-1(lines 1738 1745) the Hoare annotation is: true [2019-10-22 11:22:26,147 INFO L443 ceAbstractionStarter]: For program point L2730(lines 2730 2744) no Hoare annotation was computed. [2019-10-22 11:22:26,147 INFO L443 ceAbstractionStarter]: For program point L2730-2(lines 2730 2744) no Hoare annotation was computed. [2019-10-22 11:22:26,147 INFO L439 ceAbstractionStarter]: At program point L2730-1(lines 2700 2747) the Hoare annotation is: (let ((.cse12 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse13 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse15 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse14 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse16 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse0 (= ~bob~0 1)) (.cse1 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse5 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse6 (= ULTIMATE.start_outgoing_~client 1)) (.cse7 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse8 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse17 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse18 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (let ((.cse9 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse10 (not (= ~__ste_client_privateKey0~0 0))) (.cse11 (and .cse12 .cse13 .cse14 .cse15 .cse16))) (or (and .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse10 .cse11) (and .cse9 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse10 .cse11))) .cse17 .cse18) (and (and .cse12 .cse13 .cse15 (and (= ~__ste_email_isSigned0~0 0) .cse14) .cse16) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse17 .cse18))) [2019-10-22 11:22:26,147 INFO L446 ceAbstractionStarter]: At program point L2730-3(lines 2700 2747) the Hoare annotation is: true [2019-10-22 11:22:26,147 INFO L443 ceAbstractionStarter]: For program point L1541(lines 1541 1557) no Hoare annotation was computed. [2019-10-22 11:22:26,147 INFO L443 ceAbstractionStarter]: For program point L1541-1(lines 1541 1557) no Hoare annotation was computed. [2019-10-22 11:22:26,147 INFO L443 ceAbstractionStarter]: For program point L1343(lines 1343 1349) no Hoare annotation was computed. [2019-10-22 11:22:26,147 INFO L446 ceAbstractionStarter]: At program point L2665-1(lines 2644 2668) the Hoare annotation is: true [2019-10-22 11:22:26,147 INFO L439 ceAbstractionStarter]: At program point L2665(lines 2644 2668) the Hoare annotation is: (let ((.cse12 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse13 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse15 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse14 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse16 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse0 (= ~bob~0 1)) (.cse1 (not (= |ULTIMATE.start_isReadable_#res| 0))) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= ULTIMATE.start_verify_~tmp~15 0))) (.cse5 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse6 (= ULTIMATE.start_outgoing_~client 1)) (.cse7 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse8 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse17 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse18 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (let ((.cse9 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse10 (not (= ~__ste_client_privateKey0~0 0))) (.cse11 (and .cse12 .cse13 .cse14 .cse15 .cse16))) (or (and .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse10 .cse11) (and .cse9 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse10 .cse11))) .cse17 .cse18) (and (and .cse12 .cse13 .cse15 (and (= ~__ste_email_isSigned0~0 0) .cse14) .cse16) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse17 .cse18))) [2019-10-22 11:22:26,148 INFO L443 ceAbstractionStarter]: For program point L1411(lines 1411 1417) no Hoare annotation was computed. [2019-10-22 11:22:26,148 INFO L443 ceAbstractionStarter]: For program point L1411-1(lines 1411 1417) no Hoare annotation was computed. [2019-10-22 11:22:26,148 INFO L439 ceAbstractionStarter]: At program point L1213(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= 0 ULTIMATE.start_test_~op1~0) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,148 INFO L443 ceAbstractionStarter]: For program point L2204(lines 2204 2210) no Hoare annotation was computed. [2019-10-22 11:22:26,149 INFO L439 ceAbstractionStarter]: At program point L1213-1(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,149 INFO L439 ceAbstractionStarter]: At program point L1213-2(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,149 INFO L439 ceAbstractionStarter]: At program point L1213-3(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,149 INFO L443 ceAbstractionStarter]: For program point L2204-1(lines 2204 2210) no Hoare annotation was computed. [2019-10-22 11:22:26,149 INFO L439 ceAbstractionStarter]: At program point L1213-4(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,149 INFO L443 ceAbstractionStarter]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 1866) no Hoare annotation was computed. [2019-10-22 11:22:26,149 INFO L443 ceAbstractionStarter]: For program point L1545(lines 1545 1556) no Hoare annotation was computed. [2019-10-22 11:22:26,150 INFO L443 ceAbstractionStarter]: For program point L1545-1(lines 1545 1556) no Hoare annotation was computed. [2019-10-22 11:22:26,150 INFO L439 ceAbstractionStarter]: At program point L1942(lines 1932 2072) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,150 INFO L443 ceAbstractionStarter]: For program point L2735(lines 2735 2741) no Hoare annotation was computed. [2019-10-22 11:22:26,150 INFO L443 ceAbstractionStarter]: For program point L2735-2(lines 2735 2741) no Hoare annotation was computed. [2019-10-22 11:22:26,150 INFO L439 ceAbstractionStarter]: At program point L2075(lines 1909 2076) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,150 INFO L439 ceAbstractionStarter]: At program point L2009(lines 1996 2067) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= 1 ~queue_empty~0) (= ~bob~0 1) (= ~__ste_email_isSigned0~0 0) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) (not (= ULTIMATE.start_setClientId_~handle 2)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0))) [2019-10-22 11:22:26,150 INFO L439 ceAbstractionStarter]: At program point L490(lines 1 2844) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= ~__ste_email_isSigned0~0 0)) [2019-10-22 11:22:26,150 INFO L443 ceAbstractionStarter]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2019-10-22 11:22:26,150 INFO L446 ceAbstractionStarter]: At program point L1746(lines 1728 1748) the Hoare annotation is: true [2019-10-22 11:22:26,150 INFO L446 ceAbstractionStarter]: At program point L2209-1(lines 2196 2214) the Hoare annotation is: true [2019-10-22 11:22:26,151 INFO L439 ceAbstractionStarter]: At program point L2209(lines 2196 2214) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_outgoing_~client 1)) (.cse1 (= 1 ~queue_empty~0)) (.cse2 (= ~bob~0 1)) (.cse3 (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7)) (.cse4 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse5 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse6 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse7 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse9 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse8 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse10 (= ULTIMATE.start_isSigned_~handle 1)) (.cse11 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse12 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse13 (= ULTIMATE.start___utac_acc__SignForward_spec__1_~client 1)) (.cse14 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (and .cse6 .cse7 .cse8 (and (= ~__ste_email_isSigned0~0 0) .cse9) .cse10 .cse11) .cse12 .cse13 .cse14) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (let ((.cse15 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse16 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse6 .cse7 .cse15 (not (= 0 ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0)) .cse9 .cse8 .cse16 .cse10 .cse11) (and .cse6 .cse7 .cse15 .cse9 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse8 .cse16 .cse10 .cse11))) .cse12 .cse13 .cse14))) [2019-10-22 11:22:26,151 INFO L443 ceAbstractionStarter]: For program point L1549(lines 1549 1555) no Hoare annotation was computed. [2019-10-22 11:22:26,151 INFO L443 ceAbstractionStarter]: For program point L1549-1(lines 1549 1555) no Hoare annotation was computed. [2019-10-22 11:22:26,151 INFO L443 ceAbstractionStarter]: For program point L2408(lines 2408 2416) no Hoare annotation was computed. [2019-10-22 11:22:26,151 INFO L443 ceAbstractionStarter]: For program point L2408-2(lines 2408 2416) no Hoare annotation was computed. [2019-10-22 11:22:26,151 INFO L443 ceAbstractionStarter]: For program point L1285(lines 1285 1321) no Hoare annotation was computed. [2019-10-22 11:22:26,151 INFO L443 ceAbstractionStarter]: For program point L1285-1(lines 1285 1321) no Hoare annotation was computed. [2019-10-22 11:22:26,151 INFO L443 ceAbstractionStarter]: For program point L1285-2(lines 1285 1321) no Hoare annotation was computed. [2019-10-22 11:22:26,151 INFO L443 ceAbstractionStarter]: For program point L1285-3(lines 1285 1321) no Hoare annotation was computed. [2019-10-22 11:22:26,151 INFO L443 ceAbstractionStarter]: For program point L1153(lines 1153 1169) no Hoare annotation was computed. [2019-10-22 11:22:26,151 INFO L443 ceAbstractionStarter]: For program point L1285-4(lines 1285 1321) no Hoare annotation was computed. [2019-10-22 11:22:26,152 INFO L443 ceAbstractionStarter]: For program point L1153-1(lines 1153 1169) no Hoare annotation was computed. [2019-10-22 11:22:26,152 INFO L443 ceAbstractionStarter]: For program point L1153-2(lines 1153 1169) no Hoare annotation was computed. [2019-10-22 11:22:26,152 INFO L443 ceAbstractionStarter]: For program point L1153-3(lines 1153 1169) no Hoare annotation was computed. [2019-10-22 11:22:26,152 INFO L443 ceAbstractionStarter]: For program point L1153-4(lines 1153 1169) no Hoare annotation was computed. [2019-10-22 11:22:26,152 INFO L443 ceAbstractionStarter]: For program point L1682(lines 1682 1690) no Hoare annotation was computed. [2019-10-22 11:22:26,153 INFO L443 ceAbstractionStarter]: For program point L1352(lines 1352 1383) no Hoare annotation was computed. [2019-10-22 11:22:26,153 INFO L443 ceAbstractionStarter]: For program point L1286(lines 1286 1294) no Hoare annotation was computed. [2019-10-22 11:22:26,153 INFO L443 ceAbstractionStarter]: For program point L1286-2(lines 1286 1294) no Hoare annotation was computed. [2019-10-22 11:22:26,153 INFO L443 ceAbstractionStarter]: For program point L1286-4(lines 1286 1294) no Hoare annotation was computed. [2019-10-22 11:22:26,153 INFO L443 ceAbstractionStarter]: For program point L1286-6(lines 1286 1294) no Hoare annotation was computed. [2019-10-22 11:22:26,153 INFO L443 ceAbstractionStarter]: For program point L1286-8(lines 1286 1294) no Hoare annotation was computed. [2019-10-22 11:22:26,153 INFO L443 ceAbstractionStarter]: For program point L1947(lines 1947 1954) no Hoare annotation was computed. [2019-10-22 11:22:26,153 INFO L443 ceAbstractionStarter]: For program point L1353(lines 1353 1364) no Hoare annotation was computed. [2019-10-22 11:22:26,153 INFO L443 ceAbstractionStarter]: For program point L2014(lines 2014 2018) no Hoare annotation was computed. [2019-10-22 11:22:26,153 INFO L443 ceAbstractionStarter]: For program point L1420(lines 1420 1436) no Hoare annotation was computed. [2019-10-22 11:22:26,153 INFO L443 ceAbstractionStarter]: For program point L1420-1(lines 1420 1436) no Hoare annotation was computed. [2019-10-22 11:22:26,153 INFO L443 ceAbstractionStarter]: For program point L2411(lines 2411 2415) no Hoare annotation was computed. [2019-10-22 11:22:26,153 INFO L443 ceAbstractionStarter]: For program point L2411-3(lines 2411 2415) no Hoare annotation was computed. [2019-10-22 11:22:26,154 INFO L439 ceAbstractionStarter]: At program point L2411-2(lines 2404 2419) the Hoare annotation is: (and (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= ~bob~0 1) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= ~__ste_client_privateKey0~0 0)) (= ULTIMATE.start_getClientPrivateKey_~handle 1) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)) (= 1 ULTIMATE.start_outgoing_~msg) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) (= ULTIMATE.start_outgoing_~client 1) (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) (= 1 ULTIMATE.start_sendEmail_~sender) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0)) [2019-10-22 11:22:26,154 INFO L439 ceAbstractionStarter]: At program point L2411-5(lines 2404 2419) the Hoare annotation is: false [2019-10-22 11:22:26,154 INFO L443 ceAbstractionStarter]: For program point L1421(lines 1421 1432) no Hoare annotation was computed. [2019-10-22 11:22:26,154 INFO L443 ceAbstractionStarter]: For program point L1421-1(lines 1421 1432) no Hoare annotation was computed. [2019-10-22 11:22:26,154 INFO L443 ceAbstractionStarter]: For program point L1289(lines 1289 1293) no Hoare annotation was computed. [2019-10-22 11:22:26,154 INFO L443 ceAbstractionStarter]: For program point L1289-3(lines 1289 1293) no Hoare annotation was computed. [2019-10-22 11:22:26,154 INFO L443 ceAbstractionStarter]: For program point L1157(lines 1157 1168) no Hoare annotation was computed. [2019-10-22 11:22:26,154 INFO L443 ceAbstractionStarter]: For program point L1157-1(lines 1157 1168) no Hoare annotation was computed. [2019-10-22 11:22:26,154 INFO L443 ceAbstractionStarter]: For program point L1157-2(lines 1157 1168) no Hoare annotation was computed. [2019-10-22 11:22:26,154 INFO L443 ceAbstractionStarter]: For program point L1289-6(lines 1289 1293) no Hoare annotation was computed. [2019-10-22 11:22:26,154 INFO L443 ceAbstractionStarter]: For program point L1157-3(lines 1157 1168) no Hoare annotation was computed. [2019-10-22 11:22:26,155 INFO L443 ceAbstractionStarter]: For program point L1157-4(lines 1157 1168) no Hoare annotation was computed. [2019-10-22 11:22:26,155 INFO L443 ceAbstractionStarter]: For program point L1289-9(lines 1289 1293) no Hoare annotation was computed. [2019-10-22 11:22:26,155 INFO L443 ceAbstractionStarter]: For program point L1289-12(lines 1289 1293) no Hoare annotation was computed. [2019-10-22 11:22:26,155 INFO L439 ceAbstractionStarter]: At program point L1554(lines 1537 1560) the Hoare annotation is: (let ((.cse4 (= ULTIMATE.start_outgoing_~client 1)) (.cse1 (= ~bob~0 1)) (.cse3 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse5 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= 1 ULTIMATE.start_setup_rjh_~rjh___0)) (not (= ULTIMATE.start_setClientId_~handle 2)) (not (= 1 ULTIMATE.start_setup_chuck_~chuck___0)))) (.cse8 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse10 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse6 (= ULTIMATE.start_outgoing__wrappee__Keys_~client 1)) (.cse7 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse9 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) .cse1 (not (= ~__ste_client_privateKey0~0 0)) .cse2 .cse3 (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) .cse4 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse4 (= 1 ~queue_empty~0) .cse1 (and .cse3 .cse0 (= ~__ste_email_isSigned0~0 0) .cse5 .cse8 .cse10) (= ~queue_empty~0 ULTIMATE.start_main_~tmp~7) .cse6 .cse7 .cse2 .cse9))) [2019-10-22 11:22:26,155 INFO L439 ceAbstractionStarter]: At program point L1554-1(lines 1537 1560) the Hoare annotation is: false [2019-10-22 11:22:26,208 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 22.10 11:22:26 BoogieIcfgContainer [2019-10-22 11:22:26,208 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-10-22 11:22:26,209 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-10-22 11:22:26,209 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-10-22 11:22:26,209 INFO L275 PluginConnector]: Witness Printer initialized [2019-10-22 11:22:26,210 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.10 11:22:14" (3/4) ... [2019-10-22 11:22:26,213 INFO L137 WitnessPrinter]: Generating witness for correct program [2019-10-22 11:22:26,236 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 133 nodes and edges [2019-10-22 11:22:26,245 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 75 nodes and edges [2019-10-22 11:22:26,246 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 6 nodes and edges [2019-10-22 11:22:26,248 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2019-10-22 11:22:26,249 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2019-10-22 11:22:26,278 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (1 == queue_empty && __ste_email_isSigned0 == 0) && \result == queue_empty [2019-10-22 11:22:26,279 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty [2019-10-22 11:22:26,279 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty [2019-10-22 11:22:26,279 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && handle == 2) && handle == rjh___0) && \result == queue_empty [2019-10-22 11:22:26,279 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && handle == 2) && !(handle == 1)) && handle == rjh___0) && \result == queue_empty [2019-10-22 11:22:26,280 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && bob == 1) && !(2 == chuck___0)) && __ste_email_isSigned0 == 0) && !(handle == 1)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,280 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && bob == 1) && !(2 == chuck___0)) && __ste_email_isSigned0 == 0) && !(handle == 2)) && !(handle == 1)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,280 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && bob == 1) && !(2 == chuck___0)) && __ste_email_isSigned0 == 0) && !(handle == 2)) && !(handle == 1)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,281 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,281 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,281 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,281 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,281 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,281 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,281 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,282 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,282 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,282 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,282 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,282 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,282 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,283 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,283 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && 1 == sender) && \result == queue_empty) && 1 == msg) && !(1 == chuck___0) [2019-10-22 11:22:26,284 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,284 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && 1 == sender) && \result == queue_empty) && 1 == msg) && !(1 == chuck___0) [2019-10-22 11:22:26,284 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,285 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,285 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,285 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) && !(1 == chuck___0) [2019-10-22 11:22:26,285 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,286 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,286 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,286 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,286 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,286 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,286 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,287 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,287 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,287 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,287 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,287 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,287 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,288 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,288 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,289 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((handle == chuck___0 && bob == 1) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && __ste_email_isSigned0 == 0) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg [2019-10-22 11:22:26,289 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,289 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,289 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,290 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,290 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,290 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((privkey == __ste_client_privateKey0 && bob == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) || (((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && 1 == sender) && (((1 == msg && __ste_email_isSigned0 == 0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) && handle == 1) && \result == queue_empty) [2019-10-22 11:22:26,290 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,291 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,291 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((privkey == __ste_client_privateKey0 && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg [2019-10-22 11:22:26,291 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,291 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && bob == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && client == 1) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) || ((((((((client == 1 && 1 == queue_empty) && bob == 1) && ((((1 == msg && 1 == msg) && __ste_email_isSigned0 == 0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) && queue_empty == tmp) && client == 1) && 1 == sender) && handle == 1) && \result == queue_empty) [2019-10-22 11:22:26,292 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && bob == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && client == 1) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) || ((((((((client == 1 && 1 == queue_empty) && bob == 1) && ((((1 == msg && 1 == msg) && __ste_email_isSigned0 == 0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) && queue_empty == tmp) && client == 1) && 1 == sender) && handle == 1) && \result == queue_empty) [2019-10-22 11:22:26,292 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,293 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) [2019-10-22 11:22:26,293 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && bob == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && client == 1) && 1 == sender) && \result == 1) && handle == 1) && client == 1) && \result == queue_empty) && 1 == msg) || (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && ((((((1 == msg && 1 == msg) && __ste_email_isSigned0 == 0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && handle == 1) && \result == 0) && 1 == msg) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) [2019-10-22 11:22:26,293 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && ((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && handle == 1) && 1 == msg) && handle == 1) && client == 1) && \result == queue_empty) || (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && (((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && !(0 == tmp)) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) || ((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && __ste_client_privateKey0 == \result) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg))) && handle == 1) && client == 1) && \result == queue_empty) [2019-10-22 11:22:26,293 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && client == 1) && 1 == sender) && \result == 1) && handle == 1) && client == 1) && \result == queue_empty) && 1 == msg [2019-10-22 11:22:26,294 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && ((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && handle == 1) && 1 == msg) && handle == 1) && client == 1) && \result == queue_empty) || (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && (((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && !(0 == tmp)) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) || ((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && __ste_client_privateKey0 == \result) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg))) && handle == 1) && client == 1) && \result == queue_empty) [2019-10-22 11:22:26,294 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((bob == 1 && !(\result == 0)) && (((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && !(0 == tmp)) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) || ((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && __ste_client_privateKey0 == \result) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg))) && handle == 1) && \result == 1) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) || ((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && handle == 1) && 1 == msg) && client == 1) && \result == queue_empty) [2019-10-22 11:22:26,294 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) [2019-10-22 11:22:26,294 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) [2019-10-22 11:22:26,294 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) [2019-10-22 11:22:26,294 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((bob == 1 && !(\result == 0)) && handle == 1) && !(0 == \result)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || ((((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && !(0 == \result)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) [2019-10-22 11:22:26,295 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) [2019-10-22 11:22:26,295 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) [2019-10-22 11:22:26,295 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) [2019-10-22 11:22:26,296 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) [2019-10-22 11:22:26,297 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && \result == 0) && !(1 == chuck___0) [2019-10-22 11:22:26,297 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((handle == chuck___0 && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0) [2019-10-22 11:22:26,404 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/working_dir_bd265442-66d3-4a01-a2c5-e39895f8dcaf/bin/utaipan/witness.graphml [2019-10-22 11:22:26,405 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-10-22 11:22:26,406 INFO L168 Benchmark]: Toolchain (without parser) took 15044.65 ms. Allocated memory was 1.0 GB in the beginning and 1.5 GB in the end (delta: 480.8 MB). Free memory was 944.5 MB in the beginning and 837.2 MB in the end (delta: 107.3 MB). Peak memory consumption was 588.1 MB. Max. memory is 11.5 GB. [2019-10-22 11:22:26,406 INFO L168 Benchmark]: CDTParser took 0.19 ms. Allocated memory is still 1.0 GB. Free memory is still 967.3 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-10-22 11:22:26,406 INFO L168 Benchmark]: CACSL2BoogieTranslator took 959.33 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 165.7 MB). Free memory was 944.5 MB in the beginning and 1.1 GB in the end (delta: -163.9 MB). Peak memory consumption was 30.0 MB. Max. memory is 11.5 GB. [2019-10-22 11:22:26,407 INFO L168 Benchmark]: Boogie Procedure Inliner took 150.69 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2019-10-22 11:22:26,407 INFO L168 Benchmark]: Boogie Preprocessor took 76.13 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2019-10-22 11:22:26,407 INFO L168 Benchmark]: RCFGBuilder took 1821.35 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 913.9 MB in the end (delta: 181.3 MB). Peak memory consumption was 181.3 MB. Max. memory is 11.5 GB. [2019-10-22 11:22:26,407 INFO L168 Benchmark]: TraceAbstraction took 11836.01 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 315.1 MB). Free memory was 913.9 MB in the beginning and 877.3 MB in the end (delta: 36.6 MB). Peak memory consumption was 395.1 MB. Max. memory is 11.5 GB. [2019-10-22 11:22:26,408 INFO L168 Benchmark]: Witness Printer took 195.88 ms. Allocated memory is still 1.5 GB. Free memory was 877.3 MB in the beginning and 837.2 MB in the end (delta: 40.1 MB). Peak memory consumption was 40.1 MB. Max. memory is 11.5 GB. [2019-10-22 11:22:26,409 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19 ms. Allocated memory is still 1.0 GB. Free memory is still 967.3 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 959.33 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 165.7 MB). Free memory was 944.5 MB in the beginning and 1.1 GB in the end (delta: -163.9 MB). Peak memory consumption was 30.0 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 150.69 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 76.13 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1821.35 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 913.9 MB in the end (delta: 181.3 MB). Peak memory consumption was 181.3 MB. Max. memory is 11.5 GB. * TraceAbstraction took 11836.01 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 315.1 MB). Free memory was 913.9 MB in the beginning and 877.3 MB in the end (delta: 36.6 MB). Peak memory consumption was 395.1 MB. Max. memory is 11.5 GB. * Witness Printer took 195.88 ms. Allocated memory is still 1.5 GB. Free memory was 877.3 MB in the beginning and 837.2 MB in the end (delta: 40.1 MB). Peak memory consumption was 40.1 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 1866]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 1866]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 2 specifications checked. All of them hold - InvariantResult [Line: 2422]: Loop Invariant Derived loop invariant: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) - InvariantResult [Line: 2830]: Loop Invariant Derived loop invariant: ((((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) && !(1 == chuck___0) - InvariantResult [Line: 1943]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2422]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2617]: Loop Invariant Derived loop invariant: ((((((((((((bob == 1 && !(\result == 0)) && handle == 1) && !(0 == \result)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || ((((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && !(0 == \result)) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: (((((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && client == 1) && 1 == sender) && \result == 1) && handle == 1) && client == 1) && \result == queue_empty) && 1 == msg - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1537]: Loop Invariant Derived loop invariant: (((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && bob == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && client == 1) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) || ((((((((client == 1 && 1 == queue_empty) && bob == 1) && ((((1 == msg && 1 == msg) && __ste_email_isSigned0 == 0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) && queue_empty == tmp) && client == 1) && 1 == sender) && handle == 1) && \result == queue_empty) - InvariantResult [Line: 1537]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: ((((((handle == chuck___0 && !(1 == rjh___0)) && __ste_client_privateKey0 == \result) && !(handle == 2)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && 1 == msg) && !(1 == chuck___0) - InvariantResult [Line: 2159]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2159]: Loop Invariant Derived loop invariant: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) - InvariantResult [Line: 2635]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1932]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1918]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2196]: Loop Invariant Derived loop invariant: (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && ((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && handle == 1) && 1 == msg) && handle == 1) && client == 1) && \result == queue_empty) || (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && (((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && !(0 == tmp)) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) || ((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && __ste_client_privateKey0 == \result) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg))) && handle == 1) && client == 1) && \result == queue_empty) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && ((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && handle == 1) && 1 == msg) && handle == 1) && client == 1) && \result == queue_empty) || (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && client == 1) && 1 == sender) && (((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && !(0 == tmp)) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) || ((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && __ste_client_privateKey0 == \result) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg))) && handle == 1) && client == 1) && \result == queue_empty) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 1 == queue_empty && __ste_email_isSigned0 == 0 - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: ((((((((((((((handle == chuck___0 && bob == 1) && !(handle == 2)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && __ste_email_isSigned0 == 0) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg - InvariantResult [Line: 2035]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2196]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1738]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2404]: Loop Invariant Derived loop invariant: (((((((((((((((privkey == __ste_client_privateKey0 && handle == chuck___0) && bob == 1) && !(handle == 2)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && !(1 == chuck___0)) && 1 == msg) && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg - InvariantResult [Line: 2021]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: (1 == queue_empty && __ste_email_isSigned0 == 0) && \result == queue_empty - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2404]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((((privkey == __ste_client_privateKey0 && bob == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) || (((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && 1 == sender) && (((1 == msg && __ste_email_isSigned0 == 0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) && handle == 1) && \result == queue_empty) - InvariantResult [Line: 2010]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2178]: Loop Invariant Derived loop invariant: (((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && bob == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && client == 1) && 1 == sender) && \result == 1) && \result == queue_empty) && 1 == msg) || ((((((((client == 1 && 1 == queue_empty) && bob == 1) && ((((1 == msg && 1 == msg) && __ste_email_isSigned0 == 0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) && queue_empty == tmp) && client == 1) && 1 == sender) && handle == 1) && \result == queue_empty) - InvariantResult [Line: 1910]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1996]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1851]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2812]: Loop Invariant Derived loop invariant: ((((((((((bob == 1 && !(\result == 0)) && (((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && !(0 == tmp)) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) || ((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && __ste_client_privateKey0 == \result) && \result == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg))) && handle == 1) && \result == 1) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) || ((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && handle == 1) && 1 == msg) && client == 1) && \result == queue_empty) - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2178]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1841]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2812]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2700]: Loop Invariant Derived loop invariant: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && handle == 2) && handle == rjh___0) && \result == queue_empty - InvariantResult [Line: 1728]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2626]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2700]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && bob == 1) && !(2 == chuck___0)) && __ste_email_isSigned0 == 0) && !(handle == 2)) && !(handle == 1)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2178]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && 1 == sender) && \result == queue_empty) && 1 == msg) && !(1 == chuck___0) - InvariantResult [Line: 1749]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1909]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && bob == 1) && !(2 == chuck___0)) && __ste_email_isSigned0 == 0) && !(handle == 1)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1442]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1388]: Loop Invariant Derived loop invariant: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1227]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1388]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty - InvariantResult [Line: 1985]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((1 == queue_empty && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && handle == 2) && !(handle == 1)) && handle == rjh___0) && \result == queue_empty - InvariantResult [Line: 2215]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && 1 == sender) && \result == queue_empty) && 1 == msg) && !(1 == chuck___0) - InvariantResult [Line: 1971]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2385]: Loop Invariant Derived loop invariant: (((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && bob == 1) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == msg) && \result == 1) && 1 == tmp) && client == 1) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && client == 1) && 1 == sender) && \result == 1) && handle == 1) && client == 1) && \result == queue_empty) && 1 == msg) || (((((((((client == 1 && 1 == queue_empty) && bob == 1) && queue_empty == tmp) && ((((((1 == msg && 1 == msg) && __ste_email_isSigned0 == 0) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && handle == 1) && \result == 0) && 1 == msg) && client == 1) && 1 == sender) && handle == 1) && client == 1) && \result == queue_empty) - InvariantResult [Line: 2644]: Loop Invariant Derived loop invariant: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) - InvariantResult [Line: 1957]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1705]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && !(1 == rjh___0)) && \result == 1) && 1 == tmp) && bob == 1) && !(2 == chuck___0)) && __ste_email_isSigned0 == 0) && !(handle == 2)) && !(handle == 1)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2385]: Loop Invariant Derived loop invariant: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) - InvariantResult [Line: 2644]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2594]: Loop Invariant Derived loop invariant: (((((((((((bob == 1 && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg) || (((privkey == __ste_client_privateKey0 && !(0 == tmp)) && !(__ste_client_privateKey0 == 0)) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && \result == 1) && 1 == msg))) && client == 1) && \result == queue_empty) || (((((((((((((((1 == msg && 1 == msg) && \result == 1) && __ste_email_isSigned0 == 0 && ((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && !(1 == chuck___0)) && 1 == msg) && bob == 1) && !(\result == 0)) && handle == 1) && \result == 1) && !(tmp == 0)) && 1 == tmp) && client == 1) && client == 1) && 1 == sender) && client == 1) && \result == queue_empty) - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2385]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 2385]: Loop Invariant Derived loop invariant: (((handle == chuck___0 && !(1 == rjh___0)) && !(handle == 2)) && \result == 0) && !(1 == chuck___0) - InvariantResult [Line: 1334]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && 0 == op1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && !(1 == rjh___0)) && 1 == queue_empty) && bob == 1) && __ste_email_isSigned0 == 0) && queue_empty == tmp) && !(handle == 2)) && \result == queue_empty) && !(1 == chuck___0) - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 383 locations, 2 error locations. Result: SAFE, OverallTime: 11.7s, OverallIterations: 14, TraceHistogramMax: 2, AutomataDifference: 2.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 7.3s, HoareTripleCheckerStatistics: 9561 SDtfs, 16618 SDslu, 16106 SDs, 0 SdLazy, 612 SolverSat, 81 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.9s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 115 GetRequests, 28 SyntacticMatches, 0 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 87 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=742occurred in iteration=11, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 14 MinimizatonAttempts, 2225 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 93 LocationsWithAnnotation, 93 PreInvPairs, 256 NumberOfFragments, 4528 HoareAnnotationTreeSize, 93 FomulaSimplifications, 98186 FormulaSimplificationTreeSizeReduction, 1.0s HoareSimplificationTime, 93 FomulaSimplificationsInter, 60927 FormulaSimplificationTreeSizeReductionInter, 6.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 0.8s InterpolantComputationTime, 741 NumberOfCodeBlocks, 741 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 727 ConstructedInterpolants, 0 QuantifiedInterpolants, 72341 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 14 InterpolantComputations, 14 PerfectInterpolantSequences, 14/14 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...