./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/email_spec0_product09.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f470102c Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/email_spec0_product09.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash b2633f6945e310d333da2e2f7802e4cf0f241fa3 ...................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/email_spec0_product09.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash b2633f6945e310d333da2e2f7802e4cf0f241fa3 ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-f470102 [2019-12-07 20:07:56,484 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 20:07:56,485 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 20:07:56,492 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 20:07:56,493 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 20:07:56,493 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 20:07:56,494 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 20:07:56,496 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 20:07:56,497 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 20:07:56,498 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 20:07:56,499 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 20:07:56,499 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 20:07:56,500 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 20:07:56,500 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 20:07:56,501 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 20:07:56,502 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 20:07:56,502 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 20:07:56,503 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 20:07:56,505 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 20:07:56,506 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 20:07:56,507 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 20:07:56,508 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 20:07:56,509 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 20:07:56,510 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 20:07:56,512 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 20:07:56,512 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 20:07:56,512 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 20:07:56,512 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 20:07:56,513 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 20:07:56,513 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 20:07:56,514 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 20:07:56,514 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 20:07:56,515 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 20:07:56,515 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 20:07:56,516 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 20:07:56,516 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 20:07:56,517 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 20:07:56,517 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 20:07:56,517 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 20:07:56,518 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 20:07:56,518 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 20:07:56,519 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf [2019-12-07 20:07:56,532 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 20:07:56,532 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 20:07:56,533 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-12-07 20:07:56,533 INFO L138 SettingsManager]: * User list type=DISABLED [2019-12-07 20:07:56,533 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-12-07 20:07:56,533 INFO L138 SettingsManager]: * Explicit value domain=true [2019-12-07 20:07:56,534 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2019-12-07 20:07:56,534 INFO L138 SettingsManager]: * Octagon Domain=false [2019-12-07 20:07:56,534 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-12-07 20:07:56,534 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2019-12-07 20:07:56,534 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2019-12-07 20:07:56,534 INFO L138 SettingsManager]: * Interval Domain=false [2019-12-07 20:07:56,535 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2019-12-07 20:07:56,535 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2019-12-07 20:07:56,535 INFO L138 SettingsManager]: * Simplification Technique=SIMPLIFY_QUICK [2019-12-07 20:07:56,536 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 20:07:56,536 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 20:07:56,536 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-12-07 20:07:56,536 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 20:07:56,536 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 20:07:56,537 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-12-07 20:07:56,537 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-12-07 20:07:56,537 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-12-07 20:07:56,537 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2019-12-07 20:07:56,537 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 20:07:56,537 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 20:07:56,538 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 20:07:56,538 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-12-07 20:07:56,538 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 20:07:56,538 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-12-07 20:07:56,538 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-12-07 20:07:56,538 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 20:07:56,539 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 20:07:56,539 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-12-07 20:07:56,539 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-12-07 20:07:56,539 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2019-12-07 20:07:56,539 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-12-07 20:07:56,539 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-12-07 20:07:56,540 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 20:07:56,540 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-12-07 20:07:56,540 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> b2633f6945e310d333da2e2f7802e4cf0f241fa3 [2019-12-07 20:07:56,645 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 20:07:56,655 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 20:07:56,657 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 20:07:56,659 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 20:07:56,659 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 20:07:56,660 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/../../sv-benchmarks/c/product-lines/email_spec0_product09.cil.c [2019-12-07 20:07:56,703 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/data/0b2aca17b/900a60e45c8a49a69d7b4652b9bc2f0a/FLAGec801b516 [2019-12-07 20:07:57,180 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 20:07:57,181 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/sv-benchmarks/c/product-lines/email_spec0_product09.cil.c [2019-12-07 20:07:57,194 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/data/0b2aca17b/900a60e45c8a49a69d7b4652b9bc2f0a/FLAGec801b516 [2019-12-07 20:07:57,203 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/data/0b2aca17b/900a60e45c8a49a69d7b4652b9bc2f0a [2019-12-07 20:07:57,205 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 20:07:57,206 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 20:07:57,207 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 20:07:57,207 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 20:07:57,209 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 20:07:57,210 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 08:07:57" (1/1) ... [2019-12-07 20:07:57,212 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5b211215 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:07:57, skipping insertion in model container [2019-12-07 20:07:57,212 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 08:07:57" (1/1) ... [2019-12-07 20:07:57,217 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 20:07:57,256 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 20:07:57,564 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 20:07:57,573 ERROR L326 MainTranslator]: Unsupported Syntax: Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) [2019-12-07 20:07:57,574 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@7b6a22ce and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:07:57, skipping insertion in model container [2019-12-07 20:07:57,574 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 20:07:57,574 INFO L184 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.procedureinliner [2019-12-07 20:07:57,576 INFO L168 Benchmark]: Toolchain (without parser) took 368.93 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 99.1 MB). Free memory was 937.1 MB in the beginning and 1.1 GB in the end (delta: -140.0 MB). Peak memory consumption was 29.9 MB. Max. memory is 11.5 GB. [2019-12-07 20:07:57,576 INFO L168 Benchmark]: CDTParser took 0.19 ms. Allocated memory is still 1.0 GB. Free memory is still 958.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 20:07:57,577 INFO L168 Benchmark]: CACSL2BoogieTranslator took 367.15 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 99.1 MB). Free memory was 937.1 MB in the beginning and 1.1 GB in the end (delta: -140.0 MB). Peak memory consumption was 29.9 MB. Max. memory is 11.5 GB. [2019-12-07 20:07:57,578 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19 ms. Allocated memory is still 1.0 GB. Free memory is still 958.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 367.15 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 99.1 MB). Free memory was 937.1 MB in the beginning and 1.1 GB in the end (delta: -140.0 MB). Peak memory consumption was 29.9 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - UnsupportedSyntaxResult [Line: 879]: Unsupported Syntax Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.25-f470102 [2019-12-07 20:07:58,679 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 20:07:58,680 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 20:07:58,688 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 20:07:58,689 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 20:07:58,689 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 20:07:58,691 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 20:07:58,692 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 20:07:58,694 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 20:07:58,694 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 20:07:58,695 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 20:07:58,696 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 20:07:58,696 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 20:07:58,697 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 20:07:58,697 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 20:07:58,698 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 20:07:58,699 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 20:07:58,700 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 20:07:58,701 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 20:07:58,703 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 20:07:58,704 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 20:07:58,705 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 20:07:58,706 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 20:07:58,707 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 20:07:58,710 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 20:07:58,710 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 20:07:58,710 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 20:07:58,711 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 20:07:58,711 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 20:07:58,712 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 20:07:58,712 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 20:07:58,713 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 20:07:58,713 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 20:07:58,713 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 20:07:58,714 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 20:07:58,714 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 20:07:58,715 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 20:07:58,715 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 20:07:58,715 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 20:07:58,716 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 20:07:58,716 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 20:07:58,717 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf [2019-12-07 20:07:58,729 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 20:07:58,730 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 20:07:58,730 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-12-07 20:07:58,730 INFO L138 SettingsManager]: * User list type=DISABLED [2019-12-07 20:07:58,731 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-12-07 20:07:58,731 INFO L138 SettingsManager]: * Explicit value domain=true [2019-12-07 20:07:58,731 INFO L138 SettingsManager]: * Octagon Domain=false [2019-12-07 20:07:58,731 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-12-07 20:07:58,731 INFO L138 SettingsManager]: * Interval Domain=false [2019-12-07 20:07:58,732 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 20:07:58,732 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 20:07:58,732 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 20:07:58,733 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 20:07:58,733 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-12-07 20:07:58,733 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-12-07 20:07:58,733 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-12-07 20:07:58,734 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2019-12-07 20:07:58,734 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2019-12-07 20:07:58,734 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2019-12-07 20:07:58,734 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 20:07:58,734 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 20:07:58,734 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 20:07:58,735 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-12-07 20:07:58,735 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 20:07:58,735 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-12-07 20:07:58,735 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-12-07 20:07:58,735 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-12-07 20:07:58,736 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 20:07:58,736 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 20:07:58,736 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-12-07 20:07:58,736 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-12-07 20:07:58,736 INFO L138 SettingsManager]: * Trace refinement strategy=WALRUS [2019-12-07 20:07:58,737 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --rewrite-divk --print-success --lang smt [2019-12-07 20:07:58,737 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-12-07 20:07:58,737 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 20:07:58,737 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-12-07 20:07:58,737 INFO L138 SettingsManager]: * Logic for external solver=AUFBV Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> b2633f6945e310d333da2e2f7802e4cf0f241fa3 [2019-12-07 20:07:58,911 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 20:07:58,920 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 20:07:58,922 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 20:07:58,923 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 20:07:58,923 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 20:07:58,924 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/../../sv-benchmarks/c/product-lines/email_spec0_product09.cil.c [2019-12-07 20:07:58,963 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/data/e96828671/abc6d33b56cc43f68cfa4455a3d7cf4e/FLAGe670d51f7 [2019-12-07 20:07:59,374 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 20:07:59,375 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/sv-benchmarks/c/product-lines/email_spec0_product09.cil.c [2019-12-07 20:07:59,391 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/data/e96828671/abc6d33b56cc43f68cfa4455a3d7cf4e/FLAGe670d51f7 [2019-12-07 20:07:59,740 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/data/e96828671/abc6d33b56cc43f68cfa4455a3d7cf4e [2019-12-07 20:07:59,744 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 20:07:59,746 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 20:07:59,747 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 20:07:59,747 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 20:07:59,751 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 20:07:59,752 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 08:07:59" (1/1) ... [2019-12-07 20:07:59,755 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1e232920 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:07:59, skipping insertion in model container [2019-12-07 20:07:59,756 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 08:07:59" (1/1) ... [2019-12-07 20:07:59,763 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 20:07:59,812 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 20:08:00,137 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 20:08:00,148 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2019-12-07 20:08:00,156 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 20:08:00,222 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 20:08:00,227 INFO L203 MainTranslator]: Completed pre-run [2019-12-07 20:08:00,282 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 20:08:00,330 INFO L208 MainTranslator]: Completed translation [2019-12-07 20:08:00,331 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:08:00 WrapperNode [2019-12-07 20:08:00,331 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 20:08:00,331 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-12-07 20:08:00,331 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-12-07 20:08:00,332 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-12-07 20:08:00,339 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:08:00" (1/1) ... [2019-12-07 20:08:00,368 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:08:00" (1/1) ... [2019-12-07 20:08:00,420 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-12-07 20:08:00,421 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-12-07 20:08:00,421 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-12-07 20:08:00,421 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-12-07 20:08:00,427 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:08:00" (1/1) ... [2019-12-07 20:08:00,427 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:08:00" (1/1) ... [2019-12-07 20:08:00,433 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:08:00" (1/1) ... [2019-12-07 20:08:00,433 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:08:00" (1/1) ... [2019-12-07 20:08:00,453 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:08:00" (1/1) ... [2019-12-07 20:08:00,467 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:08:00" (1/1) ... [2019-12-07 20:08:00,472 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:08:00" (1/1) ... [2019-12-07 20:08:00,481 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-12-07 20:08:00,481 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-12-07 20:08:00,481 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-12-07 20:08:00,481 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-12-07 20:08:00,482 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:08:00" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 20:08:00,524 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2019-12-07 20:08:00,524 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-12-07 20:08:00,524 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2019-12-07 20:08:00,524 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-12-07 20:08:00,525 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-12-07 20:08:01,739 INFO L282 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-12-07 20:08:01,739 INFO L287 CfgBuilder]: Removed 329 assume(true) statements. [2019-12-07 20:08:01,740 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 08:08:01 BoogieIcfgContainer [2019-12-07 20:08:01,741 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-12-07 20:08:01,742 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-12-07 20:08:01,742 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-12-07 20:08:01,744 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-12-07 20:08:01,745 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 07.12 08:07:59" (1/3) ... [2019-12-07 20:08:01,745 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@680ced12 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 08:08:01, skipping insertion in model container [2019-12-07 20:08:01,745 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:08:00" (2/3) ... [2019-12-07 20:08:01,746 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@680ced12 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 08:08:01, skipping insertion in model container [2019-12-07 20:08:01,746 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 08:08:01" (3/3) ... [2019-12-07 20:08:01,748 INFO L109 eAbstractionObserver]: Analyzing ICFG email_spec0_product09.cil.c [2019-12-07 20:08:01,756 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-12-07 20:08:01,761 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 6 error locations. [2019-12-07 20:08:01,768 INFO L249 AbstractCegarLoop]: Starting to check reachability of 6 error locations. [2019-12-07 20:08:01,787 INFO L373 AbstractCegarLoop]: Interprodecural is true [2019-12-07 20:08:01,787 INFO L374 AbstractCegarLoop]: Hoare is true [2019-12-07 20:08:01,787 INFO L375 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-12-07 20:08:01,787 INFO L376 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-12-07 20:08:01,787 INFO L377 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-12-07 20:08:01,787 INFO L378 AbstractCegarLoop]: Difference is false [2019-12-07 20:08:01,788 INFO L379 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-12-07 20:08:01,788 INFO L383 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-12-07 20:08:01,804 INFO L276 IsEmpty]: Start isEmpty. Operand 401 states. [2019-12-07 20:08:01,811 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2019-12-07 20:08:01,811 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:08:01,812 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:08:01,812 INFO L410 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:08:01,816 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:08:01,816 INFO L82 PathProgramCache]: Analyzing trace with hash -1578380881, now seen corresponding path program 1 times [2019-12-07 20:08:01,825 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:08:01,825 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [909848613] [2019-12-07 20:08:01,825 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/mathsat Starting monitored process 2 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with mathsat -unsat_core_generation=3 [2019-12-07 20:08:02,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:02,081 INFO L264 TraceCheckSpWp]: Trace formula consists of 387 conjuncts, 1 conjunts are in the unsatisfiable core [2019-12-07 20:08:02,089 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:02,105 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:02,105 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:02,112 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:02,113 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [909848613] [2019-12-07 20:08:02,113 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:08:02,113 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 2 [2019-12-07 20:08:02,114 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [826879392] [2019-12-07 20:08:02,117 INFO L442 AbstractCegarLoop]: Interpolant automaton has 2 states [2019-12-07 20:08:02,117 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:08:02,126 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2019-12-07 20:08:02,126 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-12-07 20:08:02,128 INFO L87 Difference]: Start difference. First operand 401 states. Second operand 2 states. [2019-12-07 20:08:02,172 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:08:02,173 INFO L93 Difference]: Finished difference Result 712 states and 1173 transitions. [2019-12-07 20:08:02,173 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2019-12-07 20:08:02,174 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 37 [2019-12-07 20:08:02,174 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:08:02,187 INFO L225 Difference]: With dead ends: 712 [2019-12-07 20:08:02,187 INFO L226 Difference]: Without dead ends: 373 [2019-12-07 20:08:02,192 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 72 GetRequests, 72 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-12-07 20:08:02,207 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 373 states. [2019-12-07 20:08:02,236 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 373 to 373. [2019-12-07 20:08:02,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 373 states. [2019-12-07 20:08:02,239 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 373 states to 373 states and 617 transitions. [2019-12-07 20:08:02,240 INFO L78 Accepts]: Start accepts. Automaton has 373 states and 617 transitions. Word has length 37 [2019-12-07 20:08:02,240 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:08:02,241 INFO L462 AbstractCegarLoop]: Abstraction has 373 states and 617 transitions. [2019-12-07 20:08:02,241 INFO L463 AbstractCegarLoop]: Interpolant automaton has 2 states. [2019-12-07 20:08:02,241 INFO L276 IsEmpty]: Start isEmpty. Operand 373 states and 617 transitions. [2019-12-07 20:08:02,242 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2019-12-07 20:08:02,242 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:08:02,242 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:08:02,443 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 mathsat -unsat_core_generation=3 [2019-12-07 20:08:02,443 INFO L410 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:08:02,443 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:08:02,444 INFO L82 PathProgramCache]: Analyzing trace with hash 1323227277, now seen corresponding path program 1 times [2019-12-07 20:08:02,444 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:08:02,444 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [551970058] [2019-12-07 20:08:02,444 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/mathsat Starting monitored process 3 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with mathsat -unsat_core_generation=3 [2019-12-07 20:08:02,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:02,622 INFO L264 TraceCheckSpWp]: Trace formula consists of 388 conjuncts, 6 conjunts are in the unsatisfiable core [2019-12-07 20:08:02,625 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:02,640 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:02,640 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:02,650 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:02,650 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [551970058] [2019-12-07 20:08:02,651 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:08:02,651 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 20:08:02,651 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [977874719] [2019-12-07 20:08:02,652 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 20:08:02,652 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:08:02,652 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 20:08:02,652 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 20:08:02,653 INFO L87 Difference]: Start difference. First operand 373 states and 617 transitions. Second operand 4 states. [2019-12-07 20:08:02,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:08:02,708 INFO L93 Difference]: Finished difference Result 1093 states and 1810 transitions. [2019-12-07 20:08:02,708 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 20:08:02,708 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 38 [2019-12-07 20:08:02,708 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:08:02,713 INFO L225 Difference]: With dead ends: 1093 [2019-12-07 20:08:02,713 INFO L226 Difference]: Without dead ends: 731 [2019-12-07 20:08:02,715 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 72 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 20:08:02,718 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 731 states. [2019-12-07 20:08:02,745 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 731 to 372. [2019-12-07 20:08:02,745 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 372 states. [2019-12-07 20:08:02,747 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 372 states to 372 states and 612 transitions. [2019-12-07 20:08:02,747 INFO L78 Accepts]: Start accepts. Automaton has 372 states and 612 transitions. Word has length 38 [2019-12-07 20:08:02,748 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:08:02,748 INFO L462 AbstractCegarLoop]: Abstraction has 372 states and 612 transitions. [2019-12-07 20:08:02,748 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 20:08:02,748 INFO L276 IsEmpty]: Start isEmpty. Operand 372 states and 612 transitions. [2019-12-07 20:08:02,750 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2019-12-07 20:08:02,750 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:08:02,750 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:08:02,951 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 mathsat -unsat_core_generation=3 [2019-12-07 20:08:02,951 INFO L410 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:08:02,952 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:08:02,952 INFO L82 PathProgramCache]: Analyzing trace with hash -641723942, now seen corresponding path program 1 times [2019-12-07 20:08:02,953 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:08:02,954 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2124081323] [2019-12-07 20:08:02,954 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/mathsat Starting monitored process 4 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with mathsat -unsat_core_generation=3 [2019-12-07 20:08:03,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:03,142 INFO L264 TraceCheckSpWp]: Trace formula consists of 390 conjuncts, 6 conjunts are in the unsatisfiable core [2019-12-07 20:08:03,144 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:03,151 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:03,151 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:03,160 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:03,160 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2124081323] [2019-12-07 20:08:03,160 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:08:03,160 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 20:08:03,160 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [845415930] [2019-12-07 20:08:03,161 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 20:08:03,161 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:08:03,161 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 20:08:03,161 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 20:08:03,161 INFO L87 Difference]: Start difference. First operand 372 states and 612 transitions. Second operand 4 states. [2019-12-07 20:08:03,193 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:08:03,193 INFO L93 Difference]: Finished difference Result 737 states and 1214 transitions. [2019-12-07 20:08:03,193 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 20:08:03,193 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 40 [2019-12-07 20:08:03,193 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:08:03,195 INFO L225 Difference]: With dead ends: 737 [2019-12-07 20:08:03,195 INFO L226 Difference]: Without dead ends: 373 [2019-12-07 20:08:03,196 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 76 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 20:08:03,197 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 373 states. [2019-12-07 20:08:03,208 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 373 to 372. [2019-12-07 20:08:03,208 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 372 states. [2019-12-07 20:08:03,209 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 372 states to 372 states and 609 transitions. [2019-12-07 20:08:03,209 INFO L78 Accepts]: Start accepts. Automaton has 372 states and 609 transitions. Word has length 40 [2019-12-07 20:08:03,209 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:08:03,209 INFO L462 AbstractCegarLoop]: Abstraction has 372 states and 609 transitions. [2019-12-07 20:08:03,209 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 20:08:03,210 INFO L276 IsEmpty]: Start isEmpty. Operand 372 states and 609 transitions. [2019-12-07 20:08:03,211 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2019-12-07 20:08:03,211 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:08:03,211 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:08:03,411 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 mathsat -unsat_core_generation=3 [2019-12-07 20:08:03,412 INFO L410 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:08:03,413 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:08:03,413 INFO L82 PathProgramCache]: Analyzing trace with hash -446841473, now seen corresponding path program 1 times [2019-12-07 20:08:03,414 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:08:03,414 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [45630212] [2019-12-07 20:08:03,415 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/mathsat Starting monitored process 5 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with mathsat -unsat_core_generation=3 [2019-12-07 20:08:03,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:03,623 INFO L264 TraceCheckSpWp]: Trace formula consists of 391 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 20:08:03,625 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:03,631 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:03,631 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:03,641 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:03,641 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [45630212] [2019-12-07 20:08:03,641 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:08:03,641 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 20:08:03,642 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1020012126] [2019-12-07 20:08:03,642 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 20:08:03,642 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:08:03,642 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 20:08:03,643 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 20:08:03,643 INFO L87 Difference]: Start difference. First operand 372 states and 609 transitions. Second operand 4 states. [2019-12-07 20:08:03,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:08:03,699 INFO L93 Difference]: Finished difference Result 1012 states and 1655 transitions. [2019-12-07 20:08:03,700 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 20:08:03,700 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 41 [2019-12-07 20:08:03,700 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:08:03,704 INFO L225 Difference]: With dead ends: 1012 [2019-12-07 20:08:03,705 INFO L226 Difference]: Without dead ends: 729 [2019-12-07 20:08:03,706 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 80 GetRequests, 78 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 20:08:03,707 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 729 states. [2019-12-07 20:08:03,726 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 729 to 446. [2019-12-07 20:08:03,727 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 446 states. [2019-12-07 20:08:03,729 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 446 states to 446 states and 747 transitions. [2019-12-07 20:08:03,729 INFO L78 Accepts]: Start accepts. Automaton has 446 states and 747 transitions. Word has length 41 [2019-12-07 20:08:03,729 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:08:03,729 INFO L462 AbstractCegarLoop]: Abstraction has 446 states and 747 transitions. [2019-12-07 20:08:03,729 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 20:08:03,729 INFO L276 IsEmpty]: Start isEmpty. Operand 446 states and 747 transitions. [2019-12-07 20:08:03,731 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2019-12-07 20:08:03,731 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:08:03,731 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:08:03,932 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 mathsat -unsat_core_generation=3 [2019-12-07 20:08:03,932 INFO L410 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:08:03,932 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:08:03,933 INFO L82 PathProgramCache]: Analyzing trace with hash 414043167, now seen corresponding path program 1 times [2019-12-07 20:08:03,933 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:08:03,934 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [151929251] [2019-12-07 20:08:03,934 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/mathsat Starting monitored process 6 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with mathsat -unsat_core_generation=3 [2019-12-07 20:08:04,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:04,122 INFO L264 TraceCheckSpWp]: Trace formula consists of 405 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 20:08:04,124 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:04,130 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:04,131 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:04,139 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:04,139 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [151929251] [2019-12-07 20:08:04,139 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:08:04,139 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 20:08:04,140 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [737126957] [2019-12-07 20:08:04,140 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 20:08:04,140 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:08:04,140 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 20:08:04,141 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 20:08:04,141 INFO L87 Difference]: Start difference. First operand 446 states and 747 transitions. Second operand 4 states. [2019-12-07 20:08:04,190 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:08:04,190 INFO L93 Difference]: Finished difference Result 1580 states and 2646 transitions. [2019-12-07 20:08:04,190 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 20:08:04,190 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 51 [2019-12-07 20:08:04,190 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:08:04,196 INFO L225 Difference]: With dead ends: 1580 [2019-12-07 20:08:04,196 INFO L226 Difference]: Without dead ends: 1225 [2019-12-07 20:08:04,197 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 100 GetRequests, 98 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 20:08:04,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1225 states. [2019-12-07 20:08:04,226 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1225 to 586. [2019-12-07 20:08:04,226 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 586 states. [2019-12-07 20:08:04,228 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 586 states to 586 states and 1012 transitions. [2019-12-07 20:08:04,228 INFO L78 Accepts]: Start accepts. Automaton has 586 states and 1012 transitions. Word has length 51 [2019-12-07 20:08:04,228 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:08:04,229 INFO L462 AbstractCegarLoop]: Abstraction has 586 states and 1012 transitions. [2019-12-07 20:08:04,229 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 20:08:04,229 INFO L276 IsEmpty]: Start isEmpty. Operand 586 states and 1012 transitions. [2019-12-07 20:08:04,230 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2019-12-07 20:08:04,230 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:08:04,230 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:08:04,430 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 mathsat -unsat_core_generation=3 [2019-12-07 20:08:04,431 INFO L410 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:08:04,431 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:08:04,431 INFO L82 PathProgramCache]: Analyzing trace with hash -197325022, now seen corresponding path program 1 times [2019-12-07 20:08:04,432 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:08:04,432 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [195545828] [2019-12-07 20:08:04,432 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/mathsat Starting monitored process 7 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with mathsat -unsat_core_generation=3 [2019-12-07 20:08:04,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:04,606 INFO L264 TraceCheckSpWp]: Trace formula consists of 406 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 20:08:04,607 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:04,626 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:04,626 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:04,678 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:04,678 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [195545828] [2019-12-07 20:08:04,678 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [262071131] [2019-12-07 20:08:04,678 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/cvc4 Starting monitored process 8 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:08:04,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:04,871 INFO L264 TraceCheckSpWp]: Trace formula consists of 406 conjuncts, 20 conjunts are in the unsatisfiable core [2019-12-07 20:08:04,873 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:04,968 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:08:04,968 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:05,097 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:08:05,097 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 2 imperfect interpolant sequences. [2019-12-07 20:08:05,098 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9, 9] imperfect sequences [5, 5] total 22 [2019-12-07 20:08:05,098 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1189132934] [2019-12-07 20:08:05,098 INFO L442 AbstractCegarLoop]: Interpolant automaton has 16 states [2019-12-07 20:08:05,098 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:08:05,098 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2019-12-07 20:08:05,099 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=56, Invalid=406, Unknown=0, NotChecked=0, Total=462 [2019-12-07 20:08:05,099 INFO L87 Difference]: Start difference. First operand 586 states and 1012 transitions. Second operand 16 states. [2019-12-07 20:08:11,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:08:11,636 INFO L93 Difference]: Finished difference Result 7696 states and 12348 transitions. [2019-12-07 20:08:11,637 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 87 states. [2019-12-07 20:08:11,637 INFO L78 Accepts]: Start accepts. Automaton has 16 states. Word has length 52 [2019-12-07 20:08:11,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:08:11,665 INFO L225 Difference]: With dead ends: 7696 [2019-12-07 20:08:11,665 INFO L226 Difference]: Without dead ends: 7472 [2019-12-07 20:08:11,669 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 290 GetRequests, 185 SyntacticMatches, 0 SemanticMatches, 105 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3378 ImplicationChecksByTransitivity, 3.7s TimeCoverageRelationStatistics Valid=2447, Invalid=8895, Unknown=0, NotChecked=0, Total=11342 [2019-12-07 20:08:11,675 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7472 states. [2019-12-07 20:08:11,751 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7472 to 1083. [2019-12-07 20:08:11,751 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1083 states. [2019-12-07 20:08:11,753 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1083 states to 1083 states and 1796 transitions. [2019-12-07 20:08:11,753 INFO L78 Accepts]: Start accepts. Automaton has 1083 states and 1796 transitions. Word has length 52 [2019-12-07 20:08:11,753 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:08:11,753 INFO L462 AbstractCegarLoop]: Abstraction has 1083 states and 1796 transitions. [2019-12-07 20:08:11,753 INFO L463 AbstractCegarLoop]: Interpolant automaton has 16 states. [2019-12-07 20:08:11,754 INFO L276 IsEmpty]: Start isEmpty. Operand 1083 states and 1796 transitions. [2019-12-07 20:08:11,754 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2019-12-07 20:08:11,754 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:08:11,755 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:08:12,155 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 mathsat -unsat_core_generation=3,8 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:08:12,156 INFO L410 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:08:12,156 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:08:12,157 INFO L82 PathProgramCache]: Analyzing trace with hash 1889796334, now seen corresponding path program 1 times [2019-12-07 20:08:12,157 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:08:12,158 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2138381714] [2019-12-07 20:08:12,158 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/mathsat Starting monitored process 9 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with mathsat -unsat_core_generation=3 [2019-12-07 20:08:12,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:12,367 INFO L264 TraceCheckSpWp]: Trace formula consists of 407 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 20:08:12,369 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:12,380 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:12,380 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:12,410 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:12,410 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2138381714] [2019-12-07 20:08:12,410 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1939422803] [2019-12-07 20:08:12,410 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/cvc4 Starting monitored process 10 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:08:12,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:12,575 INFO L264 TraceCheckSpWp]: Trace formula consists of 407 conjuncts, 6 conjunts are in the unsatisfiable core [2019-12-07 20:08:12,576 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:12,606 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:08:12,606 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:12,610 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:08:12,611 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 2 imperfect interpolant sequences. [2019-12-07 20:08:12,611 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [5, 5] total 11 [2019-12-07 20:08:12,611 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1577274318] [2019-12-07 20:08:12,611 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-12-07 20:08:12,611 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:08:12,611 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 20:08:12,612 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2019-12-07 20:08:12,612 INFO L87 Difference]: Start difference. First operand 1083 states and 1796 transitions. Second operand 5 states. [2019-12-07 20:08:12,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:08:12,925 INFO L93 Difference]: Finished difference Result 3984 states and 6558 transitions. [2019-12-07 20:08:12,925 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 20:08:12,925 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 53 [2019-12-07 20:08:12,926 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:08:12,938 INFO L225 Difference]: With dead ends: 3984 [2019-12-07 20:08:12,938 INFO L226 Difference]: Without dead ends: 3346 [2019-12-07 20:08:12,940 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 212 GetRequests, 199 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2019-12-07 20:08:12,942 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3346 states. [2019-12-07 20:08:13,073 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3346 to 2020. [2019-12-07 20:08:13,073 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2020 states. [2019-12-07 20:08:13,076 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2020 states to 2020 states and 3312 transitions. [2019-12-07 20:08:13,076 INFO L78 Accepts]: Start accepts. Automaton has 2020 states and 3312 transitions. Word has length 53 [2019-12-07 20:08:13,076 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:08:13,077 INFO L462 AbstractCegarLoop]: Abstraction has 2020 states and 3312 transitions. [2019-12-07 20:08:13,077 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-12-07 20:08:13,077 INFO L276 IsEmpty]: Start isEmpty. Operand 2020 states and 3312 transitions. [2019-12-07 20:08:13,078 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2019-12-07 20:08:13,078 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:08:13,078 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:08:13,478 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 mathsat -unsat_core_generation=3,10 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:08:13,479 INFO L410 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:08:13,480 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:08:13,480 INFO L82 PathProgramCache]: Analyzing trace with hash 1658593771, now seen corresponding path program 1 times [2019-12-07 20:08:13,481 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:08:13,481 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [642215083] [2019-12-07 20:08:13,481 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/mathsat Starting monitored process 11 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with mathsat -unsat_core_generation=3 [2019-12-07 20:08:13,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:13,716 INFO L264 TraceCheckSpWp]: Trace formula consists of 407 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 20:08:13,717 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:13,729 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:13,729 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:13,760 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:13,760 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [642215083] [2019-12-07 20:08:13,760 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1034578090] [2019-12-07 20:08:13,760 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/cvc4 Starting monitored process 12 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:08:13,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:13,933 INFO L264 TraceCheckSpWp]: Trace formula consists of 407 conjuncts, 14 conjunts are in the unsatisfiable core [2019-12-07 20:08:13,934 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:13,984 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:08:13,985 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:14,013 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:08:14,013 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 2 imperfect interpolant sequences. [2019-12-07 20:08:14,013 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7, 7] imperfect sequences [5, 5] total 13 [2019-12-07 20:08:14,013 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1325109907] [2019-12-07 20:08:14,013 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2019-12-07 20:08:14,013 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:08:14,014 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 20:08:14,014 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=125, Unknown=0, NotChecked=0, Total=156 [2019-12-07 20:08:14,014 INFO L87 Difference]: Start difference. First operand 2020 states and 3312 transitions. Second operand 7 states. [2019-12-07 20:08:14,396 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:08:14,397 INFO L93 Difference]: Finished difference Result 4050 states and 6549 transitions. [2019-12-07 20:08:14,397 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2019-12-07 20:08:14,397 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 53 [2019-12-07 20:08:14,397 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:08:14,406 INFO L225 Difference]: With dead ends: 4050 [2019-12-07 20:08:14,407 INFO L226 Difference]: Without dead ends: 2570 [2019-12-07 20:08:14,409 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 216 GetRequests, 194 SyntacticMatches, 3 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 44 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=94, Invalid=326, Unknown=0, NotChecked=0, Total=420 [2019-12-07 20:08:14,411 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2570 states. [2019-12-07 20:08:14,521 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2570 to 1859. [2019-12-07 20:08:14,521 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1859 states. [2019-12-07 20:08:14,524 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1859 states to 1859 states and 3057 transitions. [2019-12-07 20:08:14,524 INFO L78 Accepts]: Start accepts. Automaton has 1859 states and 3057 transitions. Word has length 53 [2019-12-07 20:08:14,524 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:08:14,524 INFO L462 AbstractCegarLoop]: Abstraction has 1859 states and 3057 transitions. [2019-12-07 20:08:14,524 INFO L463 AbstractCegarLoop]: Interpolant automaton has 7 states. [2019-12-07 20:08:14,524 INFO L276 IsEmpty]: Start isEmpty. Operand 1859 states and 3057 transitions. [2019-12-07 20:08:14,525 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2019-12-07 20:08:14,525 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:08:14,525 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:08:14,926 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 cvc4 --incremental --print-success --lang smt --rewrite-divk,11 mathsat -unsat_core_generation=3 [2019-12-07 20:08:14,926 INFO L410 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:08:14,926 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:08:14,926 INFO L82 PathProgramCache]: Analyzing trace with hash -1850114022, now seen corresponding path program 1 times [2019-12-07 20:08:14,927 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:08:14,927 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [389012253] [2019-12-07 20:08:14,927 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/mathsat Starting monitored process 13 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with mathsat -unsat_core_generation=3 [2019-12-07 20:08:15,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:15,097 INFO L264 TraceCheckSpWp]: Trace formula consists of 408 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 20:08:15,098 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:15,110 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:15,110 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:15,148 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:15,148 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [389012253] [2019-12-07 20:08:15,148 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [740135829] [2019-12-07 20:08:15,148 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/cvc4 Starting monitored process 14 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:08:15,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:15,313 INFO L264 TraceCheckSpWp]: Trace formula consists of 408 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 20:08:15,314 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:15,334 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:08:15,335 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:15,345 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:08:15,345 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 2 imperfect interpolant sequences. [2019-12-07 20:08:15,345 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [5, 5] total 10 [2019-12-07 20:08:15,345 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [451053102] [2019-12-07 20:08:15,345 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 20:08:15,346 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:08:15,346 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 20:08:15,346 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2019-12-07 20:08:15,346 INFO L87 Difference]: Start difference. First operand 1859 states and 3057 transitions. Second operand 4 states. [2019-12-07 20:08:15,521 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:08:15,521 INFO L93 Difference]: Finished difference Result 2752 states and 4438 transitions. [2019-12-07 20:08:15,522 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 20:08:15,522 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 55 [2019-12-07 20:08:15,522 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:08:15,528 INFO L225 Difference]: With dead ends: 2752 [2019-12-07 20:08:15,528 INFO L226 Difference]: Without dead ends: 1794 [2019-12-07 20:08:15,529 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 217 GetRequests, 207 SyntacticMatches, 1 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2019-12-07 20:08:15,530 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1794 states. [2019-12-07 20:08:15,604 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1794 to 1350. [2019-12-07 20:08:15,604 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1350 states. [2019-12-07 20:08:15,606 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1350 states to 1350 states and 2239 transitions. [2019-12-07 20:08:15,606 INFO L78 Accepts]: Start accepts. Automaton has 1350 states and 2239 transitions. Word has length 55 [2019-12-07 20:08:15,606 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:08:15,606 INFO L462 AbstractCegarLoop]: Abstraction has 1350 states and 2239 transitions. [2019-12-07 20:08:15,606 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 20:08:15,606 INFO L276 IsEmpty]: Start isEmpty. Operand 1350 states and 2239 transitions. [2019-12-07 20:08:15,607 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2019-12-07 20:08:15,607 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:08:15,607 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:08:16,008 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 mathsat -unsat_core_generation=3,14 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:08:16,009 INFO L410 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:08:16,009 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:08:16,010 INFO L82 PathProgramCache]: Analyzing trace with hash 1260838067, now seen corresponding path program 1 times [2019-12-07 20:08:16,010 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:08:16,011 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1046619332] [2019-12-07 20:08:16,011 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/mathsat Starting monitored process 15 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with mathsat -unsat_core_generation=3 [2019-12-07 20:08:16,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:16,217 INFO L264 TraceCheckSpWp]: Trace formula consists of 433 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 20:08:16,218 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:16,229 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:16,229 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:16,261 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:16,261 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1046619332] [2019-12-07 20:08:16,261 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [859211275] [2019-12-07 20:08:16,261 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/cvc4 Starting monitored process 16 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:08:16,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:16,428 INFO L264 TraceCheckSpWp]: Trace formula consists of 433 conjuncts, 6 conjunts are in the unsatisfiable core [2019-12-07 20:08:16,429 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:16,458 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:08:16,458 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:16,464 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:08:16,464 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 2 imperfect interpolant sequences. [2019-12-07 20:08:16,464 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [5, 5] total 11 [2019-12-07 20:08:16,464 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1077142847] [2019-12-07 20:08:16,465 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-12-07 20:08:16,465 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:08:16,465 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 20:08:16,465 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2019-12-07 20:08:16,465 INFO L87 Difference]: Start difference. First operand 1350 states and 2239 transitions. Second operand 5 states. [2019-12-07 20:08:16,742 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:08:16,742 INFO L93 Difference]: Finished difference Result 3762 states and 6073 transitions. [2019-12-07 20:08:16,742 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 20:08:16,743 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 60 [2019-12-07 20:08:16,743 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:08:16,753 INFO L225 Difference]: With dead ends: 3762 [2019-12-07 20:08:16,753 INFO L226 Difference]: Without dead ends: 2950 [2019-12-07 20:08:16,755 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 240 GetRequests, 227 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2019-12-07 20:08:16,757 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2950 states. [2019-12-07 20:08:16,901 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2950 to 2178. [2019-12-07 20:08:16,901 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2178 states. [2019-12-07 20:08:16,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2178 states to 2178 states and 3634 transitions. [2019-12-07 20:08:16,904 INFO L78 Accepts]: Start accepts. Automaton has 2178 states and 3634 transitions. Word has length 60 [2019-12-07 20:08:16,904 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:08:16,904 INFO L462 AbstractCegarLoop]: Abstraction has 2178 states and 3634 transitions. [2019-12-07 20:08:16,904 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-12-07 20:08:16,904 INFO L276 IsEmpty]: Start isEmpty. Operand 2178 states and 3634 transitions. [2019-12-07 20:08:16,906 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2019-12-07 20:08:16,906 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:08:16,906 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:08:17,307 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 mathsat -unsat_core_generation=3,16 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:08:17,307 INFO L410 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:08:17,308 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:08:17,308 INFO L82 PathProgramCache]: Analyzing trace with hash 1957508040, now seen corresponding path program 1 times [2019-12-07 20:08:17,308 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:08:17,309 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1518645223] [2019-12-07 20:08:17,309 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/mathsat Starting monitored process 17 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with mathsat -unsat_core_generation=3 [2019-12-07 20:08:17,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:17,516 INFO L264 TraceCheckSpWp]: Trace formula consists of 418 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 20:08:17,517 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:17,522 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:08:17,522 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:17,524 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:08:17,525 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1518645223] [2019-12-07 20:08:17,525 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:08:17,525 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2019-12-07 20:08:17,525 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [75084383] [2019-12-07 20:08:17,525 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-12-07 20:08:17,525 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:08:17,525 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 20:08:17,526 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:08:17,526 INFO L87 Difference]: Start difference. First operand 2178 states and 3634 transitions. Second operand 3 states. [2019-12-07 20:08:17,751 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:08:17,751 INFO L93 Difference]: Finished difference Result 6254 states and 10406 transitions. [2019-12-07 20:08:17,752 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 20:08:17,752 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 60 [2019-12-07 20:08:17,752 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:08:17,766 INFO L225 Difference]: With dead ends: 6254 [2019-12-07 20:08:17,766 INFO L226 Difference]: Without dead ends: 4102 [2019-12-07 20:08:17,769 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:08:17,772 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4102 states. [2019-12-07 20:08:17,906 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4102 to 2746. [2019-12-07 20:08:17,906 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2746 states. [2019-12-07 20:08:17,910 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2746 states to 2746 states and 4696 transitions. [2019-12-07 20:08:17,910 INFO L78 Accepts]: Start accepts. Automaton has 2746 states and 4696 transitions. Word has length 60 [2019-12-07 20:08:17,910 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:08:17,910 INFO L462 AbstractCegarLoop]: Abstraction has 2746 states and 4696 transitions. [2019-12-07 20:08:17,910 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-12-07 20:08:17,910 INFO L276 IsEmpty]: Start isEmpty. Operand 2746 states and 4696 transitions. [2019-12-07 20:08:17,912 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2019-12-07 20:08:17,912 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:08:17,912 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:08:18,113 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 mathsat -unsat_core_generation=3 [2019-12-07 20:08:18,113 INFO L410 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:08:18,113 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:08:18,113 INFO L82 PathProgramCache]: Analyzing trace with hash -428381047, now seen corresponding path program 1 times [2019-12-07 20:08:18,114 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:08:18,114 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1299075269] [2019-12-07 20:08:18,114 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/mathsat Starting monitored process 18 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with mathsat -unsat_core_generation=3 [2019-12-07 20:08:18,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:18,295 INFO L264 TraceCheckSpWp]: Trace formula consists of 419 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 20:08:18,296 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:18,301 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:08:18,301 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:18,304 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:08:18,305 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1299075269] [2019-12-07 20:08:18,305 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:08:18,305 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2019-12-07 20:08:18,305 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [717006276] [2019-12-07 20:08:18,305 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-12-07 20:08:18,305 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:08:18,305 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 20:08:18,305 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:08:18,306 INFO L87 Difference]: Start difference. First operand 2746 states and 4696 transitions. Second operand 3 states. [2019-12-07 20:08:18,554 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:08:18,554 INFO L93 Difference]: Finished difference Result 6024 states and 9958 transitions. [2019-12-07 20:08:18,555 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 20:08:18,555 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 61 [2019-12-07 20:08:18,555 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:08:18,561 INFO L225 Difference]: With dead ends: 6024 [2019-12-07 20:08:18,561 INFO L226 Difference]: Without dead ends: 3988 [2019-12-07 20:08:18,563 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 119 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:08:18,566 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3988 states. [2019-12-07 20:08:18,702 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3988 to 2632. [2019-12-07 20:08:18,702 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2632 states. [2019-12-07 20:08:18,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2632 states to 2632 states and 4476 transitions. [2019-12-07 20:08:18,706 INFO L78 Accepts]: Start accepts. Automaton has 2632 states and 4476 transitions. Word has length 61 [2019-12-07 20:08:18,706 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:08:18,706 INFO L462 AbstractCegarLoop]: Abstraction has 2632 states and 4476 transitions. [2019-12-07 20:08:18,706 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-12-07 20:08:18,706 INFO L276 IsEmpty]: Start isEmpty. Operand 2632 states and 4476 transitions. [2019-12-07 20:08:18,708 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2019-12-07 20:08:18,708 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:08:18,708 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:08:18,909 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 mathsat -unsat_core_generation=3 [2019-12-07 20:08:18,909 INFO L410 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:08:18,909 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:08:18,910 INFO L82 PathProgramCache]: Analyzing trace with hash 1252196979, now seen corresponding path program 1 times [2019-12-07 20:08:18,910 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:08:18,910 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [618686870] [2019-12-07 20:08:18,911 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/mathsat Starting monitored process 19 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with mathsat -unsat_core_generation=3 [2019-12-07 20:08:19,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:19,096 INFO L264 TraceCheckSpWp]: Trace formula consists of 434 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 20:08:19,097 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:19,110 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:19,110 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:19,141 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:19,142 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [618686870] [2019-12-07 20:08:19,142 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [970197404] [2019-12-07 20:08:19,142 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/cvc4 Starting monitored process 20 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:08:19,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:19,325 INFO L264 TraceCheckSpWp]: Trace formula consists of 434 conjuncts, 8 conjunts are in the unsatisfiable core [2019-12-07 20:08:19,326 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:19,354 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:08:19,354 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:19,366 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:08:19,367 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 2 imperfect interpolant sequences. [2019-12-07 20:08:19,367 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [5, 5] total 11 [2019-12-07 20:08:19,367 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [116631205] [2019-12-07 20:08:19,367 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-12-07 20:08:19,367 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:08:19,368 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 20:08:19,368 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2019-12-07 20:08:19,368 INFO L87 Difference]: Start difference. First operand 2632 states and 4476 transitions. Second operand 5 states. [2019-12-07 20:08:19,757 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:08:19,757 INFO L93 Difference]: Finished difference Result 4048 states and 6678 transitions. [2019-12-07 20:08:19,757 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-12-07 20:08:19,757 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 61 [2019-12-07 20:08:19,758 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:08:19,761 INFO L225 Difference]: With dead ends: 4048 [2019-12-07 20:08:19,761 INFO L226 Difference]: Without dead ends: 2724 [2019-12-07 20:08:19,762 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 242 GetRequests, 230 SyntacticMatches, 1 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=37, Invalid=119, Unknown=0, NotChecked=0, Total=156 [2019-12-07 20:08:19,765 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2724 states. [2019-12-07 20:08:19,921 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2724 to 2276. [2019-12-07 20:08:19,921 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2276 states. [2019-12-07 20:08:19,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2276 states to 2276 states and 3909 transitions. [2019-12-07 20:08:19,925 INFO L78 Accepts]: Start accepts. Automaton has 2276 states and 3909 transitions. Word has length 61 [2019-12-07 20:08:19,926 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:08:19,926 INFO L462 AbstractCegarLoop]: Abstraction has 2276 states and 3909 transitions. [2019-12-07 20:08:19,926 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-12-07 20:08:19,926 INFO L276 IsEmpty]: Start isEmpty. Operand 2276 states and 3909 transitions. [2019-12-07 20:08:19,927 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2019-12-07 20:08:19,927 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:08:19,927 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:08:20,328 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 mathsat -unsat_core_generation=3,20 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:08:20,329 INFO L410 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:08:20,329 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:08:20,329 INFO L82 PathProgramCache]: Analyzing trace with hash -763184500, now seen corresponding path program 1 times [2019-12-07 20:08:20,329 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:08:20,330 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2066540379] [2019-12-07 20:08:20,330 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/mathsat Starting monitored process 21 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with mathsat -unsat_core_generation=3 [2019-12-07 20:08:20,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:20,491 INFO L264 TraceCheckSpWp]: Trace formula consists of 420 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 20:08:20,492 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:20,497 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:08:20,497 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:20,500 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:08:20,500 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2066540379] [2019-12-07 20:08:20,500 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:08:20,500 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2019-12-07 20:08:20,501 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1370185670] [2019-12-07 20:08:20,501 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-12-07 20:08:20,501 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:08:20,501 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 20:08:20,501 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:08:20,501 INFO L87 Difference]: Start difference. First operand 2276 states and 3909 transitions. Second operand 3 states. [2019-12-07 20:08:20,725 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:08:20,725 INFO L93 Difference]: Finished difference Result 6644 states and 11421 transitions. [2019-12-07 20:08:20,725 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 20:08:20,726 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 61 [2019-12-07 20:08:20,726 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:08:20,732 INFO L225 Difference]: With dead ends: 6644 [2019-12-07 20:08:20,732 INFO L226 Difference]: Without dead ends: 4398 [2019-12-07 20:08:20,735 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 119 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:08:20,738 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4398 states. [2019-12-07 20:08:20,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4398 to 3398. [2019-12-07 20:08:20,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3398 states. [2019-12-07 20:08:20,888 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3398 states to 3398 states and 5998 transitions. [2019-12-07 20:08:20,889 INFO L78 Accepts]: Start accepts. Automaton has 3398 states and 5998 transitions. Word has length 61 [2019-12-07 20:08:20,889 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:08:20,889 INFO L462 AbstractCegarLoop]: Abstraction has 3398 states and 5998 transitions. [2019-12-07 20:08:20,889 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-12-07 20:08:20,889 INFO L276 IsEmpty]: Start isEmpty. Operand 3398 states and 5998 transitions. [2019-12-07 20:08:20,891 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2019-12-07 20:08:20,891 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:08:20,891 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:08:21,091 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 mathsat -unsat_core_generation=3 [2019-12-07 20:08:21,091 INFO L410 AbstractCegarLoop]: === Iteration 15 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:08:21,092 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:08:21,092 INFO L82 PathProgramCache]: Analyzing trace with hash -976424026, now seen corresponding path program 1 times [2019-12-07 20:08:21,092 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:08:21,093 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [319281256] [2019-12-07 20:08:21,093 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/mathsat Starting monitored process 22 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with mathsat -unsat_core_generation=3 [2019-12-07 20:08:21,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:21,288 INFO L264 TraceCheckSpWp]: Trace formula consists of 422 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 20:08:21,289 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:21,295 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:08:21,295 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:21,298 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:08:21,298 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [319281256] [2019-12-07 20:08:21,299 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:08:21,299 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2019-12-07 20:08:21,299 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [268023977] [2019-12-07 20:08:21,299 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-12-07 20:08:21,299 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:08:21,299 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 20:08:21,299 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:08:21,299 INFO L87 Difference]: Start difference. First operand 3398 states and 5998 transitions. Second operand 3 states. [2019-12-07 20:08:21,587 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:08:21,587 INFO L93 Difference]: Finished difference Result 9988 states and 17650 transitions. [2019-12-07 20:08:21,587 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 20:08:21,587 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 62 [2019-12-07 20:08:21,587 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:08:21,593 INFO L225 Difference]: With dead ends: 9988 [2019-12-07 20:08:21,593 INFO L226 Difference]: Without dead ends: 6624 [2019-12-07 20:08:21,596 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:08:21,601 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6624 states. [2019-12-07 20:08:21,792 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6624 to 5624. [2019-12-07 20:08:21,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5624 states. [2019-12-07 20:08:21,798 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5624 states to 5624 states and 10127 transitions. [2019-12-07 20:08:21,798 INFO L78 Accepts]: Start accepts. Automaton has 5624 states and 10127 transitions. Word has length 62 [2019-12-07 20:08:21,798 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:08:21,798 INFO L462 AbstractCegarLoop]: Abstraction has 5624 states and 10127 transitions. [2019-12-07 20:08:21,798 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-12-07 20:08:21,798 INFO L276 IsEmpty]: Start isEmpty. Operand 5624 states and 10127 transitions. [2019-12-07 20:08:21,801 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2019-12-07 20:08:21,801 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:08:21,801 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:08:22,001 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 mathsat -unsat_core_generation=3 [2019-12-07 20:08:22,002 INFO L410 AbstractCegarLoop]: === Iteration 16 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:08:22,002 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:08:22,002 INFO L82 PathProgramCache]: Analyzing trace with hash -162426194, now seen corresponding path program 1 times [2019-12-07 20:08:22,003 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:08:22,003 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [376254490] [2019-12-07 20:08:22,003 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/mathsat Starting monitored process 23 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with mathsat -unsat_core_generation=3 [2019-12-07 20:08:22,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:22,201 INFO L264 TraceCheckSpWp]: Trace formula consists of 424 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 20:08:22,202 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:22,208 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:08:22,208 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:22,211 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:08:22,211 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [376254490] [2019-12-07 20:08:22,212 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:08:22,212 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2019-12-07 20:08:22,212 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [551951417] [2019-12-07 20:08:22,212 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-12-07 20:08:22,212 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:08:22,212 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 20:08:22,212 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:08:22,212 INFO L87 Difference]: Start difference. First operand 5624 states and 10127 transitions. Second operand 3 states. [2019-12-07 20:08:22,589 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:08:22,589 INFO L93 Difference]: Finished difference Result 16628 states and 29967 transitions. [2019-12-07 20:08:22,590 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 20:08:22,590 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 63 [2019-12-07 20:08:22,590 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:08:22,600 INFO L225 Difference]: With dead ends: 16628 [2019-12-07 20:08:22,600 INFO L226 Difference]: Without dead ends: 11042 [2019-12-07 20:08:22,606 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 123 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:08:22,614 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11042 states. [2019-12-07 20:08:22,933 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11042 to 10042. [2019-12-07 20:08:22,933 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10042 states. [2019-12-07 20:08:22,943 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10042 states to 10042 states and 18288 transitions. [2019-12-07 20:08:22,944 INFO L78 Accepts]: Start accepts. Automaton has 10042 states and 18288 transitions. Word has length 63 [2019-12-07 20:08:22,944 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:08:22,944 INFO L462 AbstractCegarLoop]: Abstraction has 10042 states and 18288 transitions. [2019-12-07 20:08:22,944 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-12-07 20:08:22,944 INFO L276 IsEmpty]: Start isEmpty. Operand 10042 states and 18288 transitions. [2019-12-07 20:08:22,948 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2019-12-07 20:08:22,948 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:08:22,949 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:08:23,149 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 mathsat -unsat_core_generation=3 [2019-12-07 20:08:23,149 INFO L410 AbstractCegarLoop]: === Iteration 17 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:08:23,150 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:08:23,150 INFO L82 PathProgramCache]: Analyzing trace with hash 1065220996, now seen corresponding path program 1 times [2019-12-07 20:08:23,150 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:08:23,151 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1380987107] [2019-12-07 20:08:23,151 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/mathsat Starting monitored process 24 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with mathsat -unsat_core_generation=3 [2019-12-07 20:08:23,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:23,336 INFO L264 TraceCheckSpWp]: Trace formula consists of 426 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 20:08:23,337 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:23,350 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:23,350 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:23,384 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:08:23,384 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1380987107] [2019-12-07 20:08:23,384 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [60849006] [2019-12-07 20:08:23,384 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/cvc4 Starting monitored process 25 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:08:23,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:08:23,550 INFO L264 TraceCheckSpWp]: Trace formula consists of 426 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 20:08:23,551 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:08:23,579 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:08:23,579 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:08:23,601 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:08:23,602 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 2 imperfect interpolant sequences. [2019-12-07 20:08:23,602 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 4] imperfect sequences [5, 5] total 13 [2019-12-07 20:08:23,602 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1356203270] [2019-12-07 20:08:23,602 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2019-12-07 20:08:23,602 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:08:23,602 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 20:08:23,602 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=123, Unknown=0, NotChecked=0, Total=156 [2019-12-07 20:08:23,603 INFO L87 Difference]: Start difference. First operand 10042 states and 18288 transitions. Second operand 7 states. [2019-12-07 20:08:23,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:08:23,992 INFO L93 Difference]: Finished difference Result 10504 states and 19033 transitions. [2019-12-07 20:08:23,992 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-12-07 20:08:23,992 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 64 [2019-12-07 20:08:23,992 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:08:23,993 INFO L225 Difference]: With dead ends: 10504 [2019-12-07 20:08:23,993 INFO L226 Difference]: Without dead ends: 0 [2019-12-07 20:08:23,999 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 254 GetRequests, 241 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=164, Unknown=0, NotChecked=0, Total=210 [2019-12-07 20:08:23,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2019-12-07 20:08:23,999 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2019-12-07 20:08:24,000 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2019-12-07 20:08:24,000 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2019-12-07 20:08:24,000 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 64 [2019-12-07 20:08:24,000 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:08:24,000 INFO L462 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 20:08:24,000 INFO L463 AbstractCegarLoop]: Interpolant automaton has 7 states. [2019-12-07 20:08:24,000 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2019-12-07 20:08:24,000 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2019-12-07 20:08:24,401 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 cvc4 --incremental --print-success --lang smt --rewrite-divk,24 mathsat -unsat_core_generation=3 [2019-12-07 20:08:24,404 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2019-12-07 20:08:24,565 WARN L192 SmtUtils]: Spent 153.00 ms on a formula simplification. DAG size of input: 139 DAG size of output: 117 [2019-12-07 20:08:24,748 WARN L192 SmtUtils]: Spent 181.00 ms on a formula simplification. DAG size of input: 175 DAG size of output: 107 [2019-12-07 20:08:24,967 WARN L192 SmtUtils]: Spent 218.00 ms on a formula simplification. DAG size of input: 219 DAG size of output: 188 [2019-12-07 20:08:25,239 WARN L192 SmtUtils]: Spent 270.00 ms on a formula simplification. DAG size of input: 253 DAG size of output: 227 [2019-12-07 20:08:25,453 WARN L192 SmtUtils]: Spent 212.00 ms on a formula simplification. DAG size of input: 235 DAG size of output: 206 [2019-12-07 20:08:25,579 WARN L192 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 159 DAG size of output: 139 [2019-12-07 20:08:25,772 WARN L192 SmtUtils]: Spent 165.00 ms on a formula simplification. DAG size of input: 219 DAG size of output: 188 [2019-12-07 20:08:26,055 WARN L192 SmtUtils]: Spent 208.00 ms on a formula simplification. DAG size of input: 234 DAG size of output: 205 [2019-12-07 20:08:26,602 WARN L192 SmtUtils]: Spent 545.00 ms on a formula simplification. DAG size of input: 321 DAG size of output: 287 [2019-12-07 20:08:27,160 WARN L192 SmtUtils]: Spent 187.00 ms on a formula simplification. DAG size of input: 274 DAG size of output: 249 [2019-12-07 20:08:27,263 WARN L192 SmtUtils]: Spent 101.00 ms on a formula simplification. DAG size of input: 175 DAG size of output: 107 [2019-12-07 20:08:27,600 WARN L192 SmtUtils]: Spent 283.00 ms on a formula simplification. DAG size of input: 255 DAG size of output: 220 [2019-12-07 20:08:27,941 WARN L192 SmtUtils]: Spent 339.00 ms on a formula simplification. DAG size of input: 356 DAG size of output: 329 [2019-12-07 20:08:28,125 WARN L192 SmtUtils]: Spent 122.00 ms on a formula simplification. DAG size of input: 207 DAG size of output: 172 [2019-12-07 20:08:28,423 WARN L192 SmtUtils]: Spent 256.00 ms on a formula simplification. DAG size of input: 270 DAG size of output: 245 [2019-12-07 20:08:28,858 WARN L192 SmtUtils]: Spent 212.00 ms on a formula simplification. DAG size of input: 235 DAG size of output: 206 [2019-12-07 20:08:29,343 WARN L192 SmtUtils]: Spent 103.00 ms on a formula simplification. DAG size of input: 197 DAG size of output: 163 [2019-12-07 20:08:29,753 WARN L192 SmtUtils]: Spent 409.00 ms on a formula simplification. DAG size of input: 289 DAG size of output: 263 [2019-12-07 20:08:29,965 WARN L192 SmtUtils]: Spent 210.00 ms on a formula simplification. DAG size of input: 237 DAG size of output: 206 [2019-12-07 20:08:30,119 WARN L192 SmtUtils]: Spent 135.00 ms on a formula simplification. DAG size of input: 213 DAG size of output: 185 [2019-12-07 20:08:30,405 WARN L192 SmtUtils]: Spent 284.00 ms on a formula simplification. DAG size of input: 255 DAG size of output: 220 [2019-12-07 20:08:30,670 WARN L192 SmtUtils]: Spent 179.00 ms on a formula simplification. DAG size of input: 229 DAG size of output: 202 [2019-12-07 20:08:30,915 WARN L192 SmtUtils]: Spent 181.00 ms on a formula simplification. DAG size of input: 229 DAG size of output: 202 [2019-12-07 20:08:31,017 WARN L192 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 175 DAG size of output: 107 [2019-12-07 20:08:31,240 WARN L192 SmtUtils]: Spent 163.00 ms on a formula simplification. DAG size of input: 219 DAG size of output: 188 [2019-12-07 20:08:31,611 WARN L192 SmtUtils]: Spent 356.00 ms on a formula simplification. DAG size of input: 289 DAG size of output: 263 [2019-12-07 20:08:31,713 WARN L192 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 175 DAG size of output: 107 [2019-12-07 20:08:32,136 WARN L192 SmtUtils]: Spent 221.00 ms on a formula simplification. DAG size of input: 240 DAG size of output: 215 [2019-12-07 20:08:32,371 WARN L192 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 174 DAG size of output: 107 [2019-12-07 20:08:32,606 WARN L192 SmtUtils]: Spent 133.00 ms on a formula simplification. DAG size of input: 213 DAG size of output: 185 [2019-12-07 20:08:32,747 WARN L192 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 174 DAG size of output: 107 [2019-12-07 20:08:32,856 WARN L192 SmtUtils]: Spent 107.00 ms on a formula simplification. DAG size of input: 186 DAG size of output: 107 [2019-12-07 20:08:32,959 WARN L192 SmtUtils]: Spent 101.00 ms on a formula simplification. DAG size of input: 175 DAG size of output: 107 [2019-12-07 20:08:33,084 WARN L192 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 174 DAG size of output: 107 [2019-12-07 20:08:33,476 WARN L192 SmtUtils]: Spent 390.00 ms on a formula simplification. DAG size of input: 289 DAG size of output: 263 [2019-12-07 20:08:33,677 WARN L192 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 174 DAG size of output: 107 [2019-12-07 20:08:33,778 WARN L192 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 174 DAG size of output: 107 [2019-12-07 20:08:34,061 WARN L192 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 197 DAG size of output: 163 [2019-12-07 20:08:34,392 WARN L192 SmtUtils]: Spent 121.00 ms on a formula simplification. DAG size of input: 207 DAG size of output: 172 [2019-12-07 20:08:34,654 WARN L192 SmtUtils]: Spent 260.00 ms on a formula simplification. DAG size of input: 253 DAG size of output: 227 [2019-12-07 20:08:35,285 WARN L192 SmtUtils]: Spent 390.00 ms on a formula simplification. DAG size of input: 311 DAG size of output: 286 [2019-12-07 20:08:35,387 WARN L192 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 197 DAG size of output: 163 [2019-12-07 20:08:35,565 WARN L192 SmtUtils]: Spent 136.00 ms on a formula simplification. DAG size of input: 207 DAG size of output: 172 [2019-12-07 20:08:35,965 WARN L192 SmtUtils]: Spent 210.00 ms on a formula simplification. DAG size of input: 235 DAG size of output: 206 [2019-12-07 20:08:36,249 WARN L192 SmtUtils]: Spent 243.00 ms on a formula simplification. DAG size of input: 329 DAG size of output: 312 [2019-12-07 20:08:36,577 WARN L192 SmtUtils]: Spent 286.00 ms on a formula simplification. DAG size of input: 281 DAG size of output: 262 [2019-12-07 20:08:36,746 WARN L192 SmtUtils]: Spent 167.00 ms on a formula simplification. DAG size of input: 243 DAG size of output: 229 [2019-12-07 20:08:37,194 WARN L192 SmtUtils]: Spent 337.00 ms on a formula simplification. DAG size of input: 289 DAG size of output: 263 [2019-12-07 20:08:37,402 WARN L192 SmtUtils]: Spent 206.00 ms on a formula simplification. DAG size of input: 234 DAG size of output: 205 [2019-12-07 20:08:37,844 WARN L192 SmtUtils]: Spent 440.00 ms on a formula simplification. DAG size of input: 111 DAG size of output: 51 [2019-12-07 20:08:38,093 WARN L192 SmtUtils]: Spent 246.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 17 [2019-12-07 20:08:39,040 WARN L192 SmtUtils]: Spent 946.00 ms on a formula simplification. DAG size of input: 186 DAG size of output: 41 [2019-12-07 20:08:40,683 WARN L192 SmtUtils]: Spent 1.64 s on a formula simplification. DAG size of input: 225 DAG size of output: 35 [2019-12-07 20:08:42,052 WARN L192 SmtUtils]: Spent 1.37 s on a formula simplification. DAG size of input: 204 DAG size of output: 32 [2019-12-07 20:08:42,395 WARN L192 SmtUtils]: Spent 341.00 ms on a formula simplification. DAG size of input: 96 DAG size of output: 30 [2019-12-07 20:08:42,930 WARN L192 SmtUtils]: Spent 534.00 ms on a formula simplification. DAG size of input: 137 DAG size of output: 39 [2019-12-07 20:08:43,219 WARN L192 SmtUtils]: Spent 287.00 ms on a formula simplification. DAG size of input: 99 DAG size of output: 37 [2019-12-07 20:08:44,162 WARN L192 SmtUtils]: Spent 942.00 ms on a formula simplification. DAG size of input: 186 DAG size of output: 41 [2019-12-07 20:08:44,618 WARN L192 SmtUtils]: Spent 454.00 ms on a formula simplification. DAG size of input: 111 DAG size of output: 51 [2019-12-07 20:08:45,090 WARN L192 SmtUtils]: Spent 471.00 ms on a formula simplification. DAG size of input: 122 DAG size of output: 48 [2019-12-07 20:08:46,458 WARN L192 SmtUtils]: Spent 1.37 s on a formula simplification. DAG size of input: 203 DAG size of output: 32 [2019-12-07 20:08:49,251 WARN L192 SmtUtils]: Spent 2.79 s on a formula simplification. DAG size of input: 285 DAG size of output: 45 [2019-12-07 20:08:49,978 WARN L192 SmtUtils]: Spent 726.00 ms on a formula simplification. DAG size of input: 148 DAG size of output: 60 [2019-12-07 20:08:50,806 WARN L192 SmtUtils]: Spent 827.00 ms on a formula simplification. DAG size of input: 158 DAG size of output: 53 [2019-12-07 20:08:51,408 WARN L192 SmtUtils]: Spent 600.00 ms on a formula simplification. DAG size of input: 160 DAG size of output: 37 [2019-12-07 20:08:51,983 WARN L192 SmtUtils]: Spent 573.00 ms on a formula simplification. DAG size of input: 144 DAG size of output: 52 [2019-12-07 20:08:52,985 WARN L192 SmtUtils]: Spent 1.00 s on a formula simplification. DAG size of input: 176 DAG size of output: 43 [2019-12-07 20:08:54,469 WARN L192 SmtUtils]: Spent 1.48 s on a formula simplification. DAG size of input: 247 DAG size of output: 32 [2019-12-07 20:08:54,693 WARN L192 SmtUtils]: Spent 222.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 17 [2019-12-07 20:08:54,989 WARN L192 SmtUtils]: Spent 295.00 ms on a formula simplification. DAG size of input: 120 DAG size of output: 36 [2019-12-07 20:08:56,453 WARN L192 SmtUtils]: Spent 1.46 s on a formula simplification. DAG size of input: 218 DAG size of output: 34 [2019-12-07 20:08:59,129 WARN L192 SmtUtils]: Spent 2.67 s on a formula simplification. DAG size of input: 326 DAG size of output: 31 [2019-12-07 20:08:59,458 WARN L192 SmtUtils]: Spent 328.00 ms on a formula simplification. DAG size of input: 126 DAG size of output: 35 [2019-12-07 20:09:00,141 WARN L192 SmtUtils]: Spent 682.00 ms on a formula simplification. DAG size of input: 170 DAG size of output: 37 [2019-12-07 20:09:00,585 WARN L192 SmtUtils]: Spent 443.00 ms on a formula simplification. DAG size of input: 127 DAG size of output: 48 [2019-12-07 20:09:02,370 WARN L192 SmtUtils]: Spent 1.78 s on a formula simplification. DAG size of input: 243 DAG size of output: 41 [2019-12-07 20:09:02,813 WARN L192 SmtUtils]: Spent 441.00 ms on a formula simplification. DAG size of input: 127 DAG size of output: 48 [2019-12-07 20:09:03,231 WARN L192 SmtUtils]: Spent 416.00 ms on a formula simplification. DAG size of input: 127 DAG size of output: 48 [2019-12-07 20:09:03,612 WARN L192 SmtUtils]: Spent 380.00 ms on a formula simplification. DAG size of input: 106 DAG size of output: 54 [2019-12-07 20:09:04,084 WARN L192 SmtUtils]: Spent 470.00 ms on a formula simplification. DAG size of input: 127 DAG size of output: 48 [2019-12-07 20:09:04,617 WARN L192 SmtUtils]: Spent 532.00 ms on a formula simplification. DAG size of input: 142 DAG size of output: 46 [2019-12-07 20:09:05,830 WARN L192 SmtUtils]: Spent 1.21 s on a formula simplification. DAG size of input: 204 DAG size of output: 32 [2019-12-07 20:09:06,539 WARN L192 SmtUtils]: Spent 708.00 ms on a formula simplification. DAG size of input: 148 DAG size of output: 60 [2019-12-07 20:09:07,377 WARN L192 SmtUtils]: Spent 836.00 ms on a formula simplification. DAG size of input: 169 DAG size of output: 43 [2019-12-07 20:09:07,956 WARN L192 SmtUtils]: Spent 578.00 ms on a formula simplification. DAG size of input: 142 DAG size of output: 46 [2019-12-07 20:09:08,579 WARN L192 SmtUtils]: Spent 622.00 ms on a formula simplification. DAG size of input: 160 DAG size of output: 37 [2019-12-07 20:09:09,186 WARN L192 SmtUtils]: Spent 605.00 ms on a formula simplification. DAG size of input: 122 DAG size of output: 54 [2019-12-07 20:09:09,495 WARN L192 SmtUtils]: Spent 307.00 ms on a formula simplification. DAG size of input: 119 DAG size of output: 32 [2019-12-07 20:09:10,309 WARN L192 SmtUtils]: Spent 813.00 ms on a formula simplification. DAG size of input: 161 DAG size of output: 59 [2019-12-07 20:09:12,240 WARN L192 SmtUtils]: Spent 1.93 s on a formula simplification. DAG size of input: 261 DAG size of output: 40 [2019-12-07 20:09:13,390 WARN L192 SmtUtils]: Spent 1.15 s on a formula simplification. DAG size of input: 204 DAG size of output: 35 [2019-12-07 20:09:13,604 WARN L192 SmtUtils]: Spent 213.00 ms on a formula simplification. DAG size of input: 84 DAG size of output: 46 [2019-12-07 20:09:14,457 WARN L192 SmtUtils]: Spent 845.00 ms on a formula simplification. DAG size of input: 183 DAG size of output: 40 [2019-12-07 20:09:15,922 WARN L192 SmtUtils]: Spent 1.46 s on a formula simplification. DAG size of input: 218 DAG size of output: 34 [2019-12-07 20:09:16,610 WARN L192 SmtUtils]: Spent 687.00 ms on a formula simplification. DAG size of input: 163 DAG size of output: 32 [2019-12-07 20:09:17,818 WARN L192 SmtUtils]: Spent 1.21 s on a formula simplification. DAG size of input: 200 DAG size of output: 32 [2019-12-07 20:09:18,053 WARN L192 SmtUtils]: Spent 234.00 ms on a formula simplification. DAG size of input: 84 DAG size of output: 46 [2019-12-07 20:09:18,557 WARN L192 SmtUtils]: Spent 503.00 ms on a formula simplification. DAG size of input: 130 DAG size of output: 43 [2019-12-07 20:09:19,734 WARN L192 SmtUtils]: Spent 1.18 s on a formula simplification. DAG size of input: 200 DAG size of output: 32 [2019-12-07 20:09:19,999 WARN L192 SmtUtils]: Spent 263.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 17 [2019-12-07 20:09:20,614 WARN L192 SmtUtils]: Spent 614.00 ms on a formula simplification. DAG size of input: 143 DAG size of output: 55 [2019-12-07 20:09:21,545 WARN L192 SmtUtils]: Spent 930.00 ms on a formula simplification. DAG size of input: 186 DAG size of output: 41 [2019-12-07 20:09:21,734 WARN L192 SmtUtils]: Spent 187.00 ms on a formula simplification. DAG size of input: 81 DAG size of output: 43 [2019-12-07 20:09:23,803 WARN L192 SmtUtils]: Spent 2.07 s on a formula simplification. DAG size of input: 261 DAG size of output: 40 [2019-12-07 20:09:24,044 WARN L192 SmtUtils]: Spent 239.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 17 [2019-12-07 20:09:24,280 WARN L192 SmtUtils]: Spent 234.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 17 [2019-12-07 20:09:24,516 WARN L192 SmtUtils]: Spent 235.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 17 [2019-12-07 20:09:25,844 WARN L192 SmtUtils]: Spent 1.33 s on a formula simplification. DAG size of input: 213 DAG size of output: 34 [2019-12-07 20:09:26,229 WARN L192 SmtUtils]: Spent 384.00 ms on a formula simplification. DAG size of input: 106 DAG size of output: 48 [2019-12-07 20:09:26,455 WARN L192 SmtUtils]: Spent 224.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 17 [2019-12-07 20:09:26,696 WARN L192 SmtUtils]: Spent 239.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 17 [2019-12-07 20:09:26,943 WARN L192 SmtUtils]: Spent 223.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 17 [2019-12-07 20:09:27,764 WARN L192 SmtUtils]: Spent 819.00 ms on a formula simplification. DAG size of input: 183 DAG size of output: 40 [2019-12-07 20:09:28,105 WARN L192 SmtUtils]: Spent 340.00 ms on a formula simplification. DAG size of input: 122 DAG size of output: 43 [2019-12-07 20:09:28,342 WARN L192 SmtUtils]: Spent 228.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 17 [2019-12-07 20:09:28,568 WARN L192 SmtUtils]: Spent 225.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 17 [2019-12-07 20:09:28,795 WARN L192 SmtUtils]: Spent 226.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 17 [2019-12-07 20:09:29,038 WARN L192 SmtUtils]: Spent 242.00 ms on a formula simplification. DAG size of input: 87 DAG size of output: 34 [2019-12-07 20:09:29,270 WARN L192 SmtUtils]: Spent 230.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 17 [2019-12-07 20:09:31,247 WARN L192 SmtUtils]: Spent 1.98 s on a formula simplification. DAG size of input: 261 DAG size of output: 40 [2019-12-07 20:09:31,487 WARN L192 SmtUtils]: Spent 239.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 17 [2019-12-07 20:09:31,750 WARN L192 SmtUtils]: Spent 262.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 17 [2019-12-07 20:09:31,994 WARN L192 SmtUtils]: Spent 243.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 17 [2019-12-07 20:09:32,510 WARN L192 SmtUtils]: Spent 515.00 ms on a formula simplification. DAG size of input: 142 DAG size of output: 46 [2019-12-07 20:09:32,803 WARN L192 SmtUtils]: Spent 292.00 ms on a formula simplification. DAG size of input: 114 DAG size of output: 34 [2019-12-07 20:09:33,521 WARN L192 SmtUtils]: Spent 716.00 ms on a formula simplification. DAG size of input: 148 DAG size of output: 60 [2019-12-07 20:09:34,358 WARN L192 SmtUtils]: Spent 836.00 ms on a formula simplification. DAG size of input: 161 DAG size of output: 59 [2019-12-07 20:09:34,681 WARN L192 SmtUtils]: Spent 322.00 ms on a formula simplification. DAG size of input: 121 DAG size of output: 37 [2019-12-07 20:09:35,299 WARN L192 SmtUtils]: Spent 616.00 ms on a formula simplification. DAG size of input: 160 DAG size of output: 37 [2019-12-07 20:09:35,848 WARN L192 SmtUtils]: Spent 547.00 ms on a formula simplification. DAG size of input: 142 DAG size of output: 46 [2019-12-07 20:09:36,509 WARN L192 SmtUtils]: Spent 659.00 ms on a formula simplification. DAG size of input: 170 DAG size of output: 37 [2019-12-07 20:09:38,112 WARN L192 SmtUtils]: Spent 1.60 s on a formula simplification. DAG size of input: 225 DAG size of output: 35 [2019-12-07 20:09:38,650 WARN L192 SmtUtils]: Spent 537.00 ms on a formula simplification. DAG size of input: 142 DAG size of output: 46 [2019-12-07 20:09:39,027 WARN L192 SmtUtils]: Spent 376.00 ms on a formula simplification. DAG size of input: 109 DAG size of output: 43 [2019-12-07 20:09:39,715 WARN L192 SmtUtils]: Spent 686.00 ms on a formula simplification. DAG size of input: 145 DAG size of output: 57 [2019-12-07 20:09:40,343 WARN L192 SmtUtils]: Spent 627.00 ms on a formula simplification. DAG size of input: 157 DAG size of output: 34 [2019-12-07 20:09:42,819 WARN L192 SmtUtils]: Spent 2.47 s on a formula simplification. DAG size of input: 284 DAG size of output: 34 [2019-12-07 20:09:43,674 WARN L192 SmtUtils]: Spent 854.00 ms on a formula simplification. DAG size of input: 161 DAG size of output: 59 [2019-12-07 20:09:44,151 WARN L192 SmtUtils]: Spent 475.00 ms on a formula simplification. DAG size of input: 127 DAG size of output: 48 [2019-12-07 20:09:44,877 WARN L192 SmtUtils]: Spent 724.00 ms on a formula simplification. DAG size of input: 170 DAG size of output: 37 [2019-12-07 20:09:45,347 WARN L192 SmtUtils]: Spent 469.00 ms on a formula simplification. DAG size of input: 127 DAG size of output: 48 [2019-12-07 20:09:45,552 WARN L192 SmtUtils]: Spent 204.00 ms on a formula simplification. DAG size of input: 85 DAG size of output: 19 [2019-12-07 20:09:46,208 WARN L192 SmtUtils]: Spent 654.00 ms on a formula simplification. DAG size of input: 155 DAG size of output: 43 [2019-12-07 20:09:46,751 WARN L192 SmtUtils]: Spent 542.00 ms on a formula simplification. DAG size of input: 114 DAG size of output: 56 [2019-12-07 20:09:47,346 WARN L192 SmtUtils]: Spent 584.00 ms on a formula simplification. DAG size of input: 132 DAG size of output: 56 [2019-12-07 20:09:48,457 WARN L192 SmtUtils]: Spent 1.11 s on a formula simplification. DAG size of input: 204 DAG size of output: 32 [2019-12-07 20:09:48,933 WARN L192 SmtUtils]: Spent 475.00 ms on a formula simplification. DAG size of input: 124 DAG size of output: 45 [2019-12-07 20:09:51,177 WARN L192 SmtUtils]: Spent 2.24 s on a formula simplification. DAG size of input: 307 DAG size of output: 32 [2019-12-07 20:09:51,651 WARN L192 SmtUtils]: Spent 452.00 ms on a formula simplification. DAG size of input: 124 DAG size of output: 45 [2019-12-07 20:09:53,716 WARN L192 SmtUtils]: Spent 2.06 s on a formula simplification. DAG size of input: 260 DAG size of output: 46 [2019-12-07 20:09:55,359 WARN L192 SmtUtils]: Spent 1.64 s on a formula simplification. DAG size of input: 227 DAG size of output: 44 [2019-12-07 20:09:55,878 WARN L192 SmtUtils]: Spent 517.00 ms on a formula simplification. DAG size of input: 142 DAG size of output: 46 [2019-12-07 20:09:56,367 WARN L192 SmtUtils]: Spent 464.00 ms on a formula simplification. DAG size of input: 122 DAG size of output: 48 [2019-12-07 20:09:58,364 WARN L192 SmtUtils]: Spent 1.99 s on a formula simplification. DAG size of input: 261 DAG size of output: 40 [2019-12-07 20:09:59,517 WARN L192 SmtUtils]: Spent 1.15 s on a formula simplification. DAG size of input: 203 DAG size of output: 32 [2019-12-07 20:09:59,519 INFO L242 CegarLoopResult]: At program point L2281-8(lines 1 2601) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= ~__ste_ClientAddressBook_size0~0 (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) ~__ste_client_forwardReceiver1~0)) [2019-12-07 20:09:59,519 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 2579) no Hoare annotation was computed. [2019-12-07 20:09:59,519 INFO L242 CegarLoopResult]: At program point L168(lines 158 220) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,519 INFO L246 CegarLoopResult]: For program point L1688(lines 1688 1694) no Hoare annotation was computed. [2019-12-07 20:09:59,519 INFO L246 CegarLoopResult]: For program point L1688-1(lines 1688 1694) no Hoare annotation was computed. [2019-12-07 20:09:59,520 INFO L246 CegarLoopResult]: For program point L1688-2(lines 1688 1694) no Hoare annotation was computed. [2019-12-07 20:09:59,520 INFO L242 CegarLoopResult]: At program point L565(lines 552 570) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,520 INFO L246 CegarLoopResult]: For program point L1688-3(lines 1688 1694) no Hoare annotation was computed. [2019-12-07 20:09:59,520 INFO L242 CegarLoopResult]: At program point L565-1(lines 552 570) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse6 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse8 (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse9 (= (_ bv2 32) ~rjh~0)) (.cse10 (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse11 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse1 .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))))) [2019-12-07 20:09:59,520 INFO L242 CegarLoopResult]: At program point L565-2(lines 552 570) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,520 INFO L242 CegarLoopResult]: At program point L565-3(lines 552 570) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,520 INFO L242 CegarLoopResult]: At program point L565-4(lines 552 570) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,521 INFO L242 CegarLoopResult]: At program point L565-5(lines 552 570) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))) [2019-12-07 20:09:59,521 INFO L242 CegarLoopResult]: At program point L565-6(lines 552 570) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32)))) (.cse6 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse7 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse9 (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse8 (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2)) (.cse10 (= (_ bv2 32) ~rjh~0)) (.cse11 (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse12 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse13 (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|))) (or (and .cse0 .cse1 .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse4 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse3 .cse6 .cse5 .cse7 .cse9 .cse8 .cse10 .cse11 .cse12 .cse13))) [2019-12-07 20:09:59,521 INFO L242 CegarLoopResult]: At program point L565-7(lines 552 570) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,521 INFO L242 CegarLoopResult]: At program point L565-8(lines 552 570) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,521 INFO L242 CegarLoopResult]: At program point L565-9(lines 552 570) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,521 INFO L242 CegarLoopResult]: At program point L565-10(lines 552 570) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv2 32) ~rjh~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse0 (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) .cse1 .cse2 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (and .cse0 .cse1 (= (_ bv2 32) ~__ste_email_to0~0) .cse2 (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))))) [2019-12-07 20:09:59,521 INFO L249 CegarLoopResult]: At program point L565-11(lines 552 570) the Hoare annotation is: true [2019-12-07 20:09:59,521 INFO L242 CegarLoopResult]: At program point L2217-1(lines 2200 2223) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,521 INFO L242 CegarLoopResult]: At program point L565-12(lines 552 570) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv2 32) ~rjh~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and .cse0 .cse1 (= (_ bv2 32) ~__ste_email_to0~0) .cse2 (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))) (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse0 (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) .cse1 .cse2 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)))) [2019-12-07 20:09:59,522 INFO L242 CegarLoopResult]: At program point L2217(lines 2200 2223) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse6 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse8 (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse9 (= (_ bv2 32) ~rjh~0)) (.cse10 (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse11 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse1 .cse2 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11))) [2019-12-07 20:09:59,522 INFO L249 CegarLoopResult]: At program point L565-13(lines 552 570) the Hoare annotation is: true [2019-12-07 20:09:59,522 INFO L242 CegarLoopResult]: At program point L2217-3(lines 2200 2223) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,522 INFO L242 CegarLoopResult]: At program point L2217-2(lines 2200 2223) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,522 INFO L242 CegarLoopResult]: At program point L2217-5(lines 2200 2223) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv2 32) ~rjh~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse0 (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) .cse1 .cse2 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (and .cse0 .cse1 .cse2 (= (_ bv0 32) |ULTIMATE.start_getClientForwardReceiver_#res|)))) [2019-12-07 20:09:59,522 INFO L242 CegarLoopResult]: At program point L2217-4(lines 2200 2223) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv2 32) ~rjh~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse0 (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) .cse1 .cse2 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (and .cse0 .cse1 .cse2 (= (_ bv0 32) |ULTIMATE.start_getClientForwardReceiver_#res|)))) [2019-12-07 20:09:59,522 INFO L246 CegarLoopResult]: For program point L104(lines 104 108) no Hoare annotation was computed. [2019-12-07 20:09:59,522 INFO L246 CegarLoopResult]: For program point L1360(lines 1360 1376) no Hoare annotation was computed. [2019-12-07 20:09:59,522 INFO L246 CegarLoopResult]: For program point L1360-1(lines 1360 1376) no Hoare annotation was computed. [2019-12-07 20:09:59,522 INFO L246 CegarLoopResult]: For program point L173(lines 173 180) no Hoare annotation was computed. [2019-12-07 20:09:59,522 INFO L242 CegarLoopResult]: At program point L2553(lines 2542 2556) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,522 INFO L246 CegarLoopResult]: For program point L1364(lines 1364 1375) no Hoare annotation was computed. [2019-12-07 20:09:59,522 INFO L246 CegarLoopResult]: For program point L1364-1(lines 1364 1375) no Hoare annotation was computed. [2019-12-07 20:09:59,523 INFO L242 CegarLoopResult]: At program point L110(lines 100 225) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,523 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION(line 2579) no Hoare annotation was computed. [2019-12-07 20:09:59,523 INFO L246 CegarLoopResult]: For program point L575(lines 575 583) no Hoare annotation was computed. [2019-12-07 20:09:59,523 INFO L246 CegarLoopResult]: For program point L575-2(lines 575 583) no Hoare annotation was computed. [2019-12-07 20:09:59,523 INFO L246 CegarLoopResult]: For program point L575-4(lines 575 583) no Hoare annotation was computed. [2019-12-07 20:09:59,523 INFO L246 CegarLoopResult]: For program point L575-6(lines 575 583) no Hoare annotation was computed. [2019-12-07 20:09:59,523 INFO L246 CegarLoopResult]: For program point L1368(lines 1368 1374) no Hoare annotation was computed. [2019-12-07 20:09:59,523 INFO L246 CegarLoopResult]: For program point L575-8(lines 575 583) no Hoare annotation was computed. [2019-12-07 20:09:59,523 INFO L246 CegarLoopResult]: For program point L1368-1(lines 1368 1374) no Hoare annotation was computed. [2019-12-07 20:09:59,523 INFO L246 CegarLoopResult]: For program point L575-10(lines 575 583) no Hoare annotation was computed. [2019-12-07 20:09:59,523 INFO L246 CegarLoopResult]: For program point L575-12(lines 575 583) no Hoare annotation was computed. [2019-12-07 20:09:59,523 INFO L246 CegarLoopResult]: For program point L575-14(lines 575 583) no Hoare annotation was computed. [2019-12-07 20:09:59,523 INFO L246 CegarLoopResult]: For program point L575-16(lines 575 583) no Hoare annotation was computed. [2019-12-07 20:09:59,523 INFO L246 CegarLoopResult]: For program point L575-18(lines 575 583) no Hoare annotation was computed. [2019-12-07 20:09:59,523 INFO L246 CegarLoopResult]: For program point L575-20(lines 575 583) no Hoare annotation was computed. [2019-12-07 20:09:59,523 INFO L242 CegarLoopResult]: At program point L1699(lines 1637 1705) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,523 INFO L242 CegarLoopResult]: At program point L1699-1(lines 1637 1705) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,524 INFO L242 CegarLoopResult]: At program point L1699-2(lines 1637 1705) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,524 INFO L242 CegarLoopResult]: At program point L1699-3(lines 1637 1705) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,524 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION(line 2579) no Hoare annotation was computed. [2019-12-07 20:09:59,524 INFO L246 CegarLoopResult]: For program point L2228(lines 2228 2240) no Hoare annotation was computed. [2019-12-07 20:09:59,524 INFO L246 CegarLoopResult]: For program point L115(lines 115 119) no Hoare annotation was computed. [2019-12-07 20:09:59,524 INFO L246 CegarLoopResult]: For program point L578(lines 578 582) no Hoare annotation was computed. [2019-12-07 20:09:59,524 INFO L242 CegarLoopResult]: At program point L578-2(lines 571 586) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,524 INFO L246 CegarLoopResult]: For program point L578-3(lines 578 582) no Hoare annotation was computed. [2019-12-07 20:09:59,524 INFO L242 CegarLoopResult]: At program point L578-5(lines 571 586) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse2 (= (_ bv1 32) ~bob~0)) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse4 (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse5 (= (_ bv2 32) ~rjh~0)) (.cse6 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse7 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse8 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse9 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse10 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= (_ bv2 32) ~__ste_email_to0~0) .cse6 .cse7 .cse8 .cse9 .cse10))) [2019-12-07 20:09:59,524 INFO L246 CegarLoopResult]: For program point L578-6(lines 578 582) no Hoare annotation was computed. [2019-12-07 20:09:59,524 INFO L242 CegarLoopResult]: At program point L578-8(lines 571 586) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,524 INFO L246 CegarLoopResult]: For program point L578-9(lines 578 582) no Hoare annotation was computed. [2019-12-07 20:09:59,524 INFO L242 CegarLoopResult]: At program point L578-11(lines 571 586) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,525 INFO L242 CegarLoopResult]: At program point L182(lines 169 219) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,525 INFO L246 CegarLoopResult]: For program point L578-12(lines 578 582) no Hoare annotation was computed. [2019-12-07 20:09:59,525 INFO L242 CegarLoopResult]: At program point L578-14(lines 571 586) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,525 INFO L246 CegarLoopResult]: For program point L578-15(lines 578 582) no Hoare annotation was computed. [2019-12-07 20:09:59,525 INFO L242 CegarLoopResult]: At program point L578-17(lines 571 586) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse6 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse8 (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse9 (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2)) (.cse10 (= (_ bv2 32) ~rjh~0)) (.cse11 (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse12 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse0 .cse1 .cse2 .cse3 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12))) [2019-12-07 20:09:59,525 INFO L246 CegarLoopResult]: For program point L578-18(lines 578 582) no Hoare annotation was computed. [2019-12-07 20:09:59,525 INFO L242 CegarLoopResult]: At program point L578-20(lines 571 586) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,525 INFO L246 CegarLoopResult]: For program point L578-21(lines 578 582) no Hoare annotation was computed. [2019-12-07 20:09:59,525 INFO L242 CegarLoopResult]: At program point L578-23(lines 571 586) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,525 INFO L246 CegarLoopResult]: For program point L578-24(lines 578 582) no Hoare annotation was computed. [2019-12-07 20:09:59,525 INFO L242 CegarLoopResult]: At program point L578-26(lines 571 586) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,525 INFO L246 CegarLoopResult]: For program point L578-27(lines 578 582) no Hoare annotation was computed. [2019-12-07 20:09:59,525 INFO L242 CegarLoopResult]: At program point L578-29(lines 571 586) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,525 INFO L246 CegarLoopResult]: For program point L578-30(lines 578 582) no Hoare annotation was computed. [2019-12-07 20:09:59,526 INFO L242 CegarLoopResult]: At program point L578-32(lines 571 586) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,526 INFO L246 CegarLoopResult]: For program point L2231(lines 2231 2239) no Hoare annotation was computed. [2019-12-07 20:09:59,526 INFO L242 CegarLoopResult]: At program point L1373(lines 1356 1379) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,526 INFO L242 CegarLoopResult]: At program point L1373-1(lines 1356 1379) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,526 INFO L246 CegarLoopResult]: For program point L2234(lines 2234 2238) no Hoare annotation was computed. [2019-12-07 20:09:59,526 INFO L242 CegarLoopResult]: At program point L2234-2(lines 1 2601) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,526 INFO L246 CegarLoopResult]: For program point L187(lines 187 191) no Hoare annotation was computed. [2019-12-07 20:09:59,526 INFO L242 CegarLoopResult]: At program point L121(lines 111 224) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,526 INFO L246 CegarLoopResult]: For program point L1641(lines 1641 1702) no Hoare annotation was computed. [2019-12-07 20:09:59,526 INFO L246 CegarLoopResult]: For program point L1641-1(lines 1641 1702) no Hoare annotation was computed. [2019-12-07 20:09:59,526 INFO L246 CegarLoopResult]: For program point L1641-2(lines 1641 1702) no Hoare annotation was computed. [2019-12-07 20:09:59,526 INFO L246 CegarLoopResult]: For program point L1641-3(lines 1641 1702) no Hoare annotation was computed. [2019-12-07 20:09:59,526 INFO L246 CegarLoopResult]: For program point L1642(lines 1642 1658) no Hoare annotation was computed. [2019-12-07 20:09:59,526 INFO L246 CegarLoopResult]: For program point L1642-1(lines 1642 1658) no Hoare annotation was computed. [2019-12-07 20:09:59,526 INFO L246 CegarLoopResult]: For program point L1576(lines 1576 1624) no Hoare annotation was computed. [2019-12-07 20:09:59,526 INFO L246 CegarLoopResult]: For program point L1642-2(lines 1642 1658) no Hoare annotation was computed. [2019-12-07 20:09:59,526 INFO L246 CegarLoopResult]: For program point L519(lines 519 530) no Hoare annotation was computed. [2019-12-07 20:09:59,527 INFO L246 CegarLoopResult]: For program point L1642-3(lines 1642 1658) no Hoare annotation was computed. [2019-12-07 20:09:59,527 INFO L246 CegarLoopResult]: For program point L519-1(lines 519 530) no Hoare annotation was computed. [2019-12-07 20:09:59,527 INFO L246 CegarLoopResult]: For program point L519-2(lines 519 530) no Hoare annotation was computed. [2019-12-07 20:09:59,527 INFO L246 CegarLoopResult]: For program point L519-3(lines 519 530) no Hoare annotation was computed. [2019-12-07 20:09:59,527 INFO L246 CegarLoopResult]: For program point L519-4(lines 519 530) no Hoare annotation was computed. [2019-12-07 20:09:59,527 INFO L246 CegarLoopResult]: For program point L519-5(lines 519 530) no Hoare annotation was computed. [2019-12-07 20:09:59,527 INFO L246 CegarLoopResult]: For program point L1577(lines 1577 1589) no Hoare annotation was computed. [2019-12-07 20:09:59,527 INFO L246 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2019-12-07 20:09:59,527 INFO L246 CegarLoopResult]: For program point L1710(lines 1710 1758) no Hoare annotation was computed. [2019-12-07 20:09:59,527 INFO L246 CegarLoopResult]: For program point L1710-1(lines 1710 1758) no Hoare annotation was computed. [2019-12-07 20:09:59,527 INFO L246 CegarLoopResult]: For program point L1711(lines 1711 1723) no Hoare annotation was computed. [2019-12-07 20:09:59,527 INFO L246 CegarLoopResult]: For program point L1711-2(lines 1711 1723) no Hoare annotation was computed. [2019-12-07 20:09:59,527 INFO L242 CegarLoopResult]: At program point L2372(lines 1 2601) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse6 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse8 (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse9 (= (_ bv2 32) ~rjh~0)) (.cse10 (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse11 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse1 (= ULTIMATE.start_incoming_~client (_ bv2 32)) .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))))) [2019-12-07 20:09:59,527 INFO L242 CegarLoopResult]: At program point L2372-2(lines 1 2601) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= ULTIMATE.start_incoming_~client (_ bv2 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))) [2019-12-07 20:09:59,527 INFO L242 CegarLoopResult]: At program point L2372-1(lines 1 2601) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,528 INFO L242 CegarLoopResult]: At program point L2372-4(lines 1 2601) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv2 32) ~rjh~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse0 (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) .cse1 .cse2 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (and .cse0 (= ULTIMATE.start_incoming_~client (_ bv2 32)) .cse1 (= (_ bv2 32) ~__ste_email_to0~0) .cse2 (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))))) [2019-12-07 20:09:59,528 INFO L242 CegarLoopResult]: At program point L2372-3(lines 1 2601) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,528 INFO L246 CegarLoopResult]: For program point L126(lines 126 130) no Hoare annotation was computed. [2019-12-07 20:09:59,528 INFO L242 CegarLoopResult]: At program point L2372-5(lines 1 2601) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv2 32) ~rjh~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and .cse0 (= ULTIMATE.start_incoming_~client (_ bv2 32)) .cse1 (= (_ bv2 32) ~__ste_email_to0~0) .cse2 (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))) (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse0 (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) .cse1 .cse2 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)))) [2019-12-07 20:09:59,528 INFO L246 CegarLoopResult]: For program point L1646(lines 1646 1657) no Hoare annotation was computed. [2019-12-07 20:09:59,528 INFO L246 CegarLoopResult]: For program point L1646-1(lines 1646 1657) no Hoare annotation was computed. [2019-12-07 20:09:59,528 INFO L246 CegarLoopResult]: For program point L1580(lines 1580 1588) no Hoare annotation was computed. [2019-12-07 20:09:59,528 INFO L246 CegarLoopResult]: For program point L1646-2(lines 1646 1657) no Hoare annotation was computed. [2019-12-07 20:09:59,528 INFO L246 CegarLoopResult]: For program point L523(lines 523 529) no Hoare annotation was computed. [2019-12-07 20:09:59,528 INFO L246 CegarLoopResult]: For program point L1646-3(lines 1646 1657) no Hoare annotation was computed. [2019-12-07 20:09:59,528 INFO L246 CegarLoopResult]: For program point L523-1(lines 523 529) no Hoare annotation was computed. [2019-12-07 20:09:59,528 INFO L246 CegarLoopResult]: For program point L523-2(lines 523 529) no Hoare annotation was computed. [2019-12-07 20:09:59,528 INFO L246 CegarLoopResult]: For program point L523-3(lines 523 529) no Hoare annotation was computed. [2019-12-07 20:09:59,528 INFO L242 CegarLoopResult]: At program point L391(lines 371 393) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= ~__ste_ClientAddressBook_size0~0 (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) ~__ste_client_forwardReceiver1~0)) [2019-12-07 20:09:59,528 INFO L246 CegarLoopResult]: For program point L523-4(lines 523 529) no Hoare annotation was computed. [2019-12-07 20:09:59,528 INFO L246 CegarLoopResult]: For program point L523-5(lines 523 529) no Hoare annotation was computed. [2019-12-07 20:09:59,528 INFO L242 CegarLoopResult]: At program point L193(lines 183 218) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,529 INFO L246 CegarLoopResult]: For program point L1714(lines 1714 1722) no Hoare annotation was computed. [2019-12-07 20:09:59,529 INFO L246 CegarLoopResult]: For program point L1714-2(lines 1714 1722) no Hoare annotation was computed. [2019-12-07 20:09:59,529 INFO L246 CegarLoopResult]: For program point L1384(lines 1384 1396) no Hoare annotation was computed. [2019-12-07 20:09:59,529 INFO L246 CegarLoopResult]: For program point L1583(lines 1583 1587) no Hoare annotation was computed. [2019-12-07 20:09:59,529 INFO L246 CegarLoopResult]: For program point L1650(lines 1650 1656) no Hoare annotation was computed. [2019-12-07 20:09:59,529 INFO L246 CegarLoopResult]: For program point L1650-1(lines 1650 1656) no Hoare annotation was computed. [2019-12-07 20:09:59,529 INFO L246 CegarLoopResult]: For program point L1650-2(lines 1650 1656) no Hoare annotation was computed. [2019-12-07 20:09:59,529 INFO L246 CegarLoopResult]: For program point L1650-3(lines 1650 1656) no Hoare annotation was computed. [2019-12-07 20:09:59,529 INFO L246 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2019-12-07 20:09:59,529 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 2579) no Hoare annotation was computed. [2019-12-07 20:09:59,529 INFO L246 CegarLoopResult]: For program point L1717(lines 1717 1721) no Hoare annotation was computed. [2019-12-07 20:09:59,529 INFO L246 CegarLoopResult]: For program point L1717-3(lines 1717 1721) no Hoare annotation was computed. [2019-12-07 20:09:59,529 INFO L242 CegarLoopResult]: At program point L528(lines 515 533) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,529 INFO L242 CegarLoopResult]: At program point L528-1(lines 515 533) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,530 INFO L242 CegarLoopResult]: At program point L528-2(lines 515 533) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse5 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse6 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse7 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse8 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse9 (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse10 (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2)) (.cse11 (= (_ bv2 32) ~rjh~0)) (.cse12 (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse13 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse14 (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|))) (or (and .cse0 .cse1 .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14) (and .cse0 .cse1 .cse2 .cse4 .cse3 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14))) [2019-12-07 20:09:59,530 INFO L242 CegarLoopResult]: At program point L528-3(lines 515 533) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,530 INFO L249 CegarLoopResult]: At program point L528-4(lines 515 533) the Hoare annotation is: true [2019-12-07 20:09:59,530 INFO L246 CegarLoopResult]: For program point L1387(lines 1387 1395) no Hoare annotation was computed. [2019-12-07 20:09:59,530 INFO L249 CegarLoopResult]: At program point L528-5(lines 515 533) the Hoare annotation is: true [2019-12-07 20:09:59,530 INFO L246 CegarLoopResult]: For program point L198(lines 198 202) no Hoare annotation was computed. [2019-12-07 20:09:59,530 INFO L242 CegarLoopResult]: At program point L132(lines 122 223) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,530 INFO L246 CegarLoopResult]: For program point L2579-1(line 2579) no Hoare annotation was computed. [2019-12-07 20:09:59,530 INFO L246 CegarLoopResult]: For program point L2579(line 2579) no Hoare annotation was computed. [2019-12-07 20:09:59,530 INFO L246 CegarLoopResult]: For program point L2579-3(line 2579) no Hoare annotation was computed. [2019-12-07 20:09:59,530 INFO L246 CegarLoopResult]: For program point L2579-2(line 2579) no Hoare annotation was computed. [2019-12-07 20:09:59,530 INFO L246 CegarLoopResult]: For program point L2579-5(line 2579) no Hoare annotation was computed. [2019-12-07 20:09:59,530 INFO L246 CegarLoopResult]: For program point L1390(lines 1390 1394) no Hoare annotation was computed. [2019-12-07 20:09:59,530 INFO L246 CegarLoopResult]: For program point L2579-4(line 2579) no Hoare annotation was computed. [2019-12-07 20:09:59,530 INFO L242 CegarLoopResult]: At program point L1390-2(lines 1380 1399) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,530 INFO L242 CegarLoopResult]: At program point L2580(lines 2584 2601) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,531 INFO L242 CegarLoopResult]: At program point L2580-2(lines 2584 2601) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse5 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse6 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse7 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse8 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse9 (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse10 (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2)) (.cse11 (= (_ bv2 32) ~rjh~0)) (.cse12 (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse13 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse14 (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|))) (or (and .cse0 .cse1 .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14) (and .cse0 .cse1 .cse2 .cse4 .cse3 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14))) [2019-12-07 20:09:59,531 INFO L242 CegarLoopResult]: At program point L2580-1(lines 2584 2601) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,531 INFO L249 CegarLoopResult]: At program point L2580-4(lines 2584 2601) the Hoare annotation is: true [2019-12-07 20:09:59,531 INFO L242 CegarLoopResult]: At program point L2580-3(lines 2584 2601) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,531 INFO L249 CegarLoopResult]: At program point L2580-5(lines 2584 2601) the Hoare annotation is: true [2019-12-07 20:09:59,531 INFO L242 CegarLoopResult]: At program point L2449(lines 2444 2452) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,531 INFO L246 CegarLoopResult]: For program point L2251-1(lines 2251 2267) no Hoare annotation was computed. [2019-12-07 20:09:59,531 INFO L246 CegarLoopResult]: For program point L2251(lines 2251 2267) no Hoare annotation was computed. [2019-12-07 20:09:59,531 INFO L246 CegarLoopResult]: For program point L137(lines 137 141) no Hoare annotation was computed. [2019-12-07 20:09:59,531 INFO L246 CegarLoopResult]: For program point L2251-3(lines 2251 2267) no Hoare annotation was computed. [2019-12-07 20:09:59,531 INFO L246 CegarLoopResult]: For program point L2251-2(lines 2251 2267) no Hoare annotation was computed. [2019-12-07 20:09:59,531 INFO L246 CegarLoopResult]: For program point L2251-5(lines 2251 2267) no Hoare annotation was computed. [2019-12-07 20:09:59,531 INFO L246 CegarLoopResult]: For program point L2251-4(lines 2251 2267) no Hoare annotation was computed. [2019-12-07 20:09:59,531 INFO L246 CegarLoopResult]: For program point L1591(lines 1591 1623) no Hoare annotation was computed. [2019-12-07 20:09:59,531 INFO L242 CegarLoopResult]: At program point L204(lines 194 217) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L1592(lines 1592 1604) no Hoare annotation was computed. [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L1725(lines 1725 1757) no Hoare annotation was computed. [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L1725-1(lines 1725 1757) no Hoare annotation was computed. [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L404(lines 404 411) no Hoare annotation was computed. [2019-12-07 20:09:59,532 INFO L249 CegarLoopResult]: At program point L404-1(lines 404 411) the Hoare annotation is: true [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L1726(lines 1726 1738) no Hoare annotation was computed. [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L1726-2(lines 1726 1738) no Hoare annotation was computed. [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L1660(lines 1660 1701) no Hoare annotation was computed. [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L1660-1(lines 1660 1701) no Hoare annotation was computed. [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L1660-2(lines 1660 1701) no Hoare annotation was computed. [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L1660-3(lines 1660 1701) no Hoare annotation was computed. [2019-12-07 20:09:59,532 INFO L242 CegarLoopResult]: At program point L273(lines 1 2601) the Hoare annotation is: (and (not (= (bvadd ~rjh~0 (_ bv4294967295 32)) (_ bv0 32))) (= ~__ste_ClientAddressBook_size0~0 (_ bv0 32)) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv0 32) ~__ste_client_forwardReceiver1~0)) [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L2255-1(lines 2255 2266) no Hoare annotation was computed. [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L2255(lines 2255 2266) no Hoare annotation was computed. [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L2255-3(lines 2255 2266) no Hoare annotation was computed. [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L2255-2(lines 2255 2266) no Hoare annotation was computed. [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L2255-5(lines 2255 2266) no Hoare annotation was computed. [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L2255-4(lines 2255 2266) no Hoare annotation was computed. [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L1661(lines 1661 1677) no Hoare annotation was computed. [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L1661-1(lines 1661 1677) no Hoare annotation was computed. [2019-12-07 20:09:59,532 INFO L246 CegarLoopResult]: For program point L1595(lines 1595 1603) no Hoare annotation was computed. [2019-12-07 20:09:59,533 INFO L246 CegarLoopResult]: For program point L1661-2(lines 1661 1677) no Hoare annotation was computed. [2019-12-07 20:09:59,533 INFO L246 CegarLoopResult]: For program point L538(lines 538 546) no Hoare annotation was computed. [2019-12-07 20:09:59,533 INFO L246 CegarLoopResult]: For program point L1661-3(lines 1661 1677) no Hoare annotation was computed. [2019-12-07 20:09:59,533 INFO L246 CegarLoopResult]: For program point L538-2(lines 538 546) no Hoare annotation was computed. [2019-12-07 20:09:59,533 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 2579) no Hoare annotation was computed. [2019-12-07 20:09:59,533 INFO L246 CegarLoopResult]: For program point L538-4(lines 538 546) no Hoare annotation was computed. [2019-12-07 20:09:59,533 INFO L246 CegarLoopResult]: For program point L538-6(lines 538 546) no Hoare annotation was computed. [2019-12-07 20:09:59,533 INFO L246 CegarLoopResult]: For program point L538-8(lines 538 546) no Hoare annotation was computed. [2019-12-07 20:09:59,533 INFO L246 CegarLoopResult]: For program point L538-10(lines 538 546) no Hoare annotation was computed. [2019-12-07 20:09:59,533 INFO L246 CegarLoopResult]: For program point L538-12(lines 538 546) no Hoare annotation was computed. [2019-12-07 20:09:59,533 INFO L242 CegarLoopResult]: At program point L2521-1(lines 2496 2523) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,533 INFO L242 CegarLoopResult]: At program point L2521(lines 2496 2523) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,533 INFO L242 CegarLoopResult]: At program point L2521-3(lines 2496 2523) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,533 INFO L242 CegarLoopResult]: At program point L2521-2(lines 2496 2523) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32)))) (.cse6 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse7 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse9 (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse8 (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2)) (.cse10 (= (_ bv2 32) ~rjh~0)) (.cse11 (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse12 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse13 (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|))) (or (and .cse0 .cse1 .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse4 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse3 .cse6 .cse5 .cse7 .cse9 .cse8 .cse10 .cse11 .cse12 .cse13))) [2019-12-07 20:09:59,534 INFO L249 CegarLoopResult]: At program point L2521-5(lines 2496 2523) the Hoare annotation is: true [2019-12-07 20:09:59,534 INFO L249 CegarLoopResult]: At program point L2521-4(lines 2496 2523) the Hoare annotation is: true [2019-12-07 20:09:59,534 INFO L246 CegarLoopResult]: For program point L209(lines 209 213) no Hoare annotation was computed. [2019-12-07 20:09:59,534 INFO L242 CegarLoopResult]: At program point L209-1(lines 81 227) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,534 INFO L242 CegarLoopResult]: At program point L143(lines 133 222) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,534 INFO L246 CegarLoopResult]: For program point L1729(lines 1729 1737) no Hoare annotation was computed. [2019-12-07 20:09:59,534 INFO L246 CegarLoopResult]: For program point L1729-2(lines 1729 1737) no Hoare annotation was computed. [2019-12-07 20:09:59,534 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION(line 2579) no Hoare annotation was computed. [2019-12-07 20:09:59,534 INFO L246 CegarLoopResult]: For program point L1598(lines 1598 1602) no Hoare annotation was computed. [2019-12-07 20:09:59,534 INFO L246 CegarLoopResult]: For program point L541(lines 541 545) no Hoare annotation was computed. [2019-12-07 20:09:59,534 INFO L242 CegarLoopResult]: At program point L541-2(lines 534 549) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,534 INFO L246 CegarLoopResult]: For program point L541-3(lines 541 545) no Hoare annotation was computed. [2019-12-07 20:09:59,534 INFO L242 CegarLoopResult]: At program point L541-5(lines 534 549) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse5 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse6 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse8 (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse9 (= (_ bv2 32) ~rjh~0)) (.cse10 (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse11 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse1 .cse2 .cse3 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11))) [2019-12-07 20:09:59,534 INFO L246 CegarLoopResult]: For program point L541-6(lines 541 545) no Hoare annotation was computed. [2019-12-07 20:09:59,534 INFO L242 CegarLoopResult]: At program point L541-8(lines 534 549) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,535 INFO L246 CegarLoopResult]: For program point L541-9(lines 541 545) no Hoare annotation was computed. [2019-12-07 20:09:59,535 INFO L246 CegarLoopResult]: For program point L2259-1(lines 2259 2265) no Hoare annotation was computed. [2019-12-07 20:09:59,535 INFO L246 CegarLoopResult]: For program point L2259(lines 2259 2265) no Hoare annotation was computed. [2019-12-07 20:09:59,535 INFO L242 CegarLoopResult]: At program point L541-11(lines 534 549) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,535 INFO L246 CegarLoopResult]: For program point L2259-3(lines 2259 2265) no Hoare annotation was computed. [2019-12-07 20:09:59,535 INFO L246 CegarLoopResult]: For program point L541-12(lines 541 545) no Hoare annotation was computed. [2019-12-07 20:09:59,535 INFO L246 CegarLoopResult]: For program point L2259-2(lines 2259 2265) no Hoare annotation was computed. [2019-12-07 20:09:59,535 INFO L242 CegarLoopResult]: At program point L541-14(lines 534 549) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,535 INFO L246 CegarLoopResult]: For program point L2259-5(lines 2259 2265) no Hoare annotation was computed. [2019-12-07 20:09:59,535 INFO L246 CegarLoopResult]: For program point L2259-4(lines 2259 2265) no Hoare annotation was computed. [2019-12-07 20:09:59,535 INFO L246 CegarLoopResult]: For program point L541-15(lines 541 545) no Hoare annotation was computed. [2019-12-07 20:09:59,535 INFO L242 CegarLoopResult]: At program point L541-17(lines 534 549) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,535 INFO L246 CegarLoopResult]: For program point L541-18(lines 541 545) no Hoare annotation was computed. [2019-12-07 20:09:59,535 INFO L242 CegarLoopResult]: At program point L541-20(lines 534 549) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,535 INFO L246 CegarLoopResult]: For program point L1665(lines 1665 1676) no Hoare annotation was computed. [2019-12-07 20:09:59,535 INFO L246 CegarLoopResult]: For program point L1665-1(lines 1665 1676) no Hoare annotation was computed. [2019-12-07 20:09:59,535 INFO L246 CegarLoopResult]: For program point L1665-2(lines 1665 1676) no Hoare annotation was computed. [2019-12-07 20:09:59,536 INFO L246 CegarLoopResult]: For program point L1665-3(lines 1665 1676) no Hoare annotation was computed. [2019-12-07 20:09:59,536 INFO L242 CegarLoopResult]: At program point L2458(lines 2453 2461) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,536 INFO L246 CegarLoopResult]: For program point L1732(lines 1732 1736) no Hoare annotation was computed. [2019-12-07 20:09:59,536 INFO L246 CegarLoopResult]: For program point L1732-3(lines 1732 1736) no Hoare annotation was computed. [2019-12-07 20:09:59,536 INFO L246 CegarLoopResult]: For program point L2592(lines 2592 2598) no Hoare annotation was computed. [2019-12-07 20:09:59,536 INFO L246 CegarLoopResult]: For program point L2592-2(lines 2592 2598) no Hoare annotation was computed. [2019-12-07 20:09:59,536 INFO L246 CegarLoopResult]: For program point L2592-4(lines 2592 2598) no Hoare annotation was computed. [2019-12-07 20:09:59,536 INFO L249 CegarLoopResult]: At program point L412(lines 394 414) the Hoare annotation is: true [2019-12-07 20:09:59,536 INFO L246 CegarLoopResult]: For program point L2592-6(lines 2592 2598) no Hoare annotation was computed. [2019-12-07 20:09:59,536 INFO L246 CegarLoopResult]: For program point L2592-8(lines 2592 2598) no Hoare annotation was computed. [2019-12-07 20:09:59,536 INFO L246 CegarLoopResult]: For program point L2592-10(lines 2592 2598) no Hoare annotation was computed. [2019-12-07 20:09:59,536 INFO L246 CegarLoopResult]: For program point L148(lines 148 155) no Hoare annotation was computed. [2019-12-07 20:09:59,536 INFO L246 CegarLoopResult]: For program point L82(lines 81 227) no Hoare annotation was computed. [2019-12-07 20:09:59,536 INFO L242 CegarLoopResult]: At program point L2395-1(lines 2316 2327) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,536 INFO L246 CegarLoopResult]: For program point L2395(lines 2395 2402) no Hoare annotation was computed. [2019-12-07 20:09:59,536 INFO L242 CegarLoopResult]: At program point L281(lines 276 284) the Hoare annotation is: (and (not (= (bvadd ~rjh~0 (_ bv4294967295 32)) (_ bv0 32))) (= ~__ste_ClientAddressBook_size0~0 (_ bv0 32)) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) ~__ste_client_forwardReceiver1~0)) [2019-12-07 20:09:59,536 INFO L246 CegarLoopResult]: For program point L2395-2(lines 2395 2402) no Hoare annotation was computed. [2019-12-07 20:09:59,537 INFO L242 CegarLoopResult]: At program point L2395-5(lines 2421 2433) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,537 INFO L246 CegarLoopResult]: For program point L2395-4(lines 2395 2402) no Hoare annotation was computed. [2019-12-07 20:09:59,537 INFO L242 CegarLoopResult]: At program point L2395-7(lines 2316 2327) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,537 INFO L246 CegarLoopResult]: For program point L2395-6(lines 2395 2402) no Hoare annotation was computed. [2019-12-07 20:09:59,537 INFO L246 CegarLoopResult]: For program point L83(lines 83 87) no Hoare annotation was computed. [2019-12-07 20:09:59,537 INFO L246 CegarLoopResult]: For program point L2395-8(lines 2395 2402) no Hoare annotation was computed. [2019-12-07 20:09:59,537 INFO L246 CegarLoopResult]: For program point L2395-10(lines 2395 2402) no Hoare annotation was computed. [2019-12-07 20:09:59,537 INFO L246 CegarLoopResult]: For program point L1669(lines 1669 1675) no Hoare annotation was computed. [2019-12-07 20:09:59,537 INFO L246 CegarLoopResult]: For program point L1669-1(lines 1669 1675) no Hoare annotation was computed. [2019-12-07 20:09:59,537 INFO L246 CegarLoopResult]: For program point L1669-2(lines 1669 1675) no Hoare annotation was computed. [2019-12-07 20:09:59,537 INFO L246 CegarLoopResult]: For program point L1669-3(lines 1669 1675) no Hoare annotation was computed. [2019-12-07 20:09:59,537 INFO L246 CegarLoopResult]: For program point L348(lines 348 356) no Hoare annotation was computed. [2019-12-07 20:09:59,537 INFO L242 CegarLoopResult]: At program point L2264(lines 2247 2270) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse5 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse6 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse8 (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse9 (= (_ bv2 32) ~rjh~0)) (.cse10 (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse11 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse1 .cse2 .cse3 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11))) [2019-12-07 20:09:59,537 INFO L242 CegarLoopResult]: At program point L2264-2(lines 2247 2270) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,538 INFO L242 CegarLoopResult]: At program point L2264-1(lines 2247 2270) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,538 INFO L242 CegarLoopResult]: At program point L2264-4(lines 2247 2270) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,538 INFO L242 CegarLoopResult]: At program point L2264-3(lines 2247 2270) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,538 INFO L242 CegarLoopResult]: At program point L2264-5(lines 2247 2270) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,538 INFO L242 CegarLoopResult]: At program point L2529-1(lines 2524 2532) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,538 INFO L242 CegarLoopResult]: At program point L2529(lines 2524 2532) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,538 INFO L242 CegarLoopResult]: At program point L2529-3(lines 2524 2532) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,538 INFO L242 CegarLoopResult]: At program point L2529-2(lines 2524 2532) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,538 INFO L242 CegarLoopResult]: At program point L2529-5(lines 2524 2532) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32)))) (.cse6 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse7 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse9 (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse8 (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2)) (.cse10 (= (_ bv2 32) ~rjh~0)) (.cse11 (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse12 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse13 (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|))) (or (and .cse0 .cse1 .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse4 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse3 .cse6 .cse5 .cse7 .cse9 .cse8 .cse10 .cse11 .cse12 .cse13))) [2019-12-07 20:09:59,539 INFO L242 CegarLoopResult]: At program point L2529-4(lines 2524 2532) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse6 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse8 (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse9 (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2)) (.cse10 (= (_ bv2 32) ~rjh~0)) (.cse11 (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse12 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse13 (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|))) (or (and .cse0 .cse1 .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse3 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13))) [2019-12-07 20:09:59,539 INFO L242 CegarLoopResult]: At program point L2529-7(lines 2524 2532) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,539 INFO L242 CegarLoopResult]: At program point L2529-6(lines 2524 2532) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,539 INFO L249 CegarLoopResult]: At program point L2529-9(lines 2524 2532) the Hoare annotation is: true [2019-12-07 20:09:59,539 INFO L242 CegarLoopResult]: At program point L2529-8(lines 2524 2532) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,539 INFO L249 CegarLoopResult]: At program point L2529-11(lines 2524 2532) the Hoare annotation is: true [2019-12-07 20:09:59,539 INFO L242 CegarLoopResult]: At program point L2529-10(lines 2524 2532) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,539 INFO L246 CegarLoopResult]: For program point L482(lines 482 493) no Hoare annotation was computed. [2019-12-07 20:09:59,539 INFO L246 CegarLoopResult]: For program point L482-1(lines 482 493) no Hoare annotation was computed. [2019-12-07 20:09:59,539 INFO L246 CegarLoopResult]: For program point L482-2(lines 482 493) no Hoare annotation was computed. [2019-12-07 20:09:59,539 INFO L246 CegarLoopResult]: For program point L482-3(lines 482 493) no Hoare annotation was computed. [2019-12-07 20:09:59,539 INFO L246 CegarLoopResult]: For program point L482-4(lines 482 493) no Hoare annotation was computed. [2019-12-07 20:09:59,539 INFO L246 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2019-12-07 20:09:59,539 INFO L246 CegarLoopResult]: For program point L482-5(lines 482 493) no Hoare annotation was computed. [2019-12-07 20:09:59,539 INFO L246 CegarLoopResult]: For program point L1606(lines 1606 1622) no Hoare annotation was computed. [2019-12-07 20:09:59,539 INFO L242 CegarLoopResult]: At program point L1606-1(lines 1572 1627) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,540 INFO L246 CegarLoopResult]: For program point L1607(lines 1607 1619) no Hoare annotation was computed. [2019-12-07 20:09:59,540 INFO L246 CegarLoopResult]: For program point L1740(lines 1740 1756) no Hoare annotation was computed. [2019-12-07 20:09:59,540 INFO L242 CegarLoopResult]: At program point L1740-1(lines 1706 1761) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,540 INFO L246 CegarLoopResult]: For program point L1740-2(lines 1740 1756) no Hoare annotation was computed. [2019-12-07 20:09:59,540 INFO L242 CegarLoopResult]: At program point L1740-3(lines 1 2601) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,540 INFO L242 CegarLoopResult]: At program point L2467(lines 2462 2470) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,540 INFO L246 CegarLoopResult]: For program point L89(lines 89 226) no Hoare annotation was computed. [2019-12-07 20:09:59,540 INFO L246 CegarLoopResult]: For program point L1741(lines 1741 1753) no Hoare annotation was computed. [2019-12-07 20:09:59,540 INFO L246 CegarLoopResult]: For program point L1741-2(lines 1741 1753) no Hoare annotation was computed. [2019-12-07 20:09:59,540 INFO L246 CegarLoopResult]: For program point L486(lines 486 492) no Hoare annotation was computed. [2019-12-07 20:09:59,540 INFO L246 CegarLoopResult]: For program point L486-1(lines 486 492) no Hoare annotation was computed. [2019-12-07 20:09:59,540 INFO L246 CegarLoopResult]: For program point L486-2(lines 486 492) no Hoare annotation was computed. [2019-12-07 20:09:59,540 INFO L246 CegarLoopResult]: For program point L486-3(lines 486 492) no Hoare annotation was computed. [2019-12-07 20:09:59,540 INFO L246 CegarLoopResult]: For program point L486-4(lines 486 492) no Hoare annotation was computed. [2019-12-07 20:09:59,540 INFO L246 CegarLoopResult]: For program point L486-5(lines 486 492) no Hoare annotation was computed. [2019-12-07 20:09:59,540 INFO L246 CegarLoopResult]: For program point L2204(lines 2204 2220) no Hoare annotation was computed. [2019-12-07 20:09:59,540 INFO L246 CegarLoopResult]: For program point L2204-2(lines 2204 2220) no Hoare annotation was computed. [2019-12-07 20:09:59,540 INFO L246 CegarLoopResult]: For program point L2204-1(lines 2204 2220) no Hoare annotation was computed. [2019-12-07 20:09:59,540 INFO L246 CegarLoopResult]: For program point L2204-4(lines 2204 2220) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L2204-3(lines 2204 2220) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L2204-5(lines 2204 2220) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L1610(lines 1610 1618) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L242 CegarLoopResult]: At program point L157(lines 144 221) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L1744(lines 1744 1752) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L1744-2(lines 1744 1752) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L93(lines 93 97) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L1679(lines 1679 1700) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L1679-1(lines 1679 1700) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L1613(lines 1613 1617) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L1679-2(lines 1679 1700) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L556(lines 556 567) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L1679-3(lines 1679 1700) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L556-1(lines 556 567) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L556-2(lines 556 567) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L556-3(lines 556 567) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L556-4(lines 556 567) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L556-5(lines 556 567) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L556-6(lines 556 567) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L556-7(lines 556 567) no Hoare annotation was computed. [2019-12-07 20:09:59,541 INFO L246 CegarLoopResult]: For program point L556-8(lines 556 567) no Hoare annotation was computed. [2019-12-07 20:09:59,542 INFO L246 CegarLoopResult]: For program point L556-9(lines 556 567) no Hoare annotation was computed. [2019-12-07 20:09:59,542 INFO L246 CegarLoopResult]: For program point L556-10(lines 556 567) no Hoare annotation was computed. [2019-12-07 20:09:59,542 INFO L246 CegarLoopResult]: For program point L2208(lines 2208 2219) no Hoare annotation was computed. [2019-12-07 20:09:59,542 INFO L246 CegarLoopResult]: For program point L556-11(lines 556 567) no Hoare annotation was computed. [2019-12-07 20:09:59,542 INFO L246 CegarLoopResult]: For program point L556-12(lines 556 567) no Hoare annotation was computed. [2019-12-07 20:09:59,542 INFO L246 CegarLoopResult]: For program point L2208-2(lines 2208 2219) no Hoare annotation was computed. [2019-12-07 20:09:59,542 INFO L246 CegarLoopResult]: For program point L556-13(lines 556 567) no Hoare annotation was computed. [2019-12-07 20:09:59,542 INFO L246 CegarLoopResult]: For program point L2208-1(lines 2208 2219) no Hoare annotation was computed. [2019-12-07 20:09:59,542 INFO L246 CegarLoopResult]: For program point L2208-4(lines 2208 2219) no Hoare annotation was computed. [2019-12-07 20:09:59,542 INFO L246 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2019-12-07 20:09:59,542 INFO L246 CegarLoopResult]: For program point L2208-3(lines 2208 2219) no Hoare annotation was computed. [2019-12-07 20:09:59,542 INFO L246 CegarLoopResult]: For program point L2208-5(lines 2208 2219) no Hoare annotation was computed. [2019-12-07 20:09:59,542 INFO L246 CegarLoopResult]: For program point L1680(lines 1680 1696) no Hoare annotation was computed. [2019-12-07 20:09:59,542 INFO L246 CegarLoopResult]: For program point L1680-1(lines 1680 1696) no Hoare annotation was computed. [2019-12-07 20:09:59,542 INFO L246 CegarLoopResult]: For program point L1680-2(lines 1680 1696) no Hoare annotation was computed. [2019-12-07 20:09:59,542 INFO L246 CegarLoopResult]: For program point L1680-3(lines 1680 1696) no Hoare annotation was computed. [2019-12-07 20:09:59,542 INFO L242 CegarLoopResult]: At program point L491(lines 478 496) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,542 INFO L242 CegarLoopResult]: At program point L491-1(lines 478 496) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,543 INFO L242 CegarLoopResult]: At program point L491-2(lines 478 496) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse5 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse6 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse7 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse8 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse9 (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse10 (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2)) (.cse11 (= (_ bv2 32) ~rjh~0)) (.cse12 (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse13 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse14 (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|))) (or (and .cse0 .cse1 .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14) (and .cse0 .cse1 .cse2 .cse4 .cse3 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14))) [2019-12-07 20:09:59,543 INFO L242 CegarLoopResult]: At program point L491-3(lines 478 496) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~15 (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:09:59,543 INFO L249 CegarLoopResult]: At program point L491-4(lines 478 496) the Hoare annotation is: true [2019-12-07 20:09:59,543 INFO L249 CegarLoopResult]: At program point L491-5(lines 478 496) the Hoare annotation is: true [2019-12-07 20:09:59,543 INFO L246 CegarLoopResult]: For program point L2275(lines 2275 2287) no Hoare annotation was computed. [2019-12-07 20:09:59,543 INFO L246 CegarLoopResult]: For program point L2275-2(lines 2275 2287) no Hoare annotation was computed. [2019-12-07 20:09:59,543 INFO L246 CegarLoopResult]: For program point L2275-4(lines 2275 2287) no Hoare annotation was computed. [2019-12-07 20:09:59,543 INFO L246 CegarLoopResult]: For program point L1747(lines 1747 1751) no Hoare annotation was computed. [2019-12-07 20:09:59,543 INFO L246 CegarLoopResult]: For program point L1747-3(lines 1747 1751) no Hoare annotation was computed. [2019-12-07 20:09:59,543 INFO L246 CegarLoopResult]: For program point L2342(lines 2342 2361) no Hoare annotation was computed. [2019-12-07 20:09:59,543 INFO L242 CegarLoopResult]: At program point L228(lines 80 229) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,543 INFO L246 CegarLoopResult]: For program point L2342-1(lines 2342 2361) no Hoare annotation was computed. [2019-12-07 20:09:59,543 INFO L246 CegarLoopResult]: For program point L162(lines 162 166) no Hoare annotation was computed. [2019-12-07 20:09:59,543 INFO L242 CegarLoopResult]: At program point L2475-1(lines 2471 2477) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_outgoing__wrappee__Base_~msg (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,543 INFO L242 CegarLoopResult]: At program point L2475(lines 2471 2477) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_createEmail_#res| (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:09:59,543 INFO L246 CegarLoopResult]: For program point L560(lines 560 566) no Hoare annotation was computed. [2019-12-07 20:09:59,544 INFO L246 CegarLoopResult]: For program point L560-1(lines 560 566) no Hoare annotation was computed. [2019-12-07 20:09:59,544 INFO L246 CegarLoopResult]: For program point L560-2(lines 560 566) no Hoare annotation was computed. [2019-12-07 20:09:59,544 INFO L246 CegarLoopResult]: For program point L560-3(lines 560 566) no Hoare annotation was computed. [2019-12-07 20:09:59,544 INFO L246 CegarLoopResult]: For program point L560-4(lines 560 566) no Hoare annotation was computed. [2019-12-07 20:09:59,544 INFO L246 CegarLoopResult]: For program point L560-5(lines 560 566) no Hoare annotation was computed. [2019-12-07 20:09:59,544 INFO L246 CegarLoopResult]: For program point L560-6(lines 560 566) no Hoare annotation was computed. [2019-12-07 20:09:59,544 INFO L246 CegarLoopResult]: For program point L560-7(lines 560 566) no Hoare annotation was computed. [2019-12-07 20:09:59,544 INFO L246 CegarLoopResult]: For program point L560-8(lines 560 566) no Hoare annotation was computed. [2019-12-07 20:09:59,544 INFO L246 CegarLoopResult]: For program point L2278(lines 2278 2286) no Hoare annotation was computed. [2019-12-07 20:09:59,544 INFO L246 CegarLoopResult]: For program point L560-9(lines 560 566) no Hoare annotation was computed. [2019-12-07 20:09:59,544 INFO L246 CegarLoopResult]: For program point L560-10(lines 560 566) no Hoare annotation was computed. [2019-12-07 20:09:59,544 INFO L246 CegarLoopResult]: For program point L2278-2(lines 2278 2286) no Hoare annotation was computed. [2019-12-07 20:09:59,544 INFO L246 CegarLoopResult]: For program point L2212(lines 2212 2218) no Hoare annotation was computed. [2019-12-07 20:09:59,544 INFO L246 CegarLoopResult]: For program point L560-11(lines 560 566) no Hoare annotation was computed. [2019-12-07 20:09:59,544 INFO L246 CegarLoopResult]: For program point L560-12(lines 560 566) no Hoare annotation was computed. [2019-12-07 20:09:59,544 INFO L246 CegarLoopResult]: For program point L2278-4(lines 2278 2286) no Hoare annotation was computed. [2019-12-07 20:09:59,545 INFO L246 CegarLoopResult]: For program point L2212-2(lines 2212 2218) no Hoare annotation was computed. [2019-12-07 20:09:59,545 INFO L246 CegarLoopResult]: For program point L560-13(lines 560 566) no Hoare annotation was computed. [2019-12-07 20:09:59,545 INFO L246 CegarLoopResult]: For program point L2212-1(lines 2212 2218) no Hoare annotation was computed. [2019-12-07 20:09:59,545 INFO L246 CegarLoopResult]: For program point L2212-4(lines 2212 2218) no Hoare annotation was computed. [2019-12-07 20:09:59,545 INFO L246 CegarLoopResult]: For program point L2212-3(lines 2212 2218) no Hoare annotation was computed. [2019-12-07 20:09:59,545 INFO L246 CegarLoopResult]: For program point L2212-5(lines 2212 2218) no Hoare annotation was computed. [2019-12-07 20:09:59,545 INFO L246 CegarLoopResult]: For program point L1684(lines 1684 1695) no Hoare annotation was computed. [2019-12-07 20:09:59,545 INFO L246 CegarLoopResult]: For program point L1684-1(lines 1684 1695) no Hoare annotation was computed. [2019-12-07 20:09:59,545 INFO L246 CegarLoopResult]: For program point L1684-2(lines 1684 1695) no Hoare annotation was computed. [2019-12-07 20:09:59,545 INFO L246 CegarLoopResult]: For program point L1684-3(lines 1684 1695) no Hoare annotation was computed. [2019-12-07 20:09:59,545 INFO L242 CegarLoopResult]: At program point L99(lines 89 226) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:09:59,545 INFO L246 CegarLoopResult]: For program point L2281(lines 2281 2285) no Hoare annotation was computed. [2019-12-07 20:09:59,545 INFO L246 CegarLoopResult]: For program point L2281-3(lines 2281 2285) no Hoare annotation was computed. [2019-12-07 20:09:59,546 INFO L242 CegarLoopResult]: At program point L2281-2(lines 1 2601) the Hoare annotation is: (and (not (= (bvadd ~rjh~0 (_ bv4294967295 32)) (_ bv0 32))) (= (_ bv1 32) ~bob~0) (= ~__ste_ClientAddressBook_size0~0 (_ bv0 32)) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (not (= (_ bv2 32) ULTIMATE.start_setClientId_~handle))) [2019-12-07 20:09:59,546 INFO L242 CegarLoopResult]: At program point L2281-5(lines 1 2601) the Hoare annotation is: (and (= (_ bv2 32) ULTIMATE.start_setClientId_~handle) (= (_ bv1 32) ~bob~0) (= ~__ste_ClientAddressBook_size0~0 (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) ~__ste_client_forwardReceiver1~0)) [2019-12-07 20:09:59,546 INFO L246 CegarLoopResult]: For program point L2281-6(lines 2281 2285) no Hoare annotation was computed. [2019-12-07 20:09:59,624 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 07.12 08:09:59 BoogieIcfgContainer [2019-12-07 20:09:59,624 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-12-07 20:09:59,624 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-12-07 20:09:59,624 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-12-07 20:09:59,625 INFO L275 PluginConnector]: Witness Printer initialized [2019-12-07 20:09:59,625 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 08:08:01" (3/4) ... [2019-12-07 20:09:59,628 INFO L137 WitnessPrinter]: Generating witness for correct program [2019-12-07 20:09:59,664 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 168 nodes and edges [2019-12-07 20:09:59,668 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 87 nodes and edges [2019-12-07 20:09:59,672 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2019-12-07 20:09:59,675 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2019-12-07 20:09:59,679 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-12-07 20:09:59,683 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-12-07 20:09:59,706 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(~bvadd64(rjh, 4294967295bv32) == 0bv32) && __ste_ClientAddressBook_size0 == 0bv32) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1 [2019-12-07 20:09:59,706 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(~bvadd64(rjh, 4294967295bv32) == 0bv32) && 1bv32 == bob) && __ste_ClientAddressBook_size0 == 0bv32) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1) && !(2bv32 == handle) [2019-12-07 20:09:59,706 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2bv32 == handle && 1bv32 == bob) && __ste_ClientAddressBook_size0 == 0bv32) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1 [2019-12-07 20:09:59,706 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && __ste_ClientAddressBook_size0 == 0bv32) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1 [2019-12-07 20:09:59,706 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && __ste_ClientAddressBook_size0 == 0bv32) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1 [2019-12-07 20:09:59,707 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result [2019-12-07 20:09:59,707 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result [2019-12-07 20:09:59,707 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result [2019-12-07 20:09:59,707 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result [2019-12-07 20:09:59,707 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result [2019-12-07 20:09:59,707 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result [2019-12-07 20:09:59,707 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result [2019-12-07 20:09:59,708 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result [2019-12-07 20:09:59,708 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result [2019-12-07 20:09:59,708 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result [2019-12-07 20:09:59,708 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result [2019-12-07 20:09:59,708 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result [2019-12-07 20:09:59,708 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result [2019-12-07 20:09:59,708 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result [2019-12-07 20:09:59,709 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:09:59,709 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result [2019-12-07 20:09:59,709 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:09:59,709 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:09:59,709 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result [2019-12-07 20:09:59,710 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result [2019-12-07 20:09:59,710 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,710 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,711 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,711 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,711 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,711 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,712 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32 [2019-12-07 20:09:59,712 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) [2019-12-07 20:09:59,712 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32 [2019-12-07 20:09:59,712 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) [2019-12-07 20:09:59,712 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,712 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) [2019-12-07 20:09:59,713 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,713 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) [2019-12-07 20:09:59,713 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,713 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) [2019-12-07 20:09:59,713 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,713 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) || ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) [2019-12-07 20:09:59,713 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) [2019-12-07 20:09:59,713 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,714 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) || (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) [2019-12-07 20:09:59,714 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) [2019-12-07 20:09:59,714 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,714 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,714 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,714 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,714 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) || (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) [2019-12-07 20:09:59,715 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,715 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,715 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:09:59,715 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) || (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) [2019-12-07 20:09:59,715 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:09:59,716 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:09:59,716 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,716 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,716 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:09:59,716 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,716 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) || ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) [2019-12-07 20:09:59,716 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,717 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(\result, 4294967294bv32) == 0bv32) || ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) [2019-12-07 20:09:59,717 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:09:59,717 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) || ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) [2019-12-07 20:09:59,717 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,717 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,717 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) || ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) [2019-12-07 20:09:59,717 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:09:59,717 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((~bvadd64(handle, 4294967293bv32) == 0bv32 && client == 2bv32) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(\result, 4294967294bv32) == 0bv32) || ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) [2019-12-07 20:09:59,717 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:09:59,717 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,718 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == \result) [2019-12-07 20:09:59,718 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:09:59,718 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,718 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:09:59,718 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:09:59,718 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:09:59,718 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:09:59,718 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:09:59,718 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:09:59,718 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result [2019-12-07 20:09:59,719 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:09:59,719 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:09:59,719 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:09:59,719 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:09:59,719 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:09:59,719 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:09:59,719 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:09:59,720 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:09:59,720 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:09:59,720 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result [2019-12-07 20:09:59,720 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:09:59,720 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result [2019-12-07 20:09:59,720 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:09:59,720 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:09:59,721 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:09:59,721 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result [2019-12-07 20:09:59,721 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(\result, 4294967294bv32) == 0bv32) [2019-12-07 20:09:59,721 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:09:59,721 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:09:59,721 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result [2019-12-07 20:09:59,721 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || ((((((~bvadd64(handle, 4294967293bv32) == 0bv32 && client == 2bv32) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(\result, 4294967294bv32) == 0bv32) [2019-12-07 20:09:59,721 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == \result) [2019-12-07 20:09:59,721 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result [2019-12-07 20:09:59,722 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:09:59,722 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result [2019-12-07 20:09:59,722 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result [2019-12-07 20:09:59,722 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result [2019-12-07 20:09:59,811 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/run_dir_d136eed5-6a8e-45a5-96f1-41513cf4d5ef/bin/utaipan/witness.graphml [2019-12-07 20:09:59,812 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-12-07 20:09:59,812 INFO L168 Benchmark]: Toolchain (without parser) took 120067.66 ms. Allocated memory was 1.0 GB in the beginning and 2.5 GB in the end (delta: 1.4 GB). Free memory was 947.0 MB in the beginning and 2.2 GB in the end (delta: -1.2 GB). Peak memory consumption was 230.9 MB. Max. memory is 11.5 GB. [2019-12-07 20:09:59,813 INFO L168 Benchmark]: CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 981.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 20:09:59,813 INFO L168 Benchmark]: CACSL2BoogieTranslator took 584.26 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 116.4 MB). Free memory was 947.0 MB in the beginning and 1.1 GB in the end (delta: -103.9 MB). Peak memory consumption was 26.8 MB. Max. memory is 11.5 GB. [2019-12-07 20:09:59,813 INFO L168 Benchmark]: Boogie Procedure Inliner took 89.12 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 20.3 MB). Peak memory consumption was 20.3 MB. Max. memory is 11.5 GB. [2019-12-07 20:09:59,813 INFO L168 Benchmark]: Boogie Preprocessor took 60.37 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 13.5 MB). Peak memory consumption was 13.5 MB. Max. memory is 11.5 GB. [2019-12-07 20:09:59,814 INFO L168 Benchmark]: RCFGBuilder took 1259.46 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 828.7 MB in the end (delta: 188.4 MB). Peak memory consumption was 188.4 MB. Max. memory is 11.5 GB. [2019-12-07 20:09:59,814 INFO L168 Benchmark]: TraceAbstraction took 117882.39 ms. Allocated memory was 1.1 GB in the beginning and 2.5 GB in the end (delta: 1.3 GB). Free memory was 828.7 MB in the beginning and 2.2 GB in the end (delta: -1.4 GB). Peak memory consumption was 1.7 GB. Max. memory is 11.5 GB. [2019-12-07 20:09:59,814 INFO L168 Benchmark]: Witness Printer took 187.33 ms. Allocated memory is still 2.5 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 32.5 MB). Peak memory consumption was 32.5 MB. Max. memory is 11.5 GB. [2019-12-07 20:09:59,815 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 981.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 584.26 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 116.4 MB). Free memory was 947.0 MB in the beginning and 1.1 GB in the end (delta: -103.9 MB). Peak memory consumption was 26.8 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 89.12 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 20.3 MB). Peak memory consumption was 20.3 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 60.37 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 13.5 MB). Peak memory consumption was 13.5 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1259.46 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 828.7 MB in the end (delta: 188.4 MB). Peak memory consumption was 188.4 MB. Max. memory is 11.5 GB. * TraceAbstraction took 117882.39 ms. Allocated memory was 1.1 GB in the beginning and 2.5 GB in the end (delta: 1.3 GB). Free memory was 828.7 MB in the beginning and 2.2 GB in the end (delta: -1.4 GB). Peak memory consumption was 1.7 GB. Max. memory is 11.5 GB. * Witness Printer took 187.33 ms. Allocated memory is still 2.5 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 32.5 MB). Peak memory consumption was 32.5 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 2579]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 2579]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 2579]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 2579]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 2579]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 2579]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 6 specifications checked. All of them hold - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 2247]: Loop Invariant Derived loop invariant: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 2247]: Loop Invariant Derived loop invariant: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 2542]: Loop Invariant Derived loop invariant: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 2200]: Loop Invariant Derived loop invariant: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == \result) - InvariantResult [Line: 2247]: Loop Invariant Derived loop invariant: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 2247]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) - InvariantResult [Line: 2247]: Loop Invariant Derived loop invariant: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 2247]: Loop Invariant Derived loop invariant: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 478]: Loop Invariant Derived loop invariant: (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) || (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(\result, 4294967294bv32) == 0bv32) || ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) - InvariantResult [Line: 2200]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 478]: Loop Invariant Derived loop invariant: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result - InvariantResult [Line: 2200]: Loop Invariant Derived loop invariant: ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 2200]: Loop Invariant Derived loop invariant: ((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 478]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2200]: Loop Invariant Derived loop invariant: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 478]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1572]: Loop Invariant Derived loop invariant: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result - InvariantResult [Line: 2200]: Loop Invariant Derived loop invariant: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == \result) - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32 - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 571]: Loop Invariant Derived loop invariant: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result - InvariantResult [Line: 478]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(\result, 4294967294bv32) == 0bv32) - InvariantResult [Line: 478]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) - InvariantResult [Line: 2584]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 2584]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 571]: Loop Invariant Derived loop invariant: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 2584]: Loop Invariant Derived loop invariant: (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) || (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: ((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 2584]: Loop Invariant Derived loop invariant: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32 - InvariantResult [Line: 2584]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 571]: Loop Invariant Derived loop invariant: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) || ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 2584]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2462]: Loop Invariant Derived loop invariant: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1637]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 571]: Loop Invariant Derived loop invariant: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((!(~bvadd64(rjh, 4294967295bv32) == 0bv32) && __ste_ClientAddressBook_size0 == 0bv32) && !(1bv32 == __ste_email_to0)) && 0bv32 == __ste_client_forwardReceiver1 - InvariantResult [Line: 1637]: Loop Invariant Derived loop invariant: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1637]: Loop Invariant Derived loop invariant: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32 - InvariantResult [Line: 571]: Loop Invariant Derived loop invariant: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1637]: Loop Invariant Derived loop invariant: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 571]: Loop Invariant Derived loop invariant: ((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 2316]: Loop Invariant Derived loop invariant: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result - InvariantResult [Line: 571]: Loop Invariant Derived loop invariant: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) - InvariantResult [Line: 571]: Loop Invariant Derived loop invariant: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 2471]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 2421]: Loop Invariant Derived loop invariant: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1706]: Loop Invariant Derived loop invariant: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result - InvariantResult [Line: 144]: Loop Invariant Derived loop invariant: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result - InvariantResult [Line: 158]: Loop Invariant Derived loop invariant: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result - InvariantResult [Line: 2471]: Loop Invariant Derived loop invariant: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32 - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result - InvariantResult [Line: 571]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) - InvariantResult [Line: 183]: Loop Invariant Derived loop invariant: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result - InvariantResult [Line: 371]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && __ste_ClientAddressBook_size0 == 0bv32) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1 - InvariantResult [Line: 194]: Loop Invariant Derived loop invariant: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result - InvariantResult [Line: 2316]: Loop Invariant Derived loop invariant: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: (((!(~bvadd64(rjh, 4294967295bv32) == 0bv32) && __ste_ClientAddressBook_size0 == 0bv32) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1 - InvariantResult [Line: 571]: Loop Invariant Derived loop invariant: ((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 133]: Loop Invariant Derived loop invariant: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result - InvariantResult [Line: 81]: Loop Invariant Derived loop invariant: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result - InvariantResult [Line: 1380]: Loop Invariant Derived loop invariant: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result - InvariantResult [Line: 571]: Loop Invariant Derived loop invariant: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 2496]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 89]: Loop Invariant Derived loop invariant: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result - InvariantResult [Line: 2453]: Loop Invariant Derived loop invariant: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 111]: Loop Invariant Derived loop invariant: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result - InvariantResult [Line: 122]: Loop Invariant Derived loop invariant: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result - InvariantResult [Line: 515]: Loop Invariant Derived loop invariant: (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) || (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 2496]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 2524]: Loop Invariant Derived loop invariant: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result - InvariantResult [Line: 2496]: Loop Invariant Derived loop invariant: ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) || ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 2524]: Loop Invariant Derived loop invariant: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result - InvariantResult [Line: 515]: Loop Invariant Derived loop invariant: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result - InvariantResult [Line: 2496]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 2524]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 515]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2524]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2496]: Loop Invariant Derived loop invariant: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result - InvariantResult [Line: 515]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2496]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 2524]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 404]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1356]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 2524]: Loop Invariant Derived loop invariant: ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) || ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 2524]: Loop Invariant Derived loop invariant: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result - InvariantResult [Line: 1356]: Loop Invariant Derived loop invariant: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32 - InvariantResult [Line: 2524]: Loop Invariant Derived loop invariant: ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) || ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 515]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 2524]: Loop Invariant Derived loop invariant: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result - InvariantResult [Line: 80]: Loop Invariant Derived loop invariant: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result - InvariantResult [Line: 515]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((2bv32 == handle && 1bv32 == bob) && __ste_ClientAddressBook_size0 == 0bv32) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32 - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 2524]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && __ste_ClientAddressBook_size0 == 0bv32) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 2524]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((~bvadd64(handle, 4294967293bv32) == 0bv32 && client == 2bv32) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(\result, 4294967294bv32) == 0bv32) || ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || ((((((~bvadd64(handle, 4294967293bv32) == 0bv32 && client == 2bv32) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(\result, 4294967294bv32) == 0bv32) - InvariantResult [Line: 2524]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((!(~bvadd64(rjh, 4294967295bv32) == 0bv32) && 1bv32 == bob) && __ste_ClientAddressBook_size0 == 0bv32) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1) && !(2bv32 == handle) - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 394]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2444]: Loop Invariant Derived loop invariant: (((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 401 locations, 6 error locations. Result: SAFE, OverallTime: 22.6s, OverallIterations: 17, TraceHistogramMax: 3, AutomataDifference: 10.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 95.1s, HoareTripleCheckerStatistics: 12828 SDtfs, 30269 SDslu, 27059 SDs, 0 SdLazy, 2196 SolverSat, 411 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 2.5s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 2679 GetRequests, 2478 SyntacticMatches, 5 SemanticMatches, 196 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3497 ImplicationChecksByTransitivity, 4.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=10042occurred in iteration=16, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.8s AutomataMinimizationTime, 17 MinimizatonAttempts, 17084 StatesRemovedByMinimization, 15 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 126 LocationsWithAnnotation, 126 PreInvPairs, 2737 NumberOfFragments, 6007 HoareAnnotationTreeSize, 126 FomulaSimplifications, 619035570 FormulaSimplificationTreeSizeReduction, 12.9s HoareSimplificationTime, 126 FomulaSimplificationsInter, 112746709 FormulaSimplificationTreeSizeReductionInter, 82.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.8s SsaConstructionTime, 1.9s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 1310 NumberOfCodeBlocks, 1310 NumberOfCodeBlocksAsserted, 24 NumberOfCheckSat, 2572 ConstructedInterpolants, 0 QuantifiedInterpolants, 241565 SizeOfPredicates, 75 NumberOfNonLiveVariables, 9906 ConjunctsInSsa, 120 ConjunctsInUnsatCore, 48 InterpolantComputations, 34 PerfectInterpolantSequences, 212/324 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...