./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f470102c Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ae3b367cf5d6182b9fc2a52b7b845972627c8a86 ...................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ae3b367cf5d6182b9fc2a52b7b845972627c8a86 .............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-f470102 [2019-12-07 20:17:30,948 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 20:17:30,950 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 20:17:30,957 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 20:17:30,957 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 20:17:30,958 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 20:17:30,959 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 20:17:30,960 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 20:17:30,961 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 20:17:30,962 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 20:17:30,962 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 20:17:30,963 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 20:17:30,963 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 20:17:30,964 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 20:17:30,965 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 20:17:30,966 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 20:17:30,966 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 20:17:30,967 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 20:17:30,968 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 20:17:30,970 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 20:17:30,971 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 20:17:30,972 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 20:17:30,972 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 20:17:30,973 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 20:17:30,975 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 20:17:30,975 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 20:17:30,975 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 20:17:30,975 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 20:17:30,976 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 20:17:30,976 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 20:17:30,976 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 20:17:30,977 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 20:17:30,977 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 20:17:30,978 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 20:17:30,978 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 20:17:30,978 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 20:17:30,979 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 20:17:30,979 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 20:17:30,979 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 20:17:30,980 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 20:17:30,980 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 20:17:30,980 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf [2019-12-07 20:17:30,990 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 20:17:30,990 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 20:17:30,991 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-12-07 20:17:30,991 INFO L138 SettingsManager]: * User list type=DISABLED [2019-12-07 20:17:30,991 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-12-07 20:17:30,991 INFO L138 SettingsManager]: * Explicit value domain=true [2019-12-07 20:17:30,991 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2019-12-07 20:17:30,992 INFO L138 SettingsManager]: * Octagon Domain=false [2019-12-07 20:17:30,992 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-12-07 20:17:30,992 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2019-12-07 20:17:30,992 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2019-12-07 20:17:30,992 INFO L138 SettingsManager]: * Interval Domain=false [2019-12-07 20:17:30,992 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2019-12-07 20:17:30,992 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2019-12-07 20:17:30,992 INFO L138 SettingsManager]: * Simplification Technique=SIMPLIFY_QUICK [2019-12-07 20:17:30,993 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 20:17:30,993 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 20:17:30,993 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-12-07 20:17:30,993 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 20:17:30,993 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 20:17:30,993 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-12-07 20:17:30,993 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-12-07 20:17:30,993 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-12-07 20:17:30,993 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2019-12-07 20:17:30,994 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 20:17:30,994 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 20:17:30,994 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 20:17:30,994 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-12-07 20:17:30,994 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 20:17:30,994 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-12-07 20:17:30,994 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-12-07 20:17:30,994 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 20:17:30,995 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 20:17:30,995 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-12-07 20:17:30,995 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-12-07 20:17:30,995 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2019-12-07 20:17:30,995 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-12-07 20:17:30,995 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-12-07 20:17:30,995 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 20:17:30,995 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-12-07 20:17:30,996 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ae3b367cf5d6182b9fc2a52b7b845972627c8a86 [2019-12-07 20:17:31,098 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 20:17:31,105 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 20:17:31,108 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 20:17:31,108 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 20:17:31,109 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 20:17:31,109 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c [2019-12-07 20:17:31,147 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/data/432e140b8/51a15f11e3024497861f043410bdbf02/FLAG7f2547623 [2019-12-07 20:17:31,573 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 20:17:31,574 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c [2019-12-07 20:17:31,588 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/data/432e140b8/51a15f11e3024497861f043410bdbf02/FLAG7f2547623 [2019-12-07 20:17:31,597 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/data/432e140b8/51a15f11e3024497861f043410bdbf02 [2019-12-07 20:17:31,599 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 20:17:31,600 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 20:17:31,600 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 20:17:31,600 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 20:17:31,603 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 20:17:31,603 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 08:17:31" (1/1) ... [2019-12-07 20:17:31,605 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@581b80cd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:17:31, skipping insertion in model container [2019-12-07 20:17:31,605 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 08:17:31" (1/1) ... [2019-12-07 20:17:31,609 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 20:17:31,648 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 20:17:31,941 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 20:17:31,951 ERROR L326 MainTranslator]: Unsupported Syntax: Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) [2019-12-07 20:17:31,951 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@81998eb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:17:31, skipping insertion in model container [2019-12-07 20:17:31,951 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 20:17:31,952 INFO L184 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.procedureinliner [2019-12-07 20:17:31,953 INFO L168 Benchmark]: Toolchain (without parser) took 353.10 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 113.2 MB). Free memory was 936.0 MB in the beginning and 1.1 GB in the end (delta: -157.9 MB). Peak memory consumption was 29.9 MB. Max. memory is 11.5 GB. [2019-12-07 20:17:31,954 INFO L168 Benchmark]: CDTParser took 0.12 ms. Allocated memory is still 1.0 GB. Free memory is still 958.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 20:17:31,955 INFO L168 Benchmark]: CACSL2BoogieTranslator took 351.32 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 113.2 MB). Free memory was 936.0 MB in the beginning and 1.1 GB in the end (delta: -157.9 MB). Peak memory consumption was 29.9 MB. Max. memory is 11.5 GB. [2019-12-07 20:17:31,956 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12 ms. Allocated memory is still 1.0 GB. Free memory is still 958.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 351.32 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 113.2 MB). Free memory was 936.0 MB in the beginning and 1.1 GB in the end (delta: -157.9 MB). Peak memory consumption was 29.9 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - UnsupportedSyntaxResult [Line: 116]: Unsupported Syntax Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.25-f470102 [2019-12-07 20:17:33,066 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 20:17:33,067 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 20:17:33,075 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 20:17:33,075 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 20:17:33,076 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 20:17:33,077 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 20:17:33,078 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 20:17:33,079 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 20:17:33,080 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 20:17:33,080 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 20:17:33,081 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 20:17:33,081 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 20:17:33,082 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 20:17:33,083 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 20:17:33,084 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 20:17:33,084 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 20:17:33,085 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 20:17:33,086 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 20:17:33,088 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 20:17:33,089 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 20:17:33,090 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 20:17:33,091 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 20:17:33,091 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 20:17:33,093 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 20:17:33,093 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 20:17:33,093 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 20:17:33,094 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 20:17:33,094 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 20:17:33,095 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 20:17:33,095 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 20:17:33,096 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 20:17:33,096 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 20:17:33,097 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 20:17:33,097 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 20:17:33,097 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 20:17:33,098 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 20:17:33,098 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 20:17:33,098 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 20:17:33,099 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 20:17:33,099 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 20:17:33,100 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf [2019-12-07 20:17:33,110 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 20:17:33,110 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 20:17:33,111 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-12-07 20:17:33,111 INFO L138 SettingsManager]: * User list type=DISABLED [2019-12-07 20:17:33,111 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-12-07 20:17:33,111 INFO L138 SettingsManager]: * Explicit value domain=true [2019-12-07 20:17:33,111 INFO L138 SettingsManager]: * Octagon Domain=false [2019-12-07 20:17:33,111 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-12-07 20:17:33,111 INFO L138 SettingsManager]: * Interval Domain=false [2019-12-07 20:17:33,112 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 20:17:33,112 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 20:17:33,112 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 20:17:33,112 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 20:17:33,112 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-12-07 20:17:33,112 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-12-07 20:17:33,113 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-12-07 20:17:33,113 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2019-12-07 20:17:33,113 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2019-12-07 20:17:33,113 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2019-12-07 20:17:33,113 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 20:17:33,113 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 20:17:33,113 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 20:17:33,113 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-12-07 20:17:33,114 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 20:17:33,114 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-12-07 20:17:33,114 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-12-07 20:17:33,114 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-12-07 20:17:33,114 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 20:17:33,114 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 20:17:33,114 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-12-07 20:17:33,115 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-12-07 20:17:33,115 INFO L138 SettingsManager]: * Trace refinement strategy=WALRUS [2019-12-07 20:17:33,115 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --rewrite-divk --print-success --lang smt [2019-12-07 20:17:33,115 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-12-07 20:17:33,115 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 20:17:33,115 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-12-07 20:17:33,115 INFO L138 SettingsManager]: * Logic for external solver=AUFBV Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ae3b367cf5d6182b9fc2a52b7b845972627c8a86 [2019-12-07 20:17:33,282 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 20:17:33,290 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 20:17:33,292 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 20:17:33,293 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 20:17:33,294 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 20:17:33,294 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c [2019-12-07 20:17:33,331 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/data/7f8731dbe/ee74ff589fbe4ab2b22d7e3891655761/FLAG9f61923c0 [2019-12-07 20:17:33,742 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 20:17:33,743 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c [2019-12-07 20:17:33,757 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/data/7f8731dbe/ee74ff589fbe4ab2b22d7e3891655761/FLAG9f61923c0 [2019-12-07 20:17:33,765 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/data/7f8731dbe/ee74ff589fbe4ab2b22d7e3891655761 [2019-12-07 20:17:33,767 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 20:17:33,768 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 20:17:33,769 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 20:17:33,769 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 20:17:33,771 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 20:17:33,771 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 08:17:33" (1/1) ... [2019-12-07 20:17:33,773 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5b70e7d3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:17:33, skipping insertion in model container [2019-12-07 20:17:33,773 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 08:17:33" (1/1) ... [2019-12-07 20:17:33,778 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 20:17:33,817 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 20:17:34,133 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 20:17:34,144 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2019-12-07 20:17:34,154 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 20:17:34,209 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 20:17:34,213 INFO L203 MainTranslator]: Completed pre-run [2019-12-07 20:17:34,263 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 20:17:34,305 INFO L208 MainTranslator]: Completed translation [2019-12-07 20:17:34,305 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:17:34 WrapperNode [2019-12-07 20:17:34,306 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 20:17:34,306 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-12-07 20:17:34,306 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-12-07 20:17:34,306 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-12-07 20:17:34,312 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:17:34" (1/1) ... [2019-12-07 20:17:34,336 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:17:34" (1/1) ... [2019-12-07 20:17:34,385 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-12-07 20:17:34,385 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-12-07 20:17:34,385 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-12-07 20:17:34,385 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-12-07 20:17:34,392 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:17:34" (1/1) ... [2019-12-07 20:17:34,392 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:17:34" (1/1) ... [2019-12-07 20:17:34,401 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:17:34" (1/1) ... [2019-12-07 20:17:34,402 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:17:34" (1/1) ... [2019-12-07 20:17:34,424 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:17:34" (1/1) ... [2019-12-07 20:17:34,440 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:17:34" (1/1) ... [2019-12-07 20:17:34,446 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:17:34" (1/1) ... [2019-12-07 20:17:34,456 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-12-07 20:17:34,457 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-12-07 20:17:34,457 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-12-07 20:17:34,457 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-12-07 20:17:34,458 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:17:34" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 20:17:34,501 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2019-12-07 20:17:34,501 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-12-07 20:17:34,501 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2019-12-07 20:17:34,501 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-12-07 20:17:34,501 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-12-07 20:17:35,824 INFO L282 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-12-07 20:17:35,824 INFO L287 CfgBuilder]: Removed 405 assume(true) statements. [2019-12-07 20:17:35,825 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 08:17:35 BoogieIcfgContainer [2019-12-07 20:17:35,825 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-12-07 20:17:35,826 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-12-07 20:17:35,826 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-12-07 20:17:35,828 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-12-07 20:17:35,828 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 07.12 08:17:33" (1/3) ... [2019-12-07 20:17:35,829 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@771e3055 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 08:17:35, skipping insertion in model container [2019-12-07 20:17:35,829 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 08:17:34" (2/3) ... [2019-12-07 20:17:35,829 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@771e3055 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 08:17:35, skipping insertion in model container [2019-12-07 20:17:35,829 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 08:17:35" (3/3) ... [2019-12-07 20:17:35,831 INFO L109 eAbstractionObserver]: Analyzing ICFG email_spec0_product36.cil.c [2019-12-07 20:17:35,838 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-12-07 20:17:35,843 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 6 error locations. [2019-12-07 20:17:35,851 INFO L249 AbstractCegarLoop]: Starting to check reachability of 6 error locations. [2019-12-07 20:17:35,870 INFO L373 AbstractCegarLoop]: Interprodecural is true [2019-12-07 20:17:35,870 INFO L374 AbstractCegarLoop]: Hoare is true [2019-12-07 20:17:35,870 INFO L375 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-12-07 20:17:35,870 INFO L376 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-12-07 20:17:35,870 INFO L377 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-12-07 20:17:35,870 INFO L378 AbstractCegarLoop]: Difference is false [2019-12-07 20:17:35,870 INFO L379 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-12-07 20:17:35,870 INFO L383 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-12-07 20:17:35,887 INFO L276 IsEmpty]: Start isEmpty. Operand 477 states. [2019-12-07 20:17:35,894 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2019-12-07 20:17:35,894 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:17:35,894 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:17:35,895 INFO L410 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:17:35,898 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:17:35,899 INFO L82 PathProgramCache]: Analyzing trace with hash 727264019, now seen corresponding path program 1 times [2019-12-07 20:17:35,907 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:17:35,907 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1940967834] [2019-12-07 20:17:35,908 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 2 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with mathsat -unsat_core_generation=3 [2019-12-07 20:17:36,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:17:36,151 INFO L264 TraceCheckSpWp]: Trace formula consists of 402 conjuncts, 1 conjunts are in the unsatisfiable core [2019-12-07 20:17:36,157 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:17:36,171 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:36,171 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:17:36,177 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:36,178 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1940967834] [2019-12-07 20:17:36,178 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:17:36,178 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 2 [2019-12-07 20:17:36,179 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1914609143] [2019-12-07 20:17:36,182 INFO L442 AbstractCegarLoop]: Interpolant automaton has 2 states [2019-12-07 20:17:36,182 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:17:36,191 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2019-12-07 20:17:36,191 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-12-07 20:17:36,192 INFO L87 Difference]: Start difference. First operand 477 states. Second operand 2 states. [2019-12-07 20:17:36,232 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:17:36,232 INFO L93 Difference]: Finished difference Result 860 states and 1420 transitions. [2019-12-07 20:17:36,233 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2019-12-07 20:17:36,233 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 41 [2019-12-07 20:17:36,234 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:17:36,245 INFO L225 Difference]: With dead ends: 860 [2019-12-07 20:17:36,246 INFO L226 Difference]: Without dead ends: 449 [2019-12-07 20:17:36,249 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 80 GetRequests, 80 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-12-07 20:17:36,262 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 449 states. [2019-12-07 20:17:36,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 449 to 449. [2019-12-07 20:17:36,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 449 states. [2019-12-07 20:17:36,294 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 449 states to 449 states and 744 transitions. [2019-12-07 20:17:36,295 INFO L78 Accepts]: Start accepts. Automaton has 449 states and 744 transitions. Word has length 41 [2019-12-07 20:17:36,295 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:17:36,295 INFO L462 AbstractCegarLoop]: Abstraction has 449 states and 744 transitions. [2019-12-07 20:17:36,295 INFO L463 AbstractCegarLoop]: Interpolant automaton has 2 states. [2019-12-07 20:17:36,296 INFO L276 IsEmpty]: Start isEmpty. Operand 449 states and 744 transitions. [2019-12-07 20:17:36,297 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2019-12-07 20:17:36,297 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:17:36,297 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:17:36,498 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 mathsat -unsat_core_generation=3 [2019-12-07 20:17:36,499 INFO L410 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:17:36,500 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:17:36,500 INFO L82 PathProgramCache]: Analyzing trace with hash 1990434142, now seen corresponding path program 1 times [2019-12-07 20:17:36,503 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:17:36,504 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [753646853] [2019-12-07 20:17:36,504 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 3 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with mathsat -unsat_core_generation=3 [2019-12-07 20:17:36,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:17:36,795 INFO L264 TraceCheckSpWp]: Trace formula consists of 403 conjuncts, 6 conjunts are in the unsatisfiable core [2019-12-07 20:17:36,797 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:17:36,813 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:36,813 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:17:36,826 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:36,826 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [753646853] [2019-12-07 20:17:36,826 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:17:36,827 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 20:17:36,827 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [708553572] [2019-12-07 20:17:36,828 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 20:17:36,828 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:17:36,828 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 20:17:36,828 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 20:17:36,828 INFO L87 Difference]: Start difference. First operand 449 states and 744 transitions. Second operand 4 states. [2019-12-07 20:17:36,892 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:17:36,893 INFO L93 Difference]: Finished difference Result 1321 states and 2191 transitions. [2019-12-07 20:17:36,893 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 20:17:36,893 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 42 [2019-12-07 20:17:36,893 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:17:36,898 INFO L225 Difference]: With dead ends: 1321 [2019-12-07 20:17:36,898 INFO L226 Difference]: Without dead ends: 883 [2019-12-07 20:17:36,900 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 82 GetRequests, 80 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 20:17:36,903 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 883 states. [2019-12-07 20:17:36,923 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 883 to 448. [2019-12-07 20:17:36,923 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 448 states. [2019-12-07 20:17:36,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 739 transitions. [2019-12-07 20:17:36,925 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 739 transitions. Word has length 42 [2019-12-07 20:17:36,925 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:17:36,925 INFO L462 AbstractCegarLoop]: Abstraction has 448 states and 739 transitions. [2019-12-07 20:17:36,925 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 20:17:36,925 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 739 transitions. [2019-12-07 20:17:36,927 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2019-12-07 20:17:36,927 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:17:36,927 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:17:37,127 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 mathsat -unsat_core_generation=3 [2019-12-07 20:17:37,128 INFO L410 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:17:37,128 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:17:37,128 INFO L82 PathProgramCache]: Analyzing trace with hash -797087701, now seen corresponding path program 1 times [2019-12-07 20:17:37,129 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:17:37,129 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2067521699] [2019-12-07 20:17:37,129 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 4 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with mathsat -unsat_core_generation=3 [2019-12-07 20:17:37,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:17:37,320 INFO L264 TraceCheckSpWp]: Trace formula consists of 405 conjuncts, 6 conjunts are in the unsatisfiable core [2019-12-07 20:17:37,321 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:17:37,328 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:37,328 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:17:37,336 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:37,336 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2067521699] [2019-12-07 20:17:37,336 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:17:37,336 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 20:17:37,337 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [537725708] [2019-12-07 20:17:37,337 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 20:17:37,337 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:17:37,337 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 20:17:37,337 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 20:17:37,337 INFO L87 Difference]: Start difference. First operand 448 states and 739 transitions. Second operand 4 states. [2019-12-07 20:17:37,375 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:17:37,375 INFO L93 Difference]: Finished difference Result 889 states and 1468 transitions. [2019-12-07 20:17:37,375 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 20:17:37,376 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 44 [2019-12-07 20:17:37,376 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:17:37,378 INFO L225 Difference]: With dead ends: 889 [2019-12-07 20:17:37,378 INFO L226 Difference]: Without dead ends: 449 [2019-12-07 20:17:37,379 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 86 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 20:17:37,380 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 449 states. [2019-12-07 20:17:37,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 449 to 448. [2019-12-07 20:17:37,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 448 states. [2019-12-07 20:17:37,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 736 transitions. [2019-12-07 20:17:37,399 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 736 transitions. Word has length 44 [2019-12-07 20:17:37,399 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:17:37,399 INFO L462 AbstractCegarLoop]: Abstraction has 448 states and 736 transitions. [2019-12-07 20:17:37,399 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 20:17:37,399 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 736 transitions. [2019-12-07 20:17:37,400 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2019-12-07 20:17:37,401 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:17:37,401 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:17:37,601 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 mathsat -unsat_core_generation=3 [2019-12-07 20:17:37,602 INFO L410 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:17:37,602 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:17:37,602 INFO L82 PathProgramCache]: Analyzing trace with hash 945994064, now seen corresponding path program 1 times [2019-12-07 20:17:37,603 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:17:37,603 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1853221880] [2019-12-07 20:17:37,603 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 5 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with mathsat -unsat_core_generation=3 [2019-12-07 20:17:37,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:17:37,773 INFO L264 TraceCheckSpWp]: Trace formula consists of 406 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 20:17:37,775 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:17:37,781 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:37,781 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:17:37,790 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:37,790 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1853221880] [2019-12-07 20:17:37,790 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:17:37,790 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 20:17:37,790 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [125295433] [2019-12-07 20:17:37,791 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 20:17:37,791 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:17:37,791 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 20:17:37,791 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 20:17:37,791 INFO L87 Difference]: Start difference. First operand 448 states and 736 transitions. Second operand 4 states. [2019-12-07 20:17:37,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:17:37,853 INFO L93 Difference]: Finished difference Result 1236 states and 2029 transitions. [2019-12-07 20:17:37,854 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 20:17:37,854 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 45 [2019-12-07 20:17:37,854 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:17:37,858 INFO L225 Difference]: With dead ends: 1236 [2019-12-07 20:17:37,858 INFO L226 Difference]: Without dead ends: 881 [2019-12-07 20:17:37,859 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 88 GetRequests, 86 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 20:17:37,860 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 881 states. [2019-12-07 20:17:37,876 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 881 to 526. [2019-12-07 20:17:37,876 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 526 states. [2019-12-07 20:17:37,878 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 526 states to 526 states and 881 transitions. [2019-12-07 20:17:37,878 INFO L78 Accepts]: Start accepts. Automaton has 526 states and 881 transitions. Word has length 45 [2019-12-07 20:17:37,878 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:17:37,878 INFO L462 AbstractCegarLoop]: Abstraction has 526 states and 881 transitions. [2019-12-07 20:17:37,878 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 20:17:37,878 INFO L276 IsEmpty]: Start isEmpty. Operand 526 states and 881 transitions. [2019-12-07 20:17:37,879 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2019-12-07 20:17:37,879 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:17:37,879 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:17:38,080 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 mathsat -unsat_core_generation=3 [2019-12-07 20:17:38,081 INFO L410 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:17:38,081 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:17:38,082 INFO L82 PathProgramCache]: Analyzing trace with hash 298481648, now seen corresponding path program 1 times [2019-12-07 20:17:38,083 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:17:38,083 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [997023546] [2019-12-07 20:17:38,084 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 6 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with mathsat -unsat_core_generation=3 [2019-12-07 20:17:38,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:17:38,311 INFO L264 TraceCheckSpWp]: Trace formula consists of 420 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 20:17:38,313 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:17:38,323 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:38,323 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:17:38,334 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:38,334 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [997023546] [2019-12-07 20:17:38,335 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:17:38,335 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 20:17:38,335 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1089846759] [2019-12-07 20:17:38,335 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 20:17:38,335 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:17:38,336 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 20:17:38,336 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 20:17:38,336 INFO L87 Difference]: Start difference. First operand 526 states and 881 transitions. Second operand 4 states. [2019-12-07 20:17:38,401 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:17:38,401 INFO L93 Difference]: Finished difference Result 1892 states and 3168 transitions. [2019-12-07 20:17:38,402 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 20:17:38,402 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 55 [2019-12-07 20:17:38,402 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:17:38,409 INFO L225 Difference]: With dead ends: 1892 [2019-12-07 20:17:38,409 INFO L226 Difference]: Without dead ends: 1461 [2019-12-07 20:17:38,410 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 108 GetRequests, 106 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 20:17:38,412 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1461 states. [2019-12-07 20:17:38,455 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1461 to 674. [2019-12-07 20:17:38,455 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 674 states. [2019-12-07 20:17:38,457 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 674 states to 674 states and 1160 transitions. [2019-12-07 20:17:38,457 INFO L78 Accepts]: Start accepts. Automaton has 674 states and 1160 transitions. Word has length 55 [2019-12-07 20:17:38,457 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:17:38,457 INFO L462 AbstractCegarLoop]: Abstraction has 674 states and 1160 transitions. [2019-12-07 20:17:38,457 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 20:17:38,458 INFO L276 IsEmpty]: Start isEmpty. Operand 674 states and 1160 transitions. [2019-12-07 20:17:38,458 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2019-12-07 20:17:38,458 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:17:38,459 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:17:38,659 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 mathsat -unsat_core_generation=3 [2019-12-07 20:17:38,659 INFO L410 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:17:38,659 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:17:38,660 INFO L82 PathProgramCache]: Analyzing trace with hash -1768579723, now seen corresponding path program 1 times [2019-12-07 20:17:38,660 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:17:38,660 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [136122259] [2019-12-07 20:17:38,660 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 7 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with mathsat -unsat_core_generation=3 [2019-12-07 20:17:38,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:17:38,827 INFO L264 TraceCheckSpWp]: Trace formula consists of 418 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 20:17:38,829 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:17:38,836 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:38,836 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:17:38,840 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:38,840 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [136122259] [2019-12-07 20:17:38,840 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:17:38,840 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2019-12-07 20:17:38,840 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [503272968] [2019-12-07 20:17:38,840 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-12-07 20:17:38,841 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:17:38,841 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 20:17:38,841 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:17:38,841 INFO L87 Difference]: Start difference. First operand 674 states and 1160 transitions. Second operand 3 states. [2019-12-07 20:17:38,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:17:38,877 INFO L93 Difference]: Finished difference Result 1461 states and 2449 transitions. [2019-12-07 20:17:38,878 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 20:17:38,878 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 57 [2019-12-07 20:17:38,878 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:17:38,882 INFO L225 Difference]: With dead ends: 1461 [2019-12-07 20:17:38,882 INFO L226 Difference]: Without dead ends: 958 [2019-12-07 20:17:38,883 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 111 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:17:38,885 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 958 states. [2019-12-07 20:17:38,906 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 958 to 603. [2019-12-07 20:17:38,906 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 603 states. [2019-12-07 20:17:38,907 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 603 states to 603 states and 1022 transitions. [2019-12-07 20:17:38,908 INFO L78 Accepts]: Start accepts. Automaton has 603 states and 1022 transitions. Word has length 57 [2019-12-07 20:17:38,908 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:17:38,908 INFO L462 AbstractCegarLoop]: Abstraction has 603 states and 1022 transitions. [2019-12-07 20:17:38,908 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-12-07 20:17:38,908 INFO L276 IsEmpty]: Start isEmpty. Operand 603 states and 1022 transitions. [2019-12-07 20:17:38,909 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2019-12-07 20:17:38,909 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:17:38,909 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:17:39,109 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 mathsat -unsat_core_generation=3 [2019-12-07 20:17:39,110 INFO L410 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:17:39,110 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:17:39,110 INFO L82 PathProgramCache]: Analyzing trace with hash -1735157297, now seen corresponding path program 1 times [2019-12-07 20:17:39,110 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:17:39,110 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [484749461] [2019-12-07 20:17:39,110 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 8 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with mathsat -unsat_core_generation=3 [2019-12-07 20:17:39,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:17:39,293 INFO L264 TraceCheckSpWp]: Trace formula consists of 422 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 20:17:39,295 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:17:39,302 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:17:39,302 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:17:39,307 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:17:39,308 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [484749461] [2019-12-07 20:17:39,308 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:17:39,308 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2019-12-07 20:17:39,308 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1410366953] [2019-12-07 20:17:39,308 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-12-07 20:17:39,309 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:17:39,309 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 20:17:39,309 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:17:39,309 INFO L87 Difference]: Start difference. First operand 603 states and 1022 transitions. Second operand 3 states. [2019-12-07 20:17:39,364 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:17:39,364 INFO L93 Difference]: Finished difference Result 1674 states and 2847 transitions. [2019-12-07 20:17:39,364 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 20:17:39,365 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 57 [2019-12-07 20:17:39,365 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:17:39,369 INFO L225 Difference]: With dead ends: 1674 [2019-12-07 20:17:39,369 INFO L226 Difference]: Without dead ends: 1101 [2019-12-07 20:17:39,370 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 111 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:17:39,372 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1101 states. [2019-12-07 20:17:39,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1101 to 746. [2019-12-07 20:17:39,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 746 states. [2019-12-07 20:17:39,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 746 states to 746 states and 1287 transitions. [2019-12-07 20:17:39,399 INFO L78 Accepts]: Start accepts. Automaton has 746 states and 1287 transitions. Word has length 57 [2019-12-07 20:17:39,399 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:17:39,399 INFO L462 AbstractCegarLoop]: Abstraction has 746 states and 1287 transitions. [2019-12-07 20:17:39,399 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-12-07 20:17:39,399 INFO L276 IsEmpty]: Start isEmpty. Operand 746 states and 1287 transitions. [2019-12-07 20:17:39,400 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2019-12-07 20:17:39,400 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:17:39,401 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:17:39,601 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 mathsat -unsat_core_generation=3 [2019-12-07 20:17:39,601 INFO L410 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:17:39,601 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:17:39,602 INFO L82 PathProgramCache]: Analyzing trace with hash 1243815331, now seen corresponding path program 1 times [2019-12-07 20:17:39,602 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:17:39,602 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [766605912] [2019-12-07 20:17:39,602 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 9 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with mathsat -unsat_core_generation=3 [2019-12-07 20:17:39,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:17:39,837 INFO L264 TraceCheckSpWp]: Trace formula consists of 427 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 20:17:39,838 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:17:39,848 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:17:39,849 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:17:39,863 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:17:39,863 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [766605912] [2019-12-07 20:17:39,863 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:17:39,863 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 6 [2019-12-07 20:17:39,863 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [968253585] [2019-12-07 20:17:39,864 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 20:17:39,864 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:17:39,864 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 20:17:39,864 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2019-12-07 20:17:39,864 INFO L87 Difference]: Start difference. First operand 746 states and 1287 transitions. Second operand 6 states. [2019-12-07 20:17:40,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:17:40,182 INFO L93 Difference]: Finished difference Result 1892 states and 3248 transitions. [2019-12-07 20:17:40,182 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-12-07 20:17:40,182 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 58 [2019-12-07 20:17:40,182 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:17:40,187 INFO L225 Difference]: With dead ends: 1892 [2019-12-07 20:17:40,187 INFO L226 Difference]: Without dead ends: 1241 [2019-12-07 20:17:40,188 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 115 GetRequests, 110 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-12-07 20:17:40,190 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1241 states. [2019-12-07 20:17:40,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1241 to 743. [2019-12-07 20:17:40,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 743 states. [2019-12-07 20:17:40,217 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 743 states to 743 states and 1275 transitions. [2019-12-07 20:17:40,217 INFO L78 Accepts]: Start accepts. Automaton has 743 states and 1275 transitions. Word has length 58 [2019-12-07 20:17:40,217 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:17:40,217 INFO L462 AbstractCegarLoop]: Abstraction has 743 states and 1275 transitions. [2019-12-07 20:17:40,218 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 20:17:40,218 INFO L276 IsEmpty]: Start isEmpty. Operand 743 states and 1275 transitions. [2019-12-07 20:17:40,219 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2019-12-07 20:17:40,219 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:17:40,219 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:17:40,419 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 mathsat -unsat_core_generation=3 [2019-12-07 20:17:40,420 INFO L410 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:17:40,421 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:17:40,421 INFO L82 PathProgramCache]: Analyzing trace with hash -462083701, now seen corresponding path program 1 times [2019-12-07 20:17:40,422 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:17:40,422 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [233965027] [2019-12-07 20:17:40,423 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 10 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with mathsat -unsat_core_generation=3 [2019-12-07 20:17:40,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:17:40,628 INFO L264 TraceCheckSpWp]: Trace formula consists of 424 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 20:17:40,629 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:17:40,643 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:40,643 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:17:40,679 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:40,679 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [233965027] [2019-12-07 20:17:40,679 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1635071990] [2019-12-07 20:17:40,679 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/cvc4 Starting monitored process 11 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:17:40,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:17:40,890 INFO L264 TraceCheckSpWp]: Trace formula consists of 424 conjuncts, 22 conjunts are in the unsatisfiable core [2019-12-07 20:17:40,892 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:17:40,994 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:17:40,994 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:17:41,129 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:17:41,129 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 2 imperfect interpolant sequences. [2019-12-07 20:17:41,129 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9, 9] imperfect sequences [5, 5] total 22 [2019-12-07 20:17:41,130 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1969697843] [2019-12-07 20:17:41,130 INFO L442 AbstractCegarLoop]: Interpolant automaton has 16 states [2019-12-07 20:17:41,130 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:17:41,130 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2019-12-07 20:17:41,130 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=56, Invalid=406, Unknown=0, NotChecked=0, Total=462 [2019-12-07 20:17:41,130 INFO L87 Difference]: Start difference. First operand 743 states and 1275 transitions. Second operand 16 states. [2019-12-07 20:17:47,649 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:17:47,650 INFO L93 Difference]: Finished difference Result 9259 states and 14956 transitions. [2019-12-07 20:17:47,650 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 87 states. [2019-12-07 20:17:47,650 INFO L78 Accepts]: Start accepts. Automaton has 16 states. Word has length 58 [2019-12-07 20:17:47,650 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:17:47,682 INFO L225 Difference]: With dead ends: 9259 [2019-12-07 20:17:47,682 INFO L226 Difference]: Without dead ends: 8963 [2019-12-07 20:17:47,686 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 314 GetRequests, 209 SyntacticMatches, 0 SemanticMatches, 105 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3380 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=2447, Invalid=8895, Unknown=0, NotChecked=0, Total=11342 [2019-12-07 20:17:47,693 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8963 states. [2019-12-07 20:17:47,796 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8963 to 1333. [2019-12-07 20:17:47,796 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1333 states. [2019-12-07 20:17:47,799 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1333 states to 1333 states and 2214 transitions. [2019-12-07 20:17:47,799 INFO L78 Accepts]: Start accepts. Automaton has 1333 states and 2214 transitions. Word has length 58 [2019-12-07 20:17:47,799 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:17:47,799 INFO L462 AbstractCegarLoop]: Abstraction has 1333 states and 2214 transitions. [2019-12-07 20:17:47,799 INFO L463 AbstractCegarLoop]: Interpolant automaton has 16 states. [2019-12-07 20:17:47,799 INFO L276 IsEmpty]: Start isEmpty. Operand 1333 states and 2214 transitions. [2019-12-07 20:17:47,800 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2019-12-07 20:17:47,800 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:17:47,800 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:17:48,201 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 mathsat -unsat_core_generation=3,11 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:17:48,202 INFO L410 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:17:48,203 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:17:48,203 INFO L82 PathProgramCache]: Analyzing trace with hash -1190675934, now seen corresponding path program 1 times [2019-12-07 20:17:48,204 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:17:48,204 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [531110044] [2019-12-07 20:17:48,205 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 12 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with mathsat -unsat_core_generation=3 [2019-12-07 20:17:48,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:17:48,407 INFO L264 TraceCheckSpWp]: Trace formula consists of 425 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 20:17:48,409 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:17:48,422 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:48,422 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:17:48,455 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:48,456 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [531110044] [2019-12-07 20:17:48,456 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [864052350] [2019-12-07 20:17:48,456 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/cvc4 Starting monitored process 13 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:17:48,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:17:48,644 INFO L264 TraceCheckSpWp]: Trace formula consists of 425 conjuncts, 20 conjunts are in the unsatisfiable core [2019-12-07 20:17:48,646 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:17:48,725 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:17:48,725 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:17:48,847 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:17:48,847 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 2 imperfect interpolant sequences. [2019-12-07 20:17:48,847 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9, 9] imperfect sequences [5, 5] total 22 [2019-12-07 20:17:48,847 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2023137527] [2019-12-07 20:17:48,848 INFO L442 AbstractCegarLoop]: Interpolant automaton has 16 states [2019-12-07 20:17:48,848 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:17:48,848 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2019-12-07 20:17:48,848 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=56, Invalid=406, Unknown=0, NotChecked=0, Total=462 [2019-12-07 20:17:48,848 INFO L87 Difference]: Start difference. First operand 1333 states and 2214 transitions. Second operand 16 states. [2019-12-07 20:17:55,992 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:17:55,992 INFO L93 Difference]: Finished difference Result 9742 states and 15629 transitions. [2019-12-07 20:17:55,993 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 89 states. [2019-12-07 20:17:55,993 INFO L78 Accepts]: Start accepts. Automaton has 16 states. Word has length 59 [2019-12-07 20:17:55,993 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:17:56,024 INFO L225 Difference]: With dead ends: 9742 [2019-12-07 20:17:56,024 INFO L226 Difference]: Without dead ends: 9012 [2019-12-07 20:17:56,028 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 320 GetRequests, 213 SyntacticMatches, 0 SemanticMatches, 107 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3498 ImplicationChecksByTransitivity, 2.6s TimeCoverageRelationStatistics Valid=2495, Invalid=9277, Unknown=0, NotChecked=0, Total=11772 [2019-12-07 20:17:56,034 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9012 states. [2019-12-07 20:17:56,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9012 to 1574. [2019-12-07 20:17:56,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1574 states. [2019-12-07 20:17:56,163 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1574 states to 1574 states and 2576 transitions. [2019-12-07 20:17:56,163 INFO L78 Accepts]: Start accepts. Automaton has 1574 states and 2576 transitions. Word has length 59 [2019-12-07 20:17:56,163 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:17:56,163 INFO L462 AbstractCegarLoop]: Abstraction has 1574 states and 2576 transitions. [2019-12-07 20:17:56,163 INFO L463 AbstractCegarLoop]: Interpolant automaton has 16 states. [2019-12-07 20:17:56,163 INFO L276 IsEmpty]: Start isEmpty. Operand 1574 states and 2576 transitions. [2019-12-07 20:17:56,164 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2019-12-07 20:17:56,164 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:17:56,164 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:17:56,565 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 cvc4 --incremental --print-success --lang smt --rewrite-divk,12 mathsat -unsat_core_generation=3 [2019-12-07 20:17:56,566 INFO L410 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:17:56,567 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:17:56,567 INFO L82 PathProgramCache]: Analyzing trace with hash -1608706913, now seen corresponding path program 1 times [2019-12-07 20:17:56,568 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:17:56,569 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [814169058] [2019-12-07 20:17:56,569 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 14 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with mathsat -unsat_core_generation=3 [2019-12-07 20:17:56,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:17:56,749 INFO L264 TraceCheckSpWp]: Trace formula consists of 425 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 20:17:56,750 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:17:56,762 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:56,762 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:17:56,794 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:56,794 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [814169058] [2019-12-07 20:17:56,794 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1974952785] [2019-12-07 20:17:56,794 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/cvc4 Starting monitored process 15 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:17:56,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:17:56,975 INFO L264 TraceCheckSpWp]: Trace formula consists of 425 conjuncts, 14 conjunts are in the unsatisfiable core [2019-12-07 20:17:56,976 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:17:57,027 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:17:57,028 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:17:57,048 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:17:57,049 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 2 imperfect interpolant sequences. [2019-12-07 20:17:57,049 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7, 7] imperfect sequences [5, 5] total 13 [2019-12-07 20:17:57,049 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1134701098] [2019-12-07 20:17:57,049 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2019-12-07 20:17:57,049 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:17:57,049 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 20:17:57,050 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=125, Unknown=0, NotChecked=0, Total=156 [2019-12-07 20:17:57,050 INFO L87 Difference]: Start difference. First operand 1574 states and 2576 transitions. Second operand 7 states. [2019-12-07 20:17:57,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:17:57,455 INFO L93 Difference]: Finished difference Result 2992 states and 4824 transitions. [2019-12-07 20:17:57,455 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2019-12-07 20:17:57,455 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 59 [2019-12-07 20:17:57,455 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:17:57,458 INFO L225 Difference]: With dead ends: 2992 [2019-12-07 20:17:57,458 INFO L226 Difference]: Without dead ends: 1865 [2019-12-07 20:17:57,460 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 240 GetRequests, 219 SyntacticMatches, 2 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=94, Invalid=326, Unknown=0, NotChecked=0, Total=420 [2019-12-07 20:17:57,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1865 states. [2019-12-07 20:17:57,568 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1865 to 1396. [2019-12-07 20:17:57,568 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1396 states. [2019-12-07 20:17:57,570 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1396 states to 1396 states and 2282 transitions. [2019-12-07 20:17:57,571 INFO L78 Accepts]: Start accepts. Automaton has 1396 states and 2282 transitions. Word has length 59 [2019-12-07 20:17:57,571 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:17:57,571 INFO L462 AbstractCegarLoop]: Abstraction has 1396 states and 2282 transitions. [2019-12-07 20:17:57,571 INFO L463 AbstractCegarLoop]: Interpolant automaton has 7 states. [2019-12-07 20:17:57,571 INFO L276 IsEmpty]: Start isEmpty. Operand 1396 states and 2282 transitions. [2019-12-07 20:17:57,572 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2019-12-07 20:17:57,572 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:17:57,572 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:17:57,973 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 mathsat -unsat_core_generation=3,15 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:17:57,974 INFO L410 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:17:57,974 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:17:57,975 INFO L82 PathProgramCache]: Analyzing trace with hash 1160689309, now seen corresponding path program 1 times [2019-12-07 20:17:57,976 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:17:57,976 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1432008245] [2019-12-07 20:17:57,976 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 16 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with mathsat -unsat_core_generation=3 [2019-12-07 20:17:58,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:17:58,178 INFO L264 TraceCheckSpWp]: Trace formula consists of 426 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 20:17:58,179 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:17:58,192 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:58,192 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:17:58,226 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:58,227 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1432008245] [2019-12-07 20:17:58,227 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1474059063] [2019-12-07 20:17:58,227 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/cvc4 Starting monitored process 17 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:17:58,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:17:58,437 INFO L264 TraceCheckSpWp]: Trace formula consists of 426 conjuncts, 6 conjunts are in the unsatisfiable core [2019-12-07 20:17:58,438 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:17:58,469 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:17:58,469 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:17:58,474 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:17:58,474 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 2 imperfect interpolant sequences. [2019-12-07 20:17:58,474 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [5, 5] total 11 [2019-12-07 20:17:58,474 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [19443463] [2019-12-07 20:17:58,474 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-12-07 20:17:58,474 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:17:58,475 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 20:17:58,475 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2019-12-07 20:17:58,475 INFO L87 Difference]: Start difference. First operand 1396 states and 2282 transitions. Second operand 5 states. [2019-12-07 20:17:58,949 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:17:58,949 INFO L93 Difference]: Finished difference Result 4783 states and 7818 transitions. [2019-12-07 20:17:58,949 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 20:17:58,949 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 60 [2019-12-07 20:17:58,950 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:17:58,955 INFO L225 Difference]: With dead ends: 4783 [2019-12-07 20:17:58,955 INFO L226 Difference]: Without dead ends: 3931 [2019-12-07 20:17:58,956 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 240 GetRequests, 227 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2019-12-07 20:17:58,960 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3931 states. [2019-12-07 20:17:59,159 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3931 to 2624. [2019-12-07 20:17:59,159 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2624 states. [2019-12-07 20:17:59,163 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2624 states to 2624 states and 4286 transitions. [2019-12-07 20:17:59,163 INFO L78 Accepts]: Start accepts. Automaton has 2624 states and 4286 transitions. Word has length 60 [2019-12-07 20:17:59,163 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:17:59,164 INFO L462 AbstractCegarLoop]: Abstraction has 2624 states and 4286 transitions. [2019-12-07 20:17:59,164 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-12-07 20:17:59,164 INFO L276 IsEmpty]: Start isEmpty. Operand 2624 states and 4286 transitions. [2019-12-07 20:17:59,165 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2019-12-07 20:17:59,165 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:17:59,165 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:17:59,566 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 mathsat -unsat_core_generation=3,17 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:17:59,567 INFO L410 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:17:59,568 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:17:59,568 INFO L82 PathProgramCache]: Analyzing trace with hash 1212942047, now seen corresponding path program 1 times [2019-12-07 20:17:59,569 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:17:59,569 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [988340728] [2019-12-07 20:17:59,569 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 18 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with mathsat -unsat_core_generation=3 [2019-12-07 20:17:59,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:17:59,787 INFO L264 TraceCheckSpWp]: Trace formula consists of 428 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 20:17:59,788 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:17:59,803 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:59,803 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:17:59,837 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:17:59,837 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [988340728] [2019-12-07 20:17:59,837 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [165050062] [2019-12-07 20:17:59,837 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/cvc4 Starting monitored process 19 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:18:00,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:18:00,036 INFO L264 TraceCheckSpWp]: Trace formula consists of 428 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 20:18:00,037 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:18:00,058 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:18:00,058 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:18:00,069 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:18:00,069 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 2 imperfect interpolant sequences. [2019-12-07 20:18:00,069 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [5, 5] total 10 [2019-12-07 20:18:00,069 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [371991443] [2019-12-07 20:18:00,070 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 20:18:00,070 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:18:00,070 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 20:18:00,070 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2019-12-07 20:18:00,070 INFO L87 Difference]: Start difference. First operand 2624 states and 4286 transitions. Second operand 4 states. [2019-12-07 20:18:00,396 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:18:00,396 INFO L93 Difference]: Finished difference Result 3911 states and 6283 transitions. [2019-12-07 20:18:00,396 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 20:18:00,396 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 62 [2019-12-07 20:18:00,396 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:18:00,399 INFO L225 Difference]: With dead ends: 3911 [2019-12-07 20:18:00,399 INFO L226 Difference]: Without dead ends: 2607 [2019-12-07 20:18:00,401 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 245 GetRequests, 235 SyntacticMatches, 1 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=81, Unknown=0, NotChecked=0, Total=110 [2019-12-07 20:18:00,403 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2607 states. [2019-12-07 20:18:00,549 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2607 to 1967. [2019-12-07 20:18:00,549 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1967 states. [2019-12-07 20:18:00,552 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1967 states to 1967 states and 3241 transitions. [2019-12-07 20:18:00,552 INFO L78 Accepts]: Start accepts. Automaton has 1967 states and 3241 transitions. Word has length 62 [2019-12-07 20:18:00,552 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:18:00,552 INFO L462 AbstractCegarLoop]: Abstraction has 1967 states and 3241 transitions. [2019-12-07 20:18:00,552 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 20:18:00,552 INFO L276 IsEmpty]: Start isEmpty. Operand 1967 states and 3241 transitions. [2019-12-07 20:18:00,553 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2019-12-07 20:18:00,553 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:18:00,553 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:18:00,954 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 mathsat -unsat_core_generation=3,19 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:18:00,955 INFO L410 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:18:00,955 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:18:00,956 INFO L82 PathProgramCache]: Analyzing trace with hash 737410204, now seen corresponding path program 1 times [2019-12-07 20:18:00,957 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:18:00,957 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [161715884] [2019-12-07 20:18:00,957 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 20 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with mathsat -unsat_core_generation=3 [2019-12-07 20:18:01,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:18:01,151 INFO L264 TraceCheckSpWp]: Trace formula consists of 451 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 20:18:01,152 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:18:01,166 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:18:01,166 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:18:01,201 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:18:01,201 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [161715884] [2019-12-07 20:18:01,202 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [476501723] [2019-12-07 20:18:01,202 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/cvc4 Starting monitored process 21 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:18:01,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:18:01,383 INFO L264 TraceCheckSpWp]: Trace formula consists of 451 conjuncts, 6 conjunts are in the unsatisfiable core [2019-12-07 20:18:01,384 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:18:01,412 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:18:01,412 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:18:01,417 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:18:01,417 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 2 imperfect interpolant sequences. [2019-12-07 20:18:01,418 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [5, 5] total 11 [2019-12-07 20:18:01,418 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1149018447] [2019-12-07 20:18:01,418 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-12-07 20:18:01,418 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:18:01,418 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 20:18:01,418 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2019-12-07 20:18:01,418 INFO L87 Difference]: Start difference. First operand 1967 states and 3241 transitions. Second operand 5 states. [2019-12-07 20:18:01,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:18:01,874 INFO L93 Difference]: Finished difference Result 5581 states and 8978 transitions. [2019-12-07 20:18:01,875 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 20:18:01,875 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 66 [2019-12-07 20:18:01,875 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:18:01,880 INFO L225 Difference]: With dead ends: 5581 [2019-12-07 20:18:01,880 INFO L226 Difference]: Without dead ends: 4417 [2019-12-07 20:18:01,882 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 264 GetRequests, 251 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2019-12-07 20:18:01,885 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4417 states. [2019-12-07 20:18:02,108 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4417 to 3191. [2019-12-07 20:18:02,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3191 states. [2019-12-07 20:18:02,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3191 states to 3191 states and 5305 transitions. [2019-12-07 20:18:02,112 INFO L78 Accepts]: Start accepts. Automaton has 3191 states and 5305 transitions. Word has length 66 [2019-12-07 20:18:02,112 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:18:02,112 INFO L462 AbstractCegarLoop]: Abstraction has 3191 states and 5305 transitions. [2019-12-07 20:18:02,112 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-12-07 20:18:02,112 INFO L276 IsEmpty]: Start isEmpty. Operand 3191 states and 5305 transitions. [2019-12-07 20:18:02,114 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2019-12-07 20:18:02,114 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:18:02,114 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:18:02,515 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 mathsat -unsat_core_generation=3,21 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:18:02,516 INFO L410 AbstractCegarLoop]: === Iteration 15 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:18:02,517 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:18:02,517 INFO L82 PathProgramCache]: Analyzing trace with hash -2115831750, now seen corresponding path program 1 times [2019-12-07 20:18:02,518 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:18:02,518 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1878733527] [2019-12-07 20:18:02,518 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 22 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with mathsat -unsat_core_generation=3 [2019-12-07 20:18:02,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:18:02,727 INFO L264 TraceCheckSpWp]: Trace formula consists of 436 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 20:18:02,728 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:18:02,734 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:18:02,734 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:18:02,737 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:18:02,737 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1878733527] [2019-12-07 20:18:02,737 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:18:02,737 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2019-12-07 20:18:02,738 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [576064476] [2019-12-07 20:18:02,738 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-12-07 20:18:02,738 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:18:02,738 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 20:18:02,738 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:18:02,738 INFO L87 Difference]: Start difference. First operand 3191 states and 5305 transitions. Second operand 3 states. [2019-12-07 20:18:03,186 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:18:03,186 INFO L93 Difference]: Finished difference Result 9383 states and 15603 transitions. [2019-12-07 20:18:03,187 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 20:18:03,187 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 66 [2019-12-07 20:18:03,187 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:18:03,194 INFO L225 Difference]: With dead ends: 9383 [2019-12-07 20:18:03,194 INFO L226 Difference]: Without dead ends: 6225 [2019-12-07 20:18:03,197 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 130 GetRequests, 129 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:18:03,202 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6225 states. [2019-12-07 20:18:03,452 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6225 to 4337. [2019-12-07 20:18:03,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4337 states. [2019-12-07 20:18:03,456 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4337 states to 4337 states and 7418 transitions. [2019-12-07 20:18:03,457 INFO L78 Accepts]: Start accepts. Automaton has 4337 states and 7418 transitions. Word has length 66 [2019-12-07 20:18:03,457 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:18:03,457 INFO L462 AbstractCegarLoop]: Abstraction has 4337 states and 7418 transitions. [2019-12-07 20:18:03,457 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-12-07 20:18:03,457 INFO L276 IsEmpty]: Start isEmpty. Operand 4337 states and 7418 transitions. [2019-12-07 20:18:03,459 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2019-12-07 20:18:03,459 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:18:03,459 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:18:03,660 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 mathsat -unsat_core_generation=3 [2019-12-07 20:18:03,660 INFO L410 AbstractCegarLoop]: === Iteration 16 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:18:03,661 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:18:03,661 INFO L82 PathProgramCache]: Analyzing trace with hash -245114945, now seen corresponding path program 1 times [2019-12-07 20:18:03,662 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:18:03,662 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1377379273] [2019-12-07 20:18:03,663 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 23 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with mathsat -unsat_core_generation=3 [2019-12-07 20:18:03,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:18:03,907 INFO L264 TraceCheckSpWp]: Trace formula consists of 452 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 20:18:03,908 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:18:03,921 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:18:03,921 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:18:03,959 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:18:03,959 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1377379273] [2019-12-07 20:18:03,959 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [50246464] [2019-12-07 20:18:03,959 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/cvc4 Starting monitored process 24 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:18:04,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:18:04,146 INFO L264 TraceCheckSpWp]: Trace formula consists of 452 conjuncts, 8 conjunts are in the unsatisfiable core [2019-12-07 20:18:04,147 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:18:04,177 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:18:04,177 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:18:04,190 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:18:04,190 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 2 imperfect interpolant sequences. [2019-12-07 20:18:04,190 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [5, 5] total 11 [2019-12-07 20:18:04,191 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [783287718] [2019-12-07 20:18:04,191 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-12-07 20:18:04,191 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:18:04,191 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 20:18:04,191 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2019-12-07 20:18:04,191 INFO L87 Difference]: Start difference. First operand 4337 states and 7418 transitions. Second operand 5 states. [2019-12-07 20:18:04,703 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:18:04,703 INFO L93 Difference]: Finished difference Result 6429 states and 10655 transitions. [2019-12-07 20:18:04,704 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-12-07 20:18:04,704 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 67 [2019-12-07 20:18:04,704 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:18:04,708 INFO L225 Difference]: With dead ends: 6429 [2019-12-07 20:18:04,709 INFO L226 Difference]: Without dead ends: 4573 [2019-12-07 20:18:04,711 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 266 GetRequests, 254 SyntacticMatches, 1 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=37, Invalid=119, Unknown=0, NotChecked=0, Total=156 [2019-12-07 20:18:04,714 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4573 states. [2019-12-07 20:18:04,986 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4573 to 3879. [2019-12-07 20:18:04,987 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3879 states. [2019-12-07 20:18:04,991 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3879 states to 3879 states and 6698 transitions. [2019-12-07 20:18:04,991 INFO L78 Accepts]: Start accepts. Automaton has 3879 states and 6698 transitions. Word has length 67 [2019-12-07 20:18:04,991 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:18:04,991 INFO L462 AbstractCegarLoop]: Abstraction has 3879 states and 6698 transitions. [2019-12-07 20:18:04,991 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-12-07 20:18:04,991 INFO L276 IsEmpty]: Start isEmpty. Operand 3879 states and 6698 transitions. [2019-12-07 20:18:04,993 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2019-12-07 20:18:04,994 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:18:04,994 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:18:05,395 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 mathsat -unsat_core_generation=3,24 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:18:05,396 INFO L410 AbstractCegarLoop]: === Iteration 17 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:18:05,396 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:18:05,396 INFO L82 PathProgramCache]: Analyzing trace with hash 167071917, now seen corresponding path program 1 times [2019-12-07 20:18:05,397 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:18:05,398 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [420375075] [2019-12-07 20:18:05,398 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 25 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with mathsat -unsat_core_generation=3 [2019-12-07 20:18:05,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:18:05,587 INFO L264 TraceCheckSpWp]: Trace formula consists of 438 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 20:18:05,588 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:18:05,594 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:18:05,594 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:18:05,597 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:18:05,597 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [420375075] [2019-12-07 20:18:05,597 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:18:05,598 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2019-12-07 20:18:05,598 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1271455813] [2019-12-07 20:18:05,598 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-12-07 20:18:05,598 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:18:05,598 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 20:18:05,598 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:18:05,598 INFO L87 Difference]: Start difference. First operand 3879 states and 6698 transitions. Second operand 3 states. [2019-12-07 20:18:06,034 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:18:06,034 INFO L93 Difference]: Finished difference Result 11425 states and 19744 transitions. [2019-12-07 20:18:06,034 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 20:18:06,035 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 67 [2019-12-07 20:18:06,035 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:18:06,040 INFO L225 Difference]: With dead ends: 11425 [2019-12-07 20:18:06,040 INFO L226 Difference]: Without dead ends: 7583 [2019-12-07 20:18:06,044 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 132 GetRequests, 131 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:18:06,049 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7583 states. [2019-12-07 20:18:06,355 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7583 to 6153. [2019-12-07 20:18:06,355 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6153 states. [2019-12-07 20:18:06,361 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6153 states to 6153 states and 10875 transitions. [2019-12-07 20:18:06,362 INFO L78 Accepts]: Start accepts. Automaton has 6153 states and 10875 transitions. Word has length 67 [2019-12-07 20:18:06,362 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:18:06,362 INFO L462 AbstractCegarLoop]: Abstraction has 6153 states and 10875 transitions. [2019-12-07 20:18:06,362 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-12-07 20:18:06,362 INFO L276 IsEmpty]: Start isEmpty. Operand 6153 states and 10875 transitions. [2019-12-07 20:18:06,366 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2019-12-07 20:18:06,366 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:18:06,366 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:18:06,566 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 mathsat -unsat_core_generation=3 [2019-12-07 20:18:06,567 INFO L410 AbstractCegarLoop]: === Iteration 18 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:18:06,567 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:18:06,568 INFO L82 PathProgramCache]: Analyzing trace with hash -268562696, now seen corresponding path program 1 times [2019-12-07 20:18:06,569 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:18:06,569 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1180564729] [2019-12-07 20:18:06,569 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 26 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 26 with mathsat -unsat_core_generation=3 [2019-12-07 20:18:06,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:18:06,800 INFO L264 TraceCheckSpWp]: Trace formula consists of 440 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 20:18:06,801 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:18:06,807 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:18:06,807 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:18:06,810 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-12-07 20:18:06,811 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1180564729] [2019-12-07 20:18:06,811 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 20:18:06,811 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2019-12-07 20:18:06,811 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [790773234] [2019-12-07 20:18:06,811 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-12-07 20:18:06,811 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:18:06,811 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 20:18:06,811 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:18:06,811 INFO L87 Difference]: Start difference. First operand 6153 states and 10875 transitions. Second operand 3 states. [2019-12-07 20:18:07,357 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:18:07,358 INFO L93 Difference]: Finished difference Result 18209 states and 32205 transitions. [2019-12-07 20:18:07,358 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 20:18:07,358 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 68 [2019-12-07 20:18:07,358 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:18:07,367 INFO L225 Difference]: With dead ends: 18209 [2019-12-07 20:18:07,367 INFO L226 Difference]: Without dead ends: 12097 [2019-12-07 20:18:07,373 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 133 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 20:18:07,381 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12097 states. [2019-12-07 20:18:07,840 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12097 to 10667. [2019-12-07 20:18:07,840 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10667 states. [2019-12-07 20:18:07,851 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10667 states to 10667 states and 19132 transitions. [2019-12-07 20:18:07,851 INFO L78 Accepts]: Start accepts. Automaton has 10667 states and 19132 transitions. Word has length 68 [2019-12-07 20:18:07,851 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:18:07,851 INFO L462 AbstractCegarLoop]: Abstraction has 10667 states and 19132 transitions. [2019-12-07 20:18:07,851 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-12-07 20:18:07,851 INFO L276 IsEmpty]: Start isEmpty. Operand 10667 states and 19132 transitions. [2019-12-07 20:18:07,857 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2019-12-07 20:18:07,857 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 20:18:07,857 INFO L410 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 20:18:08,057 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 mathsat -unsat_core_generation=3 [2019-12-07 20:18:08,058 INFO L410 AbstractCegarLoop]: === Iteration 19 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 20:18:08,059 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 20:18:08,059 INFO L82 PathProgramCache]: Analyzing trace with hash -552890897, now seen corresponding path program 1 times [2019-12-07 20:18:08,060 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 20:18:08,060 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [359433211] [2019-12-07 20:18:08,060 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/mathsat Starting monitored process 27 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 27 with mathsat -unsat_core_generation=3 [2019-12-07 20:18:08,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:18:08,330 INFO L264 TraceCheckSpWp]: Trace formula consists of 442 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 20:18:08,331 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:18:08,344 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:18:08,344 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:18:08,380 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 20:18:08,380 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [359433211] [2019-12-07 20:18:08,380 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [214199444] [2019-12-07 20:18:08,380 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/cvc4 Starting monitored process 28 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 28 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:18:08,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 20:18:08,556 INFO L264 TraceCheckSpWp]: Trace formula consists of 442 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 20:18:08,557 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 20:18:08,589 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:18:08,589 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 20:18:08,612 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2019-12-07 20:18:08,612 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 2 imperfect interpolant sequences. [2019-12-07 20:18:08,612 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 4] imperfect sequences [5, 5] total 13 [2019-12-07 20:18:08,612 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [246940524] [2019-12-07 20:18:08,613 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2019-12-07 20:18:08,613 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 20:18:08,613 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 20:18:08,613 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=123, Unknown=0, NotChecked=0, Total=156 [2019-12-07 20:18:08,613 INFO L87 Difference]: Start difference. First operand 10667 states and 19132 transitions. Second operand 7 states. [2019-12-07 20:18:09,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 20:18:09,175 INFO L93 Difference]: Finished difference Result 11379 states and 20269 transitions. [2019-12-07 20:18:09,176 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-12-07 20:18:09,176 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 69 [2019-12-07 20:18:09,176 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 20:18:09,176 INFO L225 Difference]: With dead ends: 11379 [2019-12-07 20:18:09,176 INFO L226 Difference]: Without dead ends: 0 [2019-12-07 20:18:09,184 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 274 GetRequests, 261 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=164, Unknown=0, NotChecked=0, Total=210 [2019-12-07 20:18:09,184 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2019-12-07 20:18:09,184 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2019-12-07 20:18:09,184 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2019-12-07 20:18:09,184 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2019-12-07 20:18:09,184 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 69 [2019-12-07 20:18:09,184 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 20:18:09,184 INFO L462 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 20:18:09,184 INFO L463 AbstractCegarLoop]: Interpolant automaton has 7 states. [2019-12-07 20:18:09,185 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2019-12-07 20:18:09,185 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2019-12-07 20:18:09,586 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 27 mathsat -unsat_core_generation=3,28 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 20:18:09,588 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2019-12-07 20:18:09,805 WARN L192 SmtUtils]: Spent 209.00 ms on a formula simplification. DAG size of input: 172 DAG size of output: 158 [2019-12-07 20:18:10,070 WARN L192 SmtUtils]: Spent 198.00 ms on a formula simplification. DAG size of input: 183 DAG size of output: 114 [2019-12-07 20:18:10,177 WARN L192 SmtUtils]: Spent 105.00 ms on a formula simplification. DAG size of input: 182 DAG size of output: 168 [2019-12-07 20:18:10,937 WARN L192 SmtUtils]: Spent 536.00 ms on a formula simplification. DAG size of input: 327 DAG size of output: 292 [2019-12-07 20:18:11,328 WARN L192 SmtUtils]: Spent 389.00 ms on a formula simplification. DAG size of input: 287 DAG size of output: 251 [2019-12-07 20:18:11,459 WARN L192 SmtUtils]: Spent 129.00 ms on a formula simplification. DAG size of input: 183 DAG size of output: 114 [2019-12-07 20:18:11,646 WARN L192 SmtUtils]: Spent 185.00 ms on a formula simplification. DAG size of input: 234 DAG size of output: 206 [2019-12-07 20:18:11,789 WARN L192 SmtUtils]: Spent 142.00 ms on a formula simplification. DAG size of input: 170 DAG size of output: 144 [2019-12-07 20:18:12,089 WARN L192 SmtUtils]: Spent 298.00 ms on a formula simplification. DAG size of input: 263 DAG size of output: 231 [2019-12-07 20:18:12,428 WARN L192 SmtUtils]: Spent 337.00 ms on a formula simplification. DAG size of input: 337 DAG size of output: 319 [2019-12-07 20:18:12,636 WARN L192 SmtUtils]: Spent 207.00 ms on a formula simplification. DAG size of input: 235 DAG size of output: 208 [2019-12-07 20:18:12,907 WARN L192 SmtUtils]: Spent 269.00 ms on a formula simplification. DAG size of input: 259 DAG size of output: 233 [2019-12-07 20:18:13,451 WARN L192 SmtUtils]: Spent 542.00 ms on a formula simplification. DAG size of input: 302 DAG size of output: 274 [2019-12-07 20:18:13,780 WARN L192 SmtUtils]: Spent 328.00 ms on a formula simplification. DAG size of input: 269 DAG size of output: 234 [2019-12-07 20:18:14,032 WARN L192 SmtUtils]: Spent 183.00 ms on a formula simplification. DAG size of input: 234 DAG size of output: 206 [2019-12-07 20:18:14,275 WARN L192 SmtUtils]: Spent 242.00 ms on a formula simplification. DAG size of input: 251 DAG size of output: 219 [2019-12-07 20:18:14,377 WARN L192 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 196 DAG size of output: 181 [2019-12-07 20:18:14,720 WARN L192 SmtUtils]: Spent 208.00 ms on a formula simplification. DAG size of input: 235 DAG size of output: 208 [2019-12-07 20:18:14,851 WARN L192 SmtUtils]: Spent 129.00 ms on a formula simplification. DAG size of input: 183 DAG size of output: 114 [2019-12-07 20:18:14,992 WARN L192 SmtUtils]: Spent 140.00 ms on a formula simplification. DAG size of input: 214 DAG size of output: 186 [2019-12-07 20:18:15,235 WARN L192 SmtUtils]: Spent 153.00 ms on a formula simplification. DAG size of input: 224 DAG size of output: 207 [2019-12-07 20:18:15,411 WARN L192 SmtUtils]: Spent 174.00 ms on a formula simplification. DAG size of input: 214 DAG size of output: 186 [2019-12-07 20:18:15,577 WARN L192 SmtUtils]: Spent 104.00 ms on a formula simplification. DAG size of input: 175 DAG size of output: 149 [2019-12-07 20:18:15,718 WARN L192 SmtUtils]: Spent 139.00 ms on a formula simplification. DAG size of input: 214 DAG size of output: 186 [2019-12-07 20:18:15,956 WARN L192 SmtUtils]: Spent 139.00 ms on a formula simplification. DAG size of input: 214 DAG size of output: 186 [2019-12-07 20:18:16,568 WARN L192 SmtUtils]: Spent 527.00 ms on a formula simplification. DAG size of input: 327 DAG size of output: 292 [2019-12-07 20:18:16,934 WARN L192 SmtUtils]: Spent 304.00 ms on a formula simplification. DAG size of input: 274 DAG size of output: 248 [2019-12-07 20:18:17,218 WARN L192 SmtUtils]: Spent 118.00 ms on a formula simplification. DAG size of input: 199 DAG size of output: 184 [2019-12-07 20:18:17,347 WARN L192 SmtUtils]: Spent 128.00 ms on a formula simplification. DAG size of input: 182 DAG size of output: 114 [2019-12-07 20:18:17,503 WARN L192 SmtUtils]: Spent 128.00 ms on a formula simplification. DAG size of input: 182 DAG size of output: 114 [2019-12-07 20:18:17,772 WARN L192 SmtUtils]: Spent 267.00 ms on a formula simplification. DAG size of input: 259 DAG size of output: 233 [2019-12-07 20:18:17,901 WARN L192 SmtUtils]: Spent 128.00 ms on a formula simplification. DAG size of input: 182 DAG size of output: 114 [2019-12-07 20:18:18,450 WARN L192 SmtUtils]: Spent 548.00 ms on a formula simplification. DAG size of input: 331 DAG size of output: 296 [2019-12-07 20:18:18,714 WARN L192 SmtUtils]: Spent 108.00 ms on a formula simplification. DAG size of input: 202 DAG size of output: 187 [2019-12-07 20:18:18,843 WARN L192 SmtUtils]: Spent 128.00 ms on a formula simplification. DAG size of input: 182 DAG size of output: 114 [2019-12-07 20:18:19,737 WARN L192 SmtUtils]: Spent 795.00 ms on a formula simplification. DAG size of input: 382 DAG size of output: 324 [2019-12-07 20:18:20,067 WARN L192 SmtUtils]: Spent 327.00 ms on a formula simplification. DAG size of input: 274 DAG size of output: 239 [2019-12-07 20:18:20,480 WARN L192 SmtUtils]: Spent 310.00 ms on a formula simplification. DAG size of input: 269 DAG size of output: 234 [2019-12-07 20:18:20,666 WARN L192 SmtUtils]: Spent 184.00 ms on a formula simplification. DAG size of input: 234 DAG size of output: 206 [2019-12-07 20:18:21,002 WARN L192 SmtUtils]: Spent 297.00 ms on a formula simplification. DAG size of input: 266 DAG size of output: 234 [2019-12-07 20:18:21,491 WARN L192 SmtUtils]: Spent 487.00 ms on a formula simplification. DAG size of input: 296 DAG size of output: 252 [2019-12-07 20:18:21,830 WARN L192 SmtUtils]: Spent 337.00 ms on a formula simplification. DAG size of input: 337 DAG size of output: 319 [2019-12-07 20:18:22,173 WARN L192 SmtUtils]: Spent 341.00 ms on a formula simplification. DAG size of input: 355 DAG size of output: 330 [2019-12-07 20:18:22,303 WARN L192 SmtUtils]: Spent 128.00 ms on a formula simplification. DAG size of input: 182 DAG size of output: 114 [2019-12-07 20:18:22,731 WARN L192 SmtUtils]: Spent 367.00 ms on a formula simplification. DAG size of input: 306 DAG size of output: 265 [2019-12-07 20:18:22,940 WARN L192 SmtUtils]: Spent 207.00 ms on a formula simplification. DAG size of input: 235 DAG size of output: 208 [2019-12-07 20:18:23,101 WARN L192 SmtUtils]: Spent 137.00 ms on a formula simplification. DAG size of input: 194 DAG size of output: 114 [2019-12-07 20:18:23,233 WARN L192 SmtUtils]: Spent 130.00 ms on a formula simplification. DAG size of input: 183 DAG size of output: 114 [2019-12-07 20:18:23,375 WARN L192 SmtUtils]: Spent 141.00 ms on a formula simplification. DAG size of input: 214 DAG size of output: 186 [2019-12-07 20:18:23,643 WARN L192 SmtUtils]: Spent 147.00 ms on a formula simplification. DAG size of input: 182 DAG size of output: 114 [2019-12-07 20:18:23,791 WARN L192 SmtUtils]: Spent 146.00 ms on a formula simplification. DAG size of input: 182 DAG size of output: 114 [2019-12-07 20:18:24,026 WARN L192 SmtUtils]: Spent 128.00 ms on a formula simplification. DAG size of input: 182 DAG size of output: 114 [2019-12-07 20:18:24,167 WARN L192 SmtUtils]: Spent 140.00 ms on a formula simplification. DAG size of input: 214 DAG size of output: 186 [2019-12-07 20:18:24,297 WARN L192 SmtUtils]: Spent 129.00 ms on a formula simplification. DAG size of input: 182 DAG size of output: 114 [2019-12-07 20:18:24,611 WARN L192 SmtUtils]: Spent 312.00 ms on a formula simplification. DAG size of input: 269 DAG size of output: 234 [2019-12-07 20:18:25,062 WARN L192 SmtUtils]: Spent 384.00 ms on a formula simplification. DAG size of input: 287 DAG size of output: 251 [2019-12-07 20:18:25,192 WARN L192 SmtUtils]: Spent 128.00 ms on a formula simplification. DAG size of input: 182 DAG size of output: 114 [2019-12-07 20:18:25,312 WARN L192 SmtUtils]: Spent 118.00 ms on a formula simplification. DAG size of input: 207 DAG size of output: 194 [2019-12-07 20:18:25,565 WARN L192 SmtUtils]: Spent 216.00 ms on a formula simplification. DAG size of input: 203 DAG size of output: 178 [2019-12-07 20:18:25,846 WARN L192 SmtUtils]: Spent 242.00 ms on a formula simplification. DAG size of input: 251 DAG size of output: 219 [2019-12-07 20:18:26,119 WARN L192 SmtUtils]: Spent 253.00 ms on a formula simplification. DAG size of input: 251 DAG size of output: 219 [2019-12-07 20:18:26,454 WARN L192 SmtUtils]: Spent 298.00 ms on a formula simplification. DAG size of input: 263 DAG size of output: 231 [2019-12-07 20:18:26,779 WARN L192 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 200 DAG size of output: 186 [2019-12-07 20:18:26,897 WARN L192 SmtUtils]: Spent 116.00 ms on a formula simplification. DAG size of input: 210 DAG size of output: 196 [2019-12-07 20:18:27,153 WARN L192 SmtUtils]: Spent 255.00 ms on a formula simplification. DAG size of input: 303 DAG size of output: 288 [2019-12-07 20:18:27,395 WARN L192 SmtUtils]: Spent 240.00 ms on a formula simplification. DAG size of input: 253 DAG size of output: 215 [2019-12-07 20:18:27,608 WARN L192 SmtUtils]: Spent 211.00 ms on a formula simplification. DAG size of input: 252 DAG size of output: 234 [2019-12-07 20:18:27,886 WARN L192 SmtUtils]: Spent 216.00 ms on a formula simplification. DAG size of input: 263 DAG size of output: 248 [2019-12-07 20:18:28,429 WARN L192 SmtUtils]: Spent 542.00 ms on a formula simplification. DAG size of input: 298 DAG size of output: 272 [2019-12-07 20:18:28,561 WARN L192 SmtUtils]: Spent 129.00 ms on a formula simplification. DAG size of input: 183 DAG size of output: 114 [2019-12-07 20:18:29,022 WARN L192 SmtUtils]: Spent 239.00 ms on a formula simplification. DAG size of input: 310 DAG size of output: 299 [2019-12-07 20:18:29,548 WARN L192 SmtUtils]: Spent 524.00 ms on a formula simplification. DAG size of input: 327 DAG size of output: 292 [2019-12-07 20:18:29,843 WARN L192 SmtUtils]: Spent 213.00 ms on a formula simplification. DAG size of input: 260 DAG size of output: 239 [2019-12-07 20:18:30,207 WARN L192 SmtUtils]: Spent 363.00 ms on a formula simplification. DAG size of input: 309 DAG size of output: 271 [2019-12-07 20:18:30,803 WARN L192 SmtUtils]: Spent 525.00 ms on a formula simplification. DAG size of input: 327 DAG size of output: 292 [2019-12-07 20:18:31,090 WARN L192 SmtUtils]: Spent 285.00 ms on a formula simplification. DAG size of input: 259 DAG size of output: 223 [2019-12-07 20:18:31,382 WARN L192 SmtUtils]: Spent 253.00 ms on a formula simplification. DAG size of input: 303 DAG size of output: 288 [2019-12-07 20:18:31,613 WARN L192 SmtUtils]: Spent 206.00 ms on a formula simplification. DAG size of input: 241 DAG size of output: 210 [2019-12-07 20:18:31,820 WARN L192 SmtUtils]: Spent 205.00 ms on a formula simplification. DAG size of input: 241 DAG size of output: 210 [2019-12-07 20:18:31,921 WARN L192 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 199 DAG size of output: 184 [2019-12-07 20:18:32,394 WARN L192 SmtUtils]: Spent 470.00 ms on a formula simplification. DAG size of input: 296 DAG size of output: 252 [2019-12-07 20:18:32,637 WARN L192 SmtUtils]: Spent 242.00 ms on a formula simplification. DAG size of input: 253 DAG size of output: 215 [2019-12-07 20:18:33,154 WARN L192 SmtUtils]: Spent 515.00 ms on a formula simplification. DAG size of input: 298 DAG size of output: 272 [2019-12-07 20:18:33,443 WARN L192 SmtUtils]: Spent 287.00 ms on a formula simplification. DAG size of input: 259 DAG size of output: 223 [2019-12-07 20:18:33,998 WARN L192 SmtUtils]: Spent 553.00 ms on a formula simplification. DAG size of input: 158 DAG size of output: 47 [2019-12-07 20:18:34,506 WARN L192 SmtUtils]: Spent 506.00 ms on a formula simplification. DAG size of input: 136 DAG size of output: 57 [2019-12-07 20:18:34,808 WARN L192 SmtUtils]: Spent 301.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 23 [2019-12-07 20:18:35,449 WARN L192 SmtUtils]: Spent 639.00 ms on a formula simplification. DAG size of input: 168 DAG size of output: 43 [2019-12-07 20:18:35,978 WARN L192 SmtUtils]: Spent 527.00 ms on a formula simplification. DAG size of input: 158 DAG size of output: 47 [2019-12-07 20:18:36,635 WARN L192 SmtUtils]: Spent 656.00 ms on a formula simplification. DAG size of input: 172 DAG size of output: 49 [2019-12-07 20:18:37,269 WARN L192 SmtUtils]: Spent 633.00 ms on a formula simplification. DAG size of input: 145 DAG size of output: 56 [2019-12-07 20:18:39,720 WARN L192 SmtUtils]: Spent 2.45 s on a formula simplification. DAG size of input: 292 DAG size of output: 40 [2019-12-07 20:18:41,521 WARN L192 SmtUtils]: Spent 1.80 s on a formula simplification. DAG size of input: 251 DAG size of output: 33 [2019-12-07 20:18:41,815 WARN L192 SmtUtils]: Spent 293.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 23 [2019-12-07 20:18:42,708 WARN L192 SmtUtils]: Spent 891.00 ms on a formula simplification. DAG size of input: 204 DAG size of output: 47 [2019-12-07 20:18:43,189 WARN L192 SmtUtils]: Spent 479.00 ms on a formula simplification. DAG size of input: 144 DAG size of output: 36 [2019-12-07 20:18:44,672 WARN L192 SmtUtils]: Spent 1.48 s on a formula simplification. DAG size of input: 231 DAG size of output: 32 [2019-12-07 20:18:47,104 WARN L192 SmtUtils]: Spent 2.43 s on a formula simplification. DAG size of input: 319 DAG size of output: 30 [2019-12-07 20:18:48,144 WARN L192 SmtUtils]: Spent 1.04 s on a formula simplification. DAG size of input: 206 DAG size of output: 36 [2019-12-07 20:18:49,633 WARN L192 SmtUtils]: Spent 1.49 s on a formula simplification. DAG size of input: 233 DAG size of output: 44 [2019-12-07 20:18:51,884 WARN L192 SmtUtils]: Spent 2.25 s on a formula simplification. DAG size of input: 274 DAG size of output: 48 [2019-12-07 20:18:53,411 WARN L192 SmtUtils]: Spent 1.53 s on a formula simplification. DAG size of input: 233 DAG size of output: 32 [2019-12-07 20:18:54,089 WARN L192 SmtUtils]: Spent 676.00 ms on a formula simplification. DAG size of input: 158 DAG size of output: 42 [2019-12-07 20:18:55,017 WARN L192 SmtUtils]: Spent 927.00 ms on a formula simplification. DAG size of input: 204 DAG size of output: 47 [2019-12-07 20:18:56,231 WARN L192 SmtUtils]: Spent 1.21 s on a formula simplification. DAG size of input: 219 DAG size of output: 41 [2019-12-07 20:18:57,096 WARN L192 SmtUtils]: Spent 863.00 ms on a formula simplification. DAG size of input: 179 DAG size of output: 32 [2019-12-07 20:18:58,013 WARN L192 SmtUtils]: Spent 915.00 ms on a formula simplification. DAG size of input: 186 DAG size of output: 42 [2019-12-07 20:18:58,514 WARN L192 SmtUtils]: Spent 500.00 ms on a formula simplification. DAG size of input: 124 DAG size of output: 47 [2019-12-07 20:18:59,590 WARN L192 SmtUtils]: Spent 1.07 s on a formula simplification. DAG size of input: 206 DAG size of output: 36 [2019-12-07 20:18:59,887 WARN L192 SmtUtils]: Spent 296.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 23 [2019-12-07 20:19:00,706 WARN L192 SmtUtils]: Spent 818.00 ms on a formula simplification. DAG size of input: 184 DAG size of output: 44 [2019-12-07 20:19:01,114 WARN L192 SmtUtils]: Spent 407.00 ms on a formula simplification. DAG size of input: 137 DAG size of output: 33 [2019-12-07 20:19:02,434 WARN L192 SmtUtils]: Spent 1.32 s on a formula simplification. DAG size of input: 207 DAG size of output: 61 [2019-12-07 20:19:03,254 WARN L192 SmtUtils]: Spent 818.00 ms on a formula simplification. DAG size of input: 184 DAG size of output: 44 [2019-12-07 20:19:04,122 WARN L192 SmtUtils]: Spent 866.00 ms on a formula simplification. DAG size of input: 155 DAG size of output: 44 [2019-12-07 20:19:04,899 WARN L192 SmtUtils]: Spent 776.00 ms on a formula simplification. DAG size of input: 149 DAG size of output: 34 [2019-12-07 20:19:05,806 WARN L192 SmtUtils]: Spent 905.00 ms on a formula simplification. DAG size of input: 184 DAG size of output: 44 [2019-12-07 20:19:06,363 WARN L192 SmtUtils]: Spent 555.00 ms on a formula simplification. DAG size of input: 155 DAG size of output: 44 [2019-12-07 20:19:06,808 WARN L192 SmtUtils]: Spent 444.00 ms on a formula simplification. DAG size of input: 123 DAG size of output: 52 [2019-12-07 20:19:07,620 WARN L192 SmtUtils]: Spent 811.00 ms on a formula simplification. DAG size of input: 184 DAG size of output: 44 [2019-12-07 20:19:08,315 WARN L192 SmtUtils]: Spent 693.00 ms on a formula simplification. DAG size of input: 169 DAG size of output: 46 [2019-12-07 20:19:10,774 WARN L192 SmtUtils]: Spent 2.46 s on a formula simplification. DAG size of input: 292 DAG size of output: 40 [2019-12-07 20:19:11,327 WARN L192 SmtUtils]: Spent 551.00 ms on a formula simplification. DAG size of input: 158 DAG size of output: 47 [2019-12-07 20:19:13,052 WARN L192 SmtUtils]: Spent 1.72 s on a formula simplification. DAG size of input: 248 DAG size of output: 49 [2019-12-07 20:19:13,603 WARN L192 SmtUtils]: Spent 550.00 ms on a formula simplification. DAG size of input: 158 DAG size of output: 47 [2019-12-07 20:19:14,268 WARN L192 SmtUtils]: Spent 664.00 ms on a formula simplification. DAG size of input: 172 DAG size of output: 49 [2019-12-07 20:19:14,542 WARN L192 SmtUtils]: Spent 272.00 ms on a formula simplification. DAG size of input: 91 DAG size of output: 29 [2019-12-07 20:19:15,419 WARN L192 SmtUtils]: Spent 876.00 ms on a formula simplification. DAG size of input: 182 DAG size of output: 35 [2019-12-07 20:19:15,720 WARN L192 SmtUtils]: Spent 299.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 23 [2019-12-07 20:19:16,054 WARN L192 SmtUtils]: Spent 333.00 ms on a formula simplification. DAG size of input: 105 DAG size of output: 41 [2019-12-07 20:19:16,354 WARN L192 SmtUtils]: Spent 299.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 23 [2019-12-07 20:19:17,732 WARN L192 SmtUtils]: Spent 1.38 s on a formula simplification. DAG size of input: 233 DAG size of output: 44 [2019-12-07 20:19:18,031 WARN L192 SmtUtils]: Spent 298.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 23 [2019-12-07 20:19:20,338 WARN L192 SmtUtils]: Spent 2.31 s on a formula simplification. DAG size of input: 296 DAG size of output: 34 [2019-12-07 20:19:20,759 WARN L192 SmtUtils]: Spent 420.00 ms on a formula simplification. DAG size of input: 142 DAG size of output: 31 [2019-12-07 20:19:21,385 WARN L192 SmtUtils]: Spent 610.00 ms on a formula simplification. DAG size of input: 158 DAG size of output: 47 [2019-12-07 20:19:22,322 WARN L192 SmtUtils]: Spent 925.00 ms on a formula simplification. DAG size of input: 185 DAG size of output: 30 [2019-12-07 20:19:22,627 WARN L192 SmtUtils]: Spent 303.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 23 [2019-12-07 20:19:22,835 WARN L192 SmtUtils]: Spent 195.00 ms on a formula simplification. DAG size of input: 81 DAG size of output: 41 [2019-12-07 20:19:23,524 WARN L192 SmtUtils]: Spent 688.00 ms on a formula simplification. DAG size of input: 172 DAG size of output: 49 [2019-12-07 20:19:26,304 WARN L192 SmtUtils]: Spent 2.78 s on a formula simplification. DAG size of input: 324 DAG size of output: 51 [2019-12-07 20:19:27,849 WARN L192 SmtUtils]: Spent 1.54 s on a formula simplification. DAG size of input: 239 DAG size of output: 34 [2019-12-07 20:19:28,701 WARN L192 SmtUtils]: Spent 849.00 ms on a formula simplification. DAG size of input: 182 DAG size of output: 35 [2019-12-07 20:19:30,261 WARN L192 SmtUtils]: Spent 1.54 s on a formula simplification. DAG size of input: 233 DAG size of output: 32 [2019-12-07 20:19:31,181 WARN L192 SmtUtils]: Spent 919.00 ms on a formula simplification. DAG size of input: 204 DAG size of output: 47 [2019-12-07 20:19:31,765 WARN L192 SmtUtils]: Spent 582.00 ms on a formula simplification. DAG size of input: 130 DAG size of output: 53 [2019-12-07 20:19:32,905 WARN L192 SmtUtils]: Spent 1.14 s on a formula simplification. DAG size of input: 234 DAG size of output: 35 [2019-12-07 20:19:34,555 WARN L192 SmtUtils]: Spent 1.65 s on a formula simplification. DAG size of input: 252 DAG size of output: 33 [2019-12-07 20:19:36,878 WARN L192 SmtUtils]: Spent 2.32 s on a formula simplification. DAG size of input: 319 DAG size of output: 30 [2019-12-07 20:19:39,631 WARN L192 SmtUtils]: Spent 2.73 s on a formula simplification. DAG size of input: 330 DAG size of output: 30 [2019-12-07 20:19:39,931 WARN L192 SmtUtils]: Spent 299.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 23 [2019-12-07 20:19:40,756 WARN L192 SmtUtils]: Spent 824.00 ms on a formula simplification. DAG size of input: 158 DAG size of output: 47 [2019-12-07 20:19:42,594 WARN L192 SmtUtils]: Spent 1.84 s on a formula simplification. DAG size of input: 265 DAG size of output: 44 [2019-12-07 20:19:43,614 WARN L192 SmtUtils]: Spent 1.02 s on a formula simplification. DAG size of input: 206 DAG size of output: 36 [2019-12-07 20:19:43,873 WARN L192 SmtUtils]: Spent 258.00 ms on a formula simplification. DAG size of input: 101 DAG size of output: 46 [2019-12-07 20:19:44,172 WARN L192 SmtUtils]: Spent 297.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 23 [2019-12-07 20:19:44,480 WARN L192 SmtUtils]: Spent 307.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 23 [2019-12-07 20:19:45,255 WARN L192 SmtUtils]: Spent 773.00 ms on a formula simplification. DAG size of input: 184 DAG size of output: 44 [2019-12-07 20:19:45,667 WARN L192 SmtUtils]: Spent 411.00 ms on a formula simplification. DAG size of input: 108 DAG size of output: 52 [2019-12-07 20:19:46,544 WARN L192 SmtUtils]: Spent 876.00 ms on a formula simplification. DAG size of input: 185 DAG size of output: 43 [2019-12-07 20:19:46,848 WARN L192 SmtUtils]: Spent 303.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 23 [2019-12-07 20:19:47,147 WARN L192 SmtUtils]: Spent 298.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 23 [2019-12-07 20:19:47,449 WARN L192 SmtUtils]: Spent 301.00 ms on a formula simplification. DAG size of input: 100 DAG size of output: 36 [2019-12-07 20:19:48,056 WARN L192 SmtUtils]: Spent 605.00 ms on a formula simplification. DAG size of input: 167 DAG size of output: 44 [2019-12-07 20:19:48,357 WARN L192 SmtUtils]: Spent 300.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 23 [2019-12-07 20:19:49,179 WARN L192 SmtUtils]: Spent 820.00 ms on a formula simplification. DAG size of input: 184 DAG size of output: 44 [2019-12-07 20:19:49,530 WARN L192 SmtUtils]: Spent 350.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 23 [2019-12-07 20:19:51,047 WARN L192 SmtUtils]: Spent 1.52 s on a formula simplification. DAG size of input: 233 DAG size of output: 32 [2019-12-07 20:19:51,683 WARN L192 SmtUtils]: Spent 634.00 ms on a formula simplification. DAG size of input: 161 DAG size of output: 42 [2019-12-07 20:19:53,393 WARN L192 SmtUtils]: Spent 1.71 s on a formula simplification. DAG size of input: 251 DAG size of output: 33 [2019-12-07 20:19:53,696 WARN L192 SmtUtils]: Spent 302.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 23 [2019-12-07 20:19:55,001 WARN L192 SmtUtils]: Spent 1.28 s on a formula simplification. DAG size of input: 194 DAG size of output: 59 [2019-12-07 20:19:55,140 WARN L192 SmtUtils]: Spent 137.00 ms on a formula simplification. DAG size of input: 77 DAG size of output: 21 [2019-12-07 20:19:56,349 WARN L192 SmtUtils]: Spent 1.21 s on a formula simplification. DAG size of input: 178 DAG size of output: 37 [2019-12-07 20:19:56,793 WARN L192 SmtUtils]: Spent 443.00 ms on a formula simplification. DAG size of input: 123 DAG size of output: 52 [2019-12-07 20:19:58,096 WARN L192 SmtUtils]: Spent 1.30 s on a formula simplification. DAG size of input: 219 DAG size of output: 41 [2019-12-07 20:19:58,240 WARN L192 SmtUtils]: Spent 143.00 ms on a formula simplification. DAG size of input: 78 DAG size of output: 19 [2019-12-07 20:19:59,732 WARN L192 SmtUtils]: Spent 1.49 s on a formula simplification. DAG size of input: 219 DAG size of output: 41 [2019-12-07 20:20:00,206 WARN L192 SmtUtils]: Spent 473.00 ms on a formula simplification. DAG size of input: 124 DAG size of output: 47 [2019-12-07 20:20:01,638 WARN L192 SmtUtils]: Spent 1.43 s on a formula simplification. DAG size of input: 231 DAG size of output: 32 [2019-12-07 20:20:02,557 WARN L192 SmtUtils]: Spent 918.00 ms on a formula simplification. DAG size of input: 186 DAG size of output: 42 [2019-12-07 20:20:03,177 WARN L192 SmtUtils]: Spent 618.00 ms on a formula simplification. DAG size of input: 145 DAG size of output: 56 [2019-12-07 20:20:03,876 WARN L192 SmtUtils]: Spent 698.00 ms on a formula simplification. DAG size of input: 158 DAG size of output: 42 [2019-12-07 20:20:04,720 WARN L192 SmtUtils]: Spent 843.00 ms on a formula simplification. DAG size of input: 186 DAG size of output: 42 [2019-12-07 20:20:05,808 WARN L192 SmtUtils]: Spent 1.09 s on a formula simplification. DAG size of input: 196 DAG size of output: 42 [2019-12-07 20:20:07,695 WARN L192 SmtUtils]: Spent 1.89 s on a formula simplification. DAG size of input: 288 DAG size of output: 30 [2019-12-07 20:20:09,035 WARN L192 SmtUtils]: Spent 1.34 s on a formula simplification. DAG size of input: 214 DAG size of output: 45 [2019-12-07 20:20:10,632 WARN L192 SmtUtils]: Spent 1.60 s on a formula simplification. DAG size of input: 234 DAG size of output: 56 [2019-12-07 20:20:11,169 WARN L192 SmtUtils]: Spent 535.00 ms on a formula simplification. DAG size of input: 153 DAG size of output: 42 [2019-12-07 20:20:13,020 WARN L192 SmtUtils]: Spent 1.85 s on a formula simplification. DAG size of input: 246 DAG size of output: 30 [2019-12-07 20:20:14,908 WARN L192 SmtUtils]: Spent 1.89 s on a formula simplification. DAG size of input: 272 DAG size of output: 51 [2019-12-07 20:20:15,203 WARN L192 SmtUtils]: Spent 293.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 23 [2019-12-07 20:20:15,658 WARN L192 SmtUtils]: Spent 454.00 ms on a formula simplification. DAG size of input: 145 DAG size of output: 34 [2019-12-07 20:20:16,256 WARN L192 SmtUtils]: Spent 596.00 ms on a formula simplification. DAG size of input: 135 DAG size of output: 58 [2019-12-07 20:20:16,675 WARN L192 SmtUtils]: Spent 418.00 ms on a formula simplification. DAG size of input: 92 DAG size of output: 33 [2019-12-07 20:20:17,372 WARN L192 SmtUtils]: Spent 695.00 ms on a formula simplification. DAG size of input: 154 DAG size of output: 42 [2019-12-07 20:20:19,557 WARN L192 SmtUtils]: Spent 2.18 s on a formula simplification. DAG size of input: 299 DAG size of output: 31 [2019-12-07 20:20:22,133 WARN L192 SmtUtils]: Spent 2.58 s on a formula simplification. DAG size of input: 292 DAG size of output: 40 [2019-12-07 20:20:22,635 WARN L192 SmtUtils]: Spent 500.00 ms on a formula simplification. DAG size of input: 136 DAG size of output: 57 [2019-12-07 20:20:23,014 WARN L192 SmtUtils]: Spent 378.00 ms on a formula simplification. DAG size of input: 114 DAG size of output: 48 [2019-12-07 20:20:24,592 WARN L192 SmtUtils]: Spent 1.58 s on a formula simplification. DAG size of input: 239 DAG size of output: 50 [2019-12-07 20:20:26,494 WARN L192 SmtUtils]: Spent 1.90 s on a formula simplification. DAG size of input: 271 DAG size of output: 54 [2019-12-07 20:20:27,110 WARN L192 SmtUtils]: Spent 614.00 ms on a formula simplification. DAG size of input: 168 DAG size of output: 43 [2019-12-07 20:20:29,547 WARN L192 SmtUtils]: Spent 2.44 s on a formula simplification. DAG size of input: 292 DAG size of output: 40 [2019-12-07 20:20:30,972 WARN L192 SmtUtils]: Spent 1.42 s on a formula simplification. DAG size of input: 222 DAG size of output: 30 [2019-12-07 20:20:31,469 WARN L192 SmtUtils]: Spent 495.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 57 [2019-12-07 20:20:33,413 WARN L192 SmtUtils]: Spent 1.94 s on a formula simplification. DAG size of input: 288 DAG size of output: 30 [2019-12-07 20:20:33,683 WARN L192 SmtUtils]: Spent 268.00 ms on a formula simplification. DAG size of input: 101 DAG size of output: 46 [2019-12-07 20:20:34,804 WARN L192 SmtUtils]: Spent 1.12 s on a formula simplification. DAG size of input: 210 DAG size of output: 40 [2019-12-07 20:20:35,954 WARN L192 SmtUtils]: Spent 1.15 s on a formula simplification. DAG size of input: 210 DAG size of output: 40 [2019-12-07 20:20:36,823 WARN L192 SmtUtils]: Spent 868.00 ms on a formula simplification. DAG size of input: 182 DAG size of output: 35 [2019-12-07 20:20:38,516 WARN L192 SmtUtils]: Spent 1.69 s on a formula simplification. DAG size of input: 252 DAG size of output: 33 [2019-12-07 20:20:39,896 WARN L192 SmtUtils]: Spent 1.38 s on a formula simplification. DAG size of input: 214 DAG size of output: 45 [2019-12-07 20:20:41,851 WARN L192 SmtUtils]: Spent 1.95 s on a formula simplification. DAG size of input: 272 DAG size of output: 51 [2019-12-07 20:20:43,242 WARN L192 SmtUtils]: Spent 1.39 s on a formula simplification. DAG size of input: 222 DAG size of output: 30 [2019-12-07 20:20:43,245 INFO L246 CegarLoopResult]: For program point L1951(lines 1951 1957) no Hoare annotation was computed. [2019-12-07 20:20:43,245 INFO L246 CegarLoopResult]: For program point L1951-1(lines 1951 1957) no Hoare annotation was computed. [2019-12-07 20:20:43,245 INFO L246 CegarLoopResult]: For program point L1951-2(lines 1951 1957) no Hoare annotation was computed. [2019-12-07 20:20:43,245 INFO L246 CegarLoopResult]: For program point L1951-3(lines 1951 1957) no Hoare annotation was computed. [2019-12-07 20:20:43,245 INFO L246 CegarLoopResult]: For program point L1951-4(lines 1951 1957) no Hoare annotation was computed. [2019-12-07 20:20:43,245 INFO L246 CegarLoopResult]: For program point L1951-5(lines 1951 1957) no Hoare annotation was computed. [2019-12-07 20:20:43,245 INFO L246 CegarLoopResult]: For program point L1951-6(lines 1951 1957) no Hoare annotation was computed. [2019-12-07 20:20:43,245 INFO L246 CegarLoopResult]: For program point L1951-7(lines 1951 1957) no Hoare annotation was computed. [2019-12-07 20:20:43,245 INFO L246 CegarLoopResult]: For program point L1687(lines 1687 1706) no Hoare annotation was computed. [2019-12-07 20:20:43,245 INFO L246 CegarLoopResult]: For program point L1951-8(lines 1951 1957) no Hoare annotation was computed. [2019-12-07 20:20:43,245 INFO L246 CegarLoopResult]: For program point L1687-1(lines 1687 1706) no Hoare annotation was computed. [2019-12-07 20:20:43,245 INFO L246 CegarLoopResult]: For program point L1951-9(lines 1951 1957) no Hoare annotation was computed. [2019-12-07 20:20:43,245 INFO L246 CegarLoopResult]: For program point L1951-10(lines 1951 1957) no Hoare annotation was computed. [2019-12-07 20:20:43,245 INFO L246 CegarLoopResult]: For program point L1951-11(lines 1951 1957) no Hoare annotation was computed. [2019-12-07 20:20:43,245 INFO L246 CegarLoopResult]: For program point L2349(lines 2349 2489) no Hoare annotation was computed. [2019-12-07 20:20:43,246 INFO L242 CegarLoopResult]: At program point L1821(lines 1816 1824) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,246 INFO L249 CegarLoopResult]: At program point L2614(lines 2596 2616) the Hoare annotation is: true [2019-12-07 20:20:43,246 INFO L246 CegarLoopResult]: For program point L633(lines 633 644) no Hoare annotation was computed. [2019-12-07 20:20:43,246 INFO L246 CegarLoopResult]: For program point L633-1(lines 633 644) no Hoare annotation was computed. [2019-12-07 20:20:43,246 INFO L242 CegarLoopResult]: At program point L1956(lines 1943 1961) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse6 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse8 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse9 (= (_ bv2 32) ~rjh~0)) (.cse10 (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse11 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)))) (or (and .cse0 .cse1 (= ULTIMATE.start_incoming_~client (_ bv2 32)) .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))) (and .cse0 .cse1 .cse2 .cse3 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse5 .cse4 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11))) [2019-12-07 20:20:43,246 INFO L242 CegarLoopResult]: At program point L1956-1(lines 1943 1961) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,246 INFO L242 CegarLoopResult]: At program point L1956-2(lines 1943 1961) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,247 INFO L242 CegarLoopResult]: At program point L1956-3(lines 1943 1961) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,247 INFO L242 CegarLoopResult]: At program point L1956-4(lines 1943 1961) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= ULTIMATE.start_incoming_~client (_ bv2 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))) [2019-12-07 20:20:43,247 INFO L242 CegarLoopResult]: At program point L1956-5(lines 1943 1961) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,247 INFO L242 CegarLoopResult]: At program point L1956-6(lines 1943 1961) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,247 INFO L242 CegarLoopResult]: At program point L1956-7(lines 1943 1961) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,247 INFO L242 CegarLoopResult]: At program point L1956-8(lines 1943 1961) the Hoare annotation is: (let ((.cse0 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse1 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv2 32) ~rjh~0)) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and .cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse1 (= (_ bv1 32) ~bob~0) .cse2 .cse3 .cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (and .cse0 .cse1 (= ULTIMATE.start_incoming_~client (_ bv2 32)) .cse2 .cse3 (= (_ bv2 32) ~__ste_email_to0~0) .cse4 (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))))) [2019-12-07 20:20:43,247 INFO L249 CegarLoopResult]: At program point L1956-9(lines 1943 1961) the Hoare annotation is: true [2019-12-07 20:20:43,247 INFO L242 CegarLoopResult]: At program point L1956-10(lines 1943 1961) the Hoare annotation is: (let ((.cse0 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse1 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv2 32) ~rjh~0)) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and .cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse1 (= (_ bv1 32) ~bob~0) .cse2 (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) .cse3 .cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (and .cse0 .cse1 (= ULTIMATE.start_incoming_~client (_ bv2 32)) .cse2 .cse3 (= (_ bv2 32) ~__ste_email_to0~0) .cse4 (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (= (_ bv0 32) |ULTIMATE.start_getClientForwardReceiver_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))))) [2019-12-07 20:20:43,247 INFO L249 CegarLoopResult]: At program point L1956-11(lines 1943 1961) the Hoare annotation is: true [2019-12-07 20:20:43,247 INFO L246 CegarLoopResult]: For program point L2353(lines 2353 2357) no Hoare annotation was computed. [2019-12-07 20:20:43,248 INFO L246 CegarLoopResult]: For program point L637(lines 637 643) no Hoare annotation was computed. [2019-12-07 20:20:43,248 INFO L246 CegarLoopResult]: For program point L637-1(lines 637 643) no Hoare annotation was computed. [2019-12-07 20:20:43,248 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION(line 476) no Hoare annotation was computed. [2019-12-07 20:20:43,248 INFO L242 CegarLoopResult]: At program point L1830(lines 1825 1833) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,248 INFO L242 CegarLoopResult]: At program point L2491(lines 2340 2492) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,248 INFO L242 CegarLoopResult]: At program point L2359(lines 2349 2489) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv2 32) ~rjh~0)) (.cse3 (not (= (_ bv1 32) ~__ste_email_to0~0))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ULTIMATE.start_setClientAutoResponse_~handle) .cse4) (and .cse0 .cse1 .cse2 .cse3 (= ULTIMATE.start_test_~op2~0 (_ bv0 32)) .cse4))) [2019-12-07 20:20:43,248 INFO L246 CegarLoopResult]: For program point L1038(lines 1038 1054) no Hoare annotation was computed. [2019-12-07 20:20:43,248 INFO L246 CegarLoopResult]: For program point L1038-1(lines 1038 1054) no Hoare annotation was computed. [2019-12-07 20:20:43,248 INFO L246 CegarLoopResult]: For program point L1038-2(lines 1038 1054) no Hoare annotation was computed. [2019-12-07 20:20:43,248 INFO L246 CegarLoopResult]: For program point L1038-3(lines 1038 1054) no Hoare annotation was computed. [2019-12-07 20:20:43,248 INFO L246 CegarLoopResult]: For program point L1038-4(lines 1038 1054) no Hoare annotation was computed. [2019-12-07 20:20:43,248 INFO L246 CegarLoopResult]: For program point L1038-5(lines 1038 1054) no Hoare annotation was computed. [2019-12-07 20:20:43,248 INFO L242 CegarLoopResult]: At program point L642(lines 625 648) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,248 INFO L242 CegarLoopResult]: At program point L642-1(lines 625 648) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,248 INFO L246 CegarLoopResult]: For program point L1966(lines 1966 1974) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L1966-2(lines 1966 1974) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L1966-4(lines 1966 1974) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L1966-6(lines 1966 1974) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L1966-8(lines 1966 1974) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L1966-10(lines 1966 1974) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L1966-12(lines 1966 1974) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L1042(lines 1042 1053) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L1042-1(lines 1042 1053) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L1042-2(lines 1042 1053) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L1042-3(lines 1042 1053) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L910(lines 910 971) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L1042-4(lines 1042 1053) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L910-1(lines 910 971) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L1042-5(lines 1042 1053) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L910-2(lines 910 971) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L910-3(lines 910 971) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L2364(lines 2364 2371) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L911(lines 911 927) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L911-1(lines 911 927) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L911-2(lines 911 927) no Hoare annotation was computed. [2019-12-07 20:20:43,249 INFO L246 CegarLoopResult]: For program point L911-3(lines 911 927) no Hoare annotation was computed. [2019-12-07 20:20:43,250 INFO L246 CegarLoopResult]: For program point L1969(lines 1969 1973) no Hoare annotation was computed. [2019-12-07 20:20:43,250 INFO L242 CegarLoopResult]: At program point L1969-2(lines 1962 1977) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,250 INFO L246 CegarLoopResult]: For program point L1969-3(lines 1969 1973) no Hoare annotation was computed. [2019-12-07 20:20:43,250 INFO L242 CegarLoopResult]: At program point L1969-5(lines 1962 1977) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse6 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse8 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse9 (= (_ bv2 32) ~rjh~0)) (.cse10 (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse11 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse1 .cse2 .cse3 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11))) [2019-12-07 20:20:43,250 INFO L246 CegarLoopResult]: For program point L1969-6(lines 1969 1973) no Hoare annotation was computed. [2019-12-07 20:20:43,250 INFO L242 CegarLoopResult]: At program point L1969-8(lines 1962 1977) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,250 INFO L246 CegarLoopResult]: For program point L1969-9(lines 1969 1973) no Hoare annotation was computed. [2019-12-07 20:20:43,250 INFO L242 CegarLoopResult]: At program point L1969-11(lines 1962 1977) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,250 INFO L246 CegarLoopResult]: For program point L1969-12(lines 1969 1973) no Hoare annotation was computed. [2019-12-07 20:20:43,250 INFO L242 CegarLoopResult]: At program point L1969-14(lines 1962 1977) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,250 INFO L246 CegarLoopResult]: For program point L1969-15(lines 1969 1973) no Hoare annotation was computed. [2019-12-07 20:20:43,250 INFO L242 CegarLoopResult]: At program point L1969-17(lines 1962 1977) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,250 INFO L246 CegarLoopResult]: For program point L1969-18(lines 1969 1973) no Hoare annotation was computed. [2019-12-07 20:20:43,251 INFO L242 CegarLoopResult]: At program point L1969-20(lines 1962 1977) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,251 INFO L246 CegarLoopResult]: For program point L1046(lines 1046 1052) no Hoare annotation was computed. [2019-12-07 20:20:43,251 INFO L246 CegarLoopResult]: For program point L1046-1(lines 1046 1052) no Hoare annotation was computed. [2019-12-07 20:20:43,251 INFO L246 CegarLoopResult]: For program point L1046-2(lines 1046 1052) no Hoare annotation was computed. [2019-12-07 20:20:43,251 INFO L246 CegarLoopResult]: For program point L1046-3(lines 1046 1052) no Hoare annotation was computed. [2019-12-07 20:20:43,251 INFO L246 CegarLoopResult]: For program point L1046-4(lines 1046 1052) no Hoare annotation was computed. [2019-12-07 20:20:43,251 INFO L246 CegarLoopResult]: For program point L1046-5(lines 1046 1052) no Hoare annotation was computed. [2019-12-07 20:20:43,251 INFO L246 CegarLoopResult]: For program point L915(lines 915 926) no Hoare annotation was computed. [2019-12-07 20:20:43,251 INFO L246 CegarLoopResult]: For program point L915-1(lines 915 926) no Hoare annotation was computed. [2019-12-07 20:20:43,251 INFO L246 CegarLoopResult]: For program point L915-2(lines 915 926) no Hoare annotation was computed. [2019-12-07 20:20:43,251 INFO L246 CegarLoopResult]: For program point L915-3(lines 915 926) no Hoare annotation was computed. [2019-12-07 20:20:43,251 INFO L246 CegarLoopResult]: For program point L653(lines 653 665) no Hoare annotation was computed. [2019-12-07 20:20:43,251 INFO L242 CegarLoopResult]: At program point L1051(lines 1034 1057) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse6 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse8 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse9 (= (_ bv2 32) ~rjh~0)) (.cse10 (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse11 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)))) (or (and .cse0 .cse1 (= ULTIMATE.start_incoming_~client (_ bv2 32)) .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))) (and .cse0 .cse1 .cse2 .cse3 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse5 .cse4 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11))) [2019-12-07 20:20:43,251 INFO L242 CegarLoopResult]: At program point L1051-1(lines 1034 1057) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,251 INFO L242 CegarLoopResult]: At program point L1051-2(lines 1034 1057) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= ULTIMATE.start_incoming_~client (_ bv2 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))) [2019-12-07 20:20:43,251 INFO L242 CegarLoopResult]: At program point L1051-3(lines 1034 1057) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,252 INFO L246 CegarLoopResult]: For program point L919(lines 919 925) no Hoare annotation was computed. [2019-12-07 20:20:43,252 INFO L242 CegarLoopResult]: At program point L1051-4(lines 1034 1057) the Hoare annotation is: (let ((.cse0 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse1 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv2 32) ~rjh~0)) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and .cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse1 (= (_ bv1 32) ~bob~0) .cse2 .cse3 .cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (and .cse0 .cse1 (= ULTIMATE.start_incoming_~client (_ bv2 32)) .cse2 .cse3 (= (_ bv2 32) ~__ste_email_to0~0) .cse4 (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))))) [2019-12-07 20:20:43,252 INFO L246 CegarLoopResult]: For program point L919-1(lines 919 925) no Hoare annotation was computed. [2019-12-07 20:20:43,252 INFO L242 CegarLoopResult]: At program point L1051-5(lines 1034 1057) the Hoare annotation is: (let ((.cse0 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse1 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv2 32) ~rjh~0)) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and .cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse1 (= (_ bv1 32) ~bob~0) .cse2 (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) .cse3 .cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (and .cse0 .cse1 (= ULTIMATE.start_incoming_~client (_ bv2 32)) .cse2 .cse3 (= (_ bv2 32) ~__ste_email_to0~0) .cse4 (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (= (_ bv0 32) |ULTIMATE.start_getClientForwardReceiver_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))))) [2019-12-07 20:20:43,252 INFO L246 CegarLoopResult]: For program point L919-2(lines 919 925) no Hoare annotation was computed. [2019-12-07 20:20:43,252 INFO L246 CegarLoopResult]: For program point L919-3(lines 919 925) no Hoare annotation was computed. [2019-12-07 20:20:43,252 INFO L242 CegarLoopResult]: At program point L2373(lines 2360 2488) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv2 32) ~rjh~0)) (.cse3 (not (= (_ bv1 32) ~__ste_email_to0~0))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ULTIMATE.start_setClientAutoResponse_~handle) .cse4) (and .cse0 .cse1 .cse2 .cse3 (= ULTIMATE.start_test_~op2~0 (_ bv0 32)) .cse4))) [2019-12-07 20:20:43,252 INFO L246 CegarLoopResult]: For program point L656(lines 656 664) no Hoare annotation was computed. [2019-12-07 20:20:43,252 INFO L246 CegarLoopResult]: For program point L659(lines 659 663) no Hoare annotation was computed. [2019-12-07 20:20:43,252 INFO L242 CegarLoopResult]: At program point L659-2(lines 649 668) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv2 32) ~rjh~0)) (.cse3 (not (= (_ bv1 32) ~__ste_email_to0~0))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ULTIMATE.start_setClientAutoResponse_~handle) .cse4) (and .cse0 .cse1 .cse2 .cse3 (= ULTIMATE.start_test_~op2~0 (_ bv0 32)) .cse4))) [2019-12-07 20:20:43,252 INFO L246 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2019-12-07 20:20:43,252 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 476) no Hoare annotation was computed. [2019-12-07 20:20:43,252 INFO L242 CegarLoopResult]: At program point L1717(lines 1 2649) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse6 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse8 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse9 (= (_ bv2 32) ~rjh~0)) (.cse10 (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse11 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 (= ULTIMATE.start_incoming_~client (_ bv2 32)) .cse1 .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (= (bvadd ULTIMATE.start_incoming__wrappee__AddressBook_~client (_ bv4294967294 32)) (_ bv0 32)) .cse11 (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))))) [2019-12-07 20:20:43,253 INFO L242 CegarLoopResult]: At program point L1717-1(lines 1 2649) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,253 INFO L242 CegarLoopResult]: At program point L1717-2(lines 1 2649) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= ULTIMATE.start_incoming_~client (_ bv2 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_incoming__wrappee__AddressBook_~client (_ bv4294967294 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))) [2019-12-07 20:20:43,253 INFO L242 CegarLoopResult]: At program point L1717-3(lines 1 2649) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,253 INFO L242 CegarLoopResult]: At program point L1717-4(lines 1 2649) the Hoare annotation is: (let ((.cse0 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse1 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv2 32) ~rjh~0)) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and .cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse1 (= (_ bv1 32) ~bob~0) .cse2 .cse3 .cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (and .cse0 .cse1 (= ULTIMATE.start_incoming_~client (_ bv2 32)) .cse2 .cse3 (= (_ bv2 32) ~__ste_email_to0~0) .cse4 (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (= (bvadd ULTIMATE.start_incoming__wrappee__AddressBook_~client (_ bv4294967294 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))))) [2019-12-07 20:20:43,253 INFO L242 CegarLoopResult]: At program point L1717-5(lines 1 2649) the Hoare annotation is: (let ((.cse0 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse1 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv2 32) ~rjh~0)) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and .cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse1 (= (_ bv1 32) ~bob~0) .cse2 (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) .cse3 .cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (and .cse0 .cse1 (= ULTIMATE.start_incoming_~client (_ bv2 32)) .cse2 .cse3 (= (_ bv2 32) ~__ste_email_to0~0) .cse4 (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (= (_ bv0 32) |ULTIMATE.start_getClientForwardReceiver_#res|) (= (bvadd ULTIMATE.start_incoming__wrappee__AddressBook_~client (_ bv4294967294 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))))) [2019-12-07 20:20:43,253 INFO L246 CegarLoopResult]: For program point L2378(lines 2378 2382) no Hoare annotation was computed. [2019-12-07 20:20:43,253 INFO L246 CegarLoopResult]: For program point L1984(lines 1984 1995) no Hoare annotation was computed. [2019-12-07 20:20:43,253 INFO L246 CegarLoopResult]: For program point L1984-1(lines 1984 1995) no Hoare annotation was computed. [2019-12-07 20:20:43,253 INFO L246 CegarLoopResult]: For program point L1984-2(lines 1984 1995) no Hoare annotation was computed. [2019-12-07 20:20:43,253 INFO L246 CegarLoopResult]: For program point L1984-3(lines 1984 1995) no Hoare annotation was computed. [2019-12-07 20:20:43,253 INFO L246 CegarLoopResult]: For program point L1984-4(lines 1984 1995) no Hoare annotation was computed. [2019-12-07 20:20:43,253 INFO L246 CegarLoopResult]: For program point L1984-5(lines 1984 1995) no Hoare annotation was computed. [2019-12-07 20:20:43,253 INFO L246 CegarLoopResult]: For program point L1984-6(lines 1984 1995) no Hoare annotation was computed. [2019-12-07 20:20:43,253 INFO L246 CegarLoopResult]: For program point L1984-7(lines 1984 1995) no Hoare annotation was computed. [2019-12-07 20:20:43,254 INFO L246 CegarLoopResult]: For program point L1984-8(lines 1984 1995) no Hoare annotation was computed. [2019-12-07 20:20:43,254 INFO L246 CegarLoopResult]: For program point L1984-9(lines 1984 1995) no Hoare annotation was computed. [2019-12-07 20:20:43,254 INFO L246 CegarLoopResult]: For program point L1984-10(lines 1984 1995) no Hoare annotation was computed. [2019-12-07 20:20:43,254 INFO L246 CegarLoopResult]: For program point L1984-11(lines 1984 1995) no Hoare annotation was computed. [2019-12-07 20:20:43,254 INFO L246 CegarLoopResult]: For program point L1984-12(lines 1984 1995) no Hoare annotation was computed. [2019-12-07 20:20:43,254 INFO L246 CegarLoopResult]: For program point L1984-13(lines 1984 1995) no Hoare annotation was computed. [2019-12-07 20:20:43,254 INFO L242 CegarLoopResult]: At program point L1853(lines 1849 1855) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,254 INFO L242 CegarLoopResult]: At program point L1853-1(lines 1849 1855) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,254 INFO L246 CegarLoopResult]: For program point L929(lines 929 970) no Hoare annotation was computed. [2019-12-07 20:20:43,254 INFO L246 CegarLoopResult]: For program point L929-1(lines 929 970) no Hoare annotation was computed. [2019-12-07 20:20:43,254 INFO L246 CegarLoopResult]: For program point L929-2(lines 929 970) no Hoare annotation was computed. [2019-12-07 20:20:43,254 INFO L246 CegarLoopResult]: For program point L929-3(lines 929 970) no Hoare annotation was computed. [2019-12-07 20:20:43,254 INFO L246 CegarLoopResult]: For program point L1062(lines 1062 1074) no Hoare annotation was computed. [2019-12-07 20:20:43,254 INFO L246 CegarLoopResult]: For program point L930(lines 930 946) no Hoare annotation was computed. [2019-12-07 20:20:43,254 INFO L246 CegarLoopResult]: For program point L930-1(lines 930 946) no Hoare annotation was computed. [2019-12-07 20:20:43,254 INFO L246 CegarLoopResult]: For program point L930-2(lines 930 946) no Hoare annotation was computed. [2019-12-07 20:20:43,254 INFO L246 CegarLoopResult]: For program point L930-3(lines 930 946) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L242 CegarLoopResult]: At program point L2384(lines 2374 2487) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv2 32) ~rjh~0)) (.cse3 (not (= (_ bv1 32) ~__ste_email_to0~0))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ULTIMATE.start_setClientAutoResponse_~handle) .cse4) (and .cse0 .cse1 .cse2 .cse3 (= ULTIMATE.start_test_~op2~0 (_ bv0 32)) .cse4))) [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L1988(lines 1988 1994) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L1988-1(lines 1988 1994) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L1988-2(lines 1988 1994) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L1988-3(lines 1988 1994) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L1988-4(lines 1988 1994) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L1988-5(lines 1988 1994) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L1988-6(lines 1988 1994) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L1988-7(lines 1988 1994) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L1988-8(lines 1988 1994) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L1988-9(lines 1988 1994) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L1988-10(lines 1988 1994) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L1988-11(lines 1988 1994) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L1988-12(lines 1988 1994) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L1988-13(lines 1988 1994) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L1065(lines 1065 1073) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L934(lines 934 945) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L934-1(lines 934 945) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L934-2(lines 934 945) no Hoare annotation was computed. [2019-12-07 20:20:43,255 INFO L246 CegarLoopResult]: For program point L934-3(lines 934 945) no Hoare annotation was computed. [2019-12-07 20:20:43,256 INFO L242 CegarLoopResult]: At program point L1595(lines 1570 1597) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,256 INFO L242 CegarLoopResult]: At program point L1595-1(lines 1570 1597) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,256 INFO L242 CegarLoopResult]: At program point L1595-2(lines 1570 1597) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,256 INFO L242 CegarLoopResult]: At program point L1595-3(lines 1570 1597) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,256 INFO L249 CegarLoopResult]: At program point L1595-4(lines 1570 1597) the Hoare annotation is: true [2019-12-07 20:20:43,256 INFO L249 CegarLoopResult]: At program point L1595-5(lines 1570 1597) the Hoare annotation is: true [2019-12-07 20:20:43,256 INFO L246 CegarLoopResult]: For program point L2389(lines 2389 2393) no Hoare annotation was computed. [2019-12-07 20:20:43,256 INFO L246 CegarLoopResult]: For program point L1068(lines 1068 1072) no Hoare annotation was computed. [2019-12-07 20:20:43,256 INFO L242 CegarLoopResult]: At program point L1068-2(lines 1 2649) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= ULTIMATE.start_test_~op2~0 (_ bv0 32)) (= (_ bv2 32) ULTIMATE.start_setClientAutoResponse_~handle) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,256 INFO L242 CegarLoopResult]: At program point L1993(lines 1980 1998) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,256 INFO L242 CegarLoopResult]: At program point L1993-1(lines 1980 1998) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse5 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse6 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse8 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse9 (= (_ bv2 32) ~rjh~0)) (.cse10 (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse11 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))) (and .cse0 .cse1 .cse2 .cse3 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse5 .cse4 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11))) [2019-12-07 20:20:43,256 INFO L242 CegarLoopResult]: At program point L1993-2(lines 1980 1998) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,257 INFO L242 CegarLoopResult]: At program point L1993-3(lines 1980 1998) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,257 INFO L242 CegarLoopResult]: At program point L1993-4(lines 1980 1998) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,257 INFO L242 CegarLoopResult]: At program point L1993-5(lines 1980 1998) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))) [2019-12-07 20:20:43,257 INFO L242 CegarLoopResult]: At program point L1993-6(lines 1980 1998) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,257 INFO L242 CegarLoopResult]: At program point L1993-7(lines 1980 1998) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,257 INFO L242 CegarLoopResult]: At program point L1993-8(lines 1980 1998) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,257 INFO L242 CegarLoopResult]: At program point L1993-9(lines 1980 1998) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,257 INFO L242 CegarLoopResult]: At program point L1993-10(lines 1980 1998) the Hoare annotation is: (let ((.cse0 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse1 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv2 32) ~rjh~0)) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and .cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse1 (= (_ bv1 32) ~bob~0) .cse2 .cse3 .cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ~__ste_email_to0~0) .cse4 (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))))) [2019-12-07 20:20:43,257 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION(line 476) no Hoare annotation was computed. [2019-12-07 20:20:43,257 INFO L249 CegarLoopResult]: At program point L1993-11(lines 1980 1998) the Hoare annotation is: true [2019-12-07 20:20:43,258 INFO L242 CegarLoopResult]: At program point L1993-12(lines 1980 1998) the Hoare annotation is: (let ((.cse0 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse1 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv2 32) ~rjh~0)) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and .cse0 .cse1 (= ULTIMATE.start_incoming_~fwreceiver~0 (_ bv0 32)) .cse2 .cse3 (= (_ bv2 32) ~__ste_email_to0~0) .cse4 (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (= (_ bv0 32) |ULTIMATE.start_getClientForwardReceiver_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))) (and .cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse1 (= (_ bv1 32) ~bob~0) .cse2 (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) .cse3 .cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)))) [2019-12-07 20:20:43,258 INFO L249 CegarLoopResult]: At program point L1993-13(lines 1980 1998) the Hoare annotation is: true [2019-12-07 20:20:43,258 INFO L246 CegarLoopResult]: For program point L938(lines 938 944) no Hoare annotation was computed. [2019-12-07 20:20:43,258 INFO L246 CegarLoopResult]: For program point L938-1(lines 938 944) no Hoare annotation was computed. [2019-12-07 20:20:43,258 INFO L246 CegarLoopResult]: For program point L938-2(lines 938 944) no Hoare annotation was computed. [2019-12-07 20:20:43,258 INFO L246 CegarLoopResult]: For program point L938-3(lines 938 944) no Hoare annotation was computed. [2019-12-07 20:20:43,258 INFO L242 CegarLoopResult]: At program point L2395(lines 2385 2486) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv2 32) ~rjh~0)) (.cse3 (not (= (_ bv1 32) ~__ste_email_to0~0))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ULTIMATE.start_setClientAutoResponse_~handle) .cse4) (and .cse0 .cse1 .cse2 .cse3 (= ULTIMATE.start_test_~op2~0 (_ bv0 32)) .cse4))) [2019-12-07 20:20:43,258 INFO L242 CegarLoopResult]: At program point L1603(lines 1598 1606) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:20:43,258 INFO L242 CegarLoopResult]: At program point L1603-1(lines 1598 1606) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,258 INFO L242 CegarLoopResult]: At program point L1603-2(lines 1598 1606) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:20:43,258 INFO L242 CegarLoopResult]: At program point L1603-3(lines 1598 1606) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,258 INFO L242 CegarLoopResult]: At program point L1603-4(lines 1598 1606) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:20:43,259 INFO L242 CegarLoopResult]: At program point L1603-5(lines 1598 1606) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,259 INFO L242 CegarLoopResult]: At program point L1603-6(lines 1598 1606) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:20:43,259 INFO L242 CegarLoopResult]: At program point L1603-7(lines 1598 1606) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,259 INFO L242 CegarLoopResult]: At program point L1603-8(lines 1598 1606) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:20:43,259 INFO L249 CegarLoopResult]: At program point L1603-9(lines 1598 1606) the Hoare annotation is: true [2019-12-07 20:20:43,259 INFO L242 CegarLoopResult]: At program point L1603-10(lines 1598 1606) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|)) [2019-12-07 20:20:43,259 INFO L249 CegarLoopResult]: At program point L1603-11(lines 1598 1606) the Hoare annotation is: true [2019-12-07 20:20:43,259 INFO L246 CegarLoopResult]: For program point L1473(lines 1473 1489) no Hoare annotation was computed. [2019-12-07 20:20:43,259 INFO L246 CegarLoopResult]: For program point L1473-1(lines 1473 1489) no Hoare annotation was computed. [2019-12-07 20:20:43,259 INFO L246 CegarLoopResult]: For program point L1473-2(lines 1473 1489) no Hoare annotation was computed. [2019-12-07 20:20:43,259 INFO L246 CegarLoopResult]: For program point L1473-3(lines 1473 1489) no Hoare annotation was computed. [2019-12-07 20:20:43,259 INFO L246 CegarLoopResult]: For program point L1473-4(lines 1473 1489) no Hoare annotation was computed. [2019-12-07 20:20:43,259 INFO L246 CegarLoopResult]: For program point L1473-5(lines 1473 1489) no Hoare annotation was computed. [2019-12-07 20:20:43,259 INFO L246 CegarLoopResult]: For program point L1738(lines 1738 1744) no Hoare annotation was computed. [2019-12-07 20:20:43,259 INFO L242 CegarLoopResult]: At program point L1738-1(lines 1730 1747) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,259 INFO L246 CegarLoopResult]: For program point L1738-2(lines 1738 1744) no Hoare annotation was computed. [2019-12-07 20:20:43,260 INFO L242 CegarLoopResult]: At program point L1738-3(lines 1730 1747) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,260 INFO L246 CegarLoopResult]: For program point L1738-4(lines 1738 1744) no Hoare annotation was computed. [2019-12-07 20:20:43,260 INFO L242 CegarLoopResult]: At program point L1738-5(lines 1730 1747) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= ULTIMATE.start_incoming_~client (_ bv2 32))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse6 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse7 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse8 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse9 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse10 (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2)) (.cse11 (= (_ bv2 32) ~rjh~0)) (.cse12 (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse13 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse14 (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ~__ste_email_to0~0) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse6 .cse5 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14))) [2019-12-07 20:20:43,260 INFO L246 CegarLoopResult]: For program point L1738-6(lines 1738 1744) no Hoare annotation was computed. [2019-12-07 20:20:43,260 INFO L242 CegarLoopResult]: At program point L1738-7(lines 1730 1747) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,260 INFO L246 CegarLoopResult]: For program point L1738-8(lines 1738 1744) no Hoare annotation was computed. [2019-12-07 20:20:43,260 INFO L242 CegarLoopResult]: At program point L1738-9(lines 1730 1747) the Hoare annotation is: (let ((.cse0 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse1 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv2 32) ~rjh~0)) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and .cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse1 (= (_ bv1 32) ~bob~0) .cse2 .cse3 .cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (and .cse0 .cse1 (= ULTIMATE.start_incoming_~client (_ bv2 32)) .cse2 .cse3 .cse4 (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))))) [2019-12-07 20:20:43,260 INFO L246 CegarLoopResult]: For program point L1738-10(lines 1738 1744) no Hoare annotation was computed. [2019-12-07 20:20:43,260 INFO L242 CegarLoopResult]: At program point L1738-11(lines 1730 1747) the Hoare annotation is: (let ((.cse0 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse1 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv2 32) ~rjh~0)) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and .cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse1 (= (_ bv1 32) ~bob~0) .cse2 (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) .cse3 .cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (and .cse0 .cse1 (= ULTIMATE.start_incoming_~client (_ bv2 32)) .cse2 .cse3 .cse4 (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (= (_ bv0 32) |ULTIMATE.start_getClientForwardReceiver_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))))) [2019-12-07 20:20:43,260 INFO L246 CegarLoopResult]: For program point L2003(lines 2003 2011) no Hoare annotation was computed. [2019-12-07 20:20:43,260 INFO L246 CegarLoopResult]: For program point L2003-2(lines 2003 2011) no Hoare annotation was computed. [2019-12-07 20:20:43,260 INFO L246 CegarLoopResult]: For program point L2003-4(lines 2003 2011) no Hoare annotation was computed. [2019-12-07 20:20:43,260 INFO L246 CegarLoopResult]: For program point L2003-6(lines 2003 2011) no Hoare annotation was computed. [2019-12-07 20:20:43,260 INFO L246 CegarLoopResult]: For program point L2003-8(lines 2003 2011) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L2003-10(lines 2003 2011) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L2003-12(lines 2003 2011) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L2003-14(lines 2003 2011) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L2003-16(lines 2003 2011) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L2400(lines 2400 2404) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L2003-18(lines 2003 2011) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L2003-20(lines 2003 2011) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L2003-22(lines 2003 2011) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L2003-24(lines 2003 2011) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L2003-26(lines 2003 2011) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L2003-28(lines 2003 2011) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L2003-30(lines 2003 2011) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L2003-32(lines 2003 2011) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L948(lines 948 969) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L948-1(lines 948 969) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L948-2(lines 948 969) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L948-3(lines 948 969) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L1477(lines 1477 1488) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L1477-1(lines 1477 1488) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L1477-2(lines 1477 1488) no Hoare annotation was computed. [2019-12-07 20:20:43,261 INFO L246 CegarLoopResult]: For program point L1477-3(lines 1477 1488) no Hoare annotation was computed. [2019-12-07 20:20:43,262 INFO L246 CegarLoopResult]: For program point L1477-4(lines 1477 1488) no Hoare annotation was computed. [2019-12-07 20:20:43,262 INFO L246 CegarLoopResult]: For program point L1477-5(lines 1477 1488) no Hoare annotation was computed. [2019-12-07 20:20:43,262 INFO L246 CegarLoopResult]: For program point L2006(lines 2006 2010) no Hoare annotation was computed. [2019-12-07 20:20:43,262 INFO L246 CegarLoopResult]: For program point L949(lines 949 965) no Hoare annotation was computed. [2019-12-07 20:20:43,262 INFO L242 CegarLoopResult]: At program point L2006-2(lines 1999 2014) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,262 INFO L246 CegarLoopResult]: For program point L949-1(lines 949 965) no Hoare annotation was computed. [2019-12-07 20:20:43,262 INFO L246 CegarLoopResult]: For program point L2006-3(lines 2006 2010) no Hoare annotation was computed. [2019-12-07 20:20:43,262 INFO L246 CegarLoopResult]: For program point L949-2(lines 949 965) no Hoare annotation was computed. [2019-12-07 20:20:43,262 INFO L246 CegarLoopResult]: For program point L949-3(lines 949 965) no Hoare annotation was computed. [2019-12-07 20:20:43,262 INFO L242 CegarLoopResult]: At program point L2006-5(lines 1999 2014) the Hoare annotation is: (let ((.cse0 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse1 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse2 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse3 (= (_ bv1 32) ~bob~0)) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse5 (= (_ bv2 32) ~rjh~0)) (.cse6 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse7 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse8 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse9 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse10 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= (_ bv2 32) ~__ste_email_to0~0) .cse6 .cse7 .cse8 .cse9 .cse10))) [2019-12-07 20:20:43,262 INFO L246 CegarLoopResult]: For program point L2006-6(lines 2006 2010) no Hoare annotation was computed. [2019-12-07 20:20:43,262 INFO L242 CegarLoopResult]: At program point L2006-8(lines 1999 2014) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,262 INFO L246 CegarLoopResult]: For program point L2006-9(lines 2006 2010) no Hoare annotation was computed. [2019-12-07 20:20:43,262 INFO L242 CegarLoopResult]: At program point L2006-11(lines 1999 2014) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,262 INFO L246 CegarLoopResult]: For program point L2006-12(lines 2006 2010) no Hoare annotation was computed. [2019-12-07 20:20:43,263 INFO L242 CegarLoopResult]: At program point L2006-14(lines 1999 2014) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,263 INFO L246 CegarLoopResult]: For program point L2006-15(lines 2006 2010) no Hoare annotation was computed. [2019-12-07 20:20:43,263 INFO L242 CegarLoopResult]: At program point L2006-17(lines 1999 2014) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,263 INFO L246 CegarLoopResult]: For program point L2006-18(lines 2006 2010) no Hoare annotation was computed. [2019-12-07 20:20:43,263 INFO L242 CegarLoopResult]: At program point L2006-20(lines 1999 2014) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,263 INFO L246 CegarLoopResult]: For program point L2006-21(lines 2006 2010) no Hoare annotation was computed. [2019-12-07 20:20:43,263 INFO L242 CegarLoopResult]: At program point L2006-23(lines 1999 2014) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= ULTIMATE.start_incoming_~client (_ bv2 32))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse5 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse6 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse7 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse8 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse9 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse10 (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2)) (.cse11 (= (_ bv2 32) ~rjh~0)) (.cse12 (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse13 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse14 (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ~__ste_email_to0~0) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14))) [2019-12-07 20:20:43,263 INFO L246 CegarLoopResult]: For program point L2006-24(lines 2006 2010) no Hoare annotation was computed. [2019-12-07 20:20:43,263 INFO L242 CegarLoopResult]: At program point L2006-26(lines 1999 2014) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,263 INFO L246 CegarLoopResult]: For program point L2006-27(lines 2006 2010) no Hoare annotation was computed. [2019-12-07 20:20:43,263 INFO L242 CegarLoopResult]: At program point L2006-29(lines 1999 2014) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,263 INFO L246 CegarLoopResult]: For program point L2006-30(lines 2006 2010) no Hoare annotation was computed. [2019-12-07 20:20:43,264 INFO L242 CegarLoopResult]: At program point L2006-32(lines 1999 2014) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,264 INFO L246 CegarLoopResult]: For program point L2006-33(lines 2006 2010) no Hoare annotation was computed. [2019-12-07 20:20:43,264 INFO L242 CegarLoopResult]: At program point L2006-35(lines 1999 2014) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,264 INFO L246 CegarLoopResult]: For program point L2006-36(lines 2006 2010) no Hoare annotation was computed. [2019-12-07 20:20:43,264 INFO L242 CegarLoopResult]: At program point L2006-38(lines 1999 2014) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,264 INFO L246 CegarLoopResult]: For program point L2006-39(lines 2006 2010) no Hoare annotation was computed. [2019-12-07 20:20:43,264 INFO L242 CegarLoopResult]: At program point L2006-41(lines 1999 2014) the Hoare annotation is: (let ((.cse0 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse1 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv2 32) ~rjh~0)) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and .cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse1 (= (_ bv1 32) ~bob~0) .cse2 .cse3 .cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (and .cse0 .cse1 (= ULTIMATE.start_incoming_~client (_ bv2 32)) .cse2 .cse3 .cse4 (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))))) [2019-12-07 20:20:43,264 INFO L246 CegarLoopResult]: For program point L2006-42(lines 2006 2010) no Hoare annotation was computed. [2019-12-07 20:20:43,264 INFO L242 CegarLoopResult]: At program point L2006-44(lines 1999 2014) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,264 INFO L246 CegarLoopResult]: For program point L2006-45(lines 2006 2010) no Hoare annotation was computed. [2019-12-07 20:20:43,264 INFO L242 CegarLoopResult]: At program point L2006-47(lines 1999 2014) the Hoare annotation is: (let ((.cse0 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse1 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv2 32) ~rjh~0)) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and .cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse1 (= (_ bv1 32) ~bob~0) .cse2 (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) .cse3 .cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (and .cse0 .cse1 (= ULTIMATE.start_incoming_~client (_ bv2 32)) .cse2 .cse3 .cse4 (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (= (_ bv0 32) |ULTIMATE.start_getClientForwardReceiver_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd |ULTIMATE.start_getEmailTo_#res| (_ bv4294967294 32)) (_ bv0 32))))) [2019-12-07 20:20:43,264 INFO L246 CegarLoopResult]: For program point L2006-48(lines 2006 2010) no Hoare annotation was computed. [2019-12-07 20:20:43,264 INFO L242 CegarLoopResult]: At program point L2006-50(lines 1999 2014) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,264 INFO L246 CegarLoopResult]: For program point L1481(lines 1481 1487) no Hoare annotation was computed. [2019-12-07 20:20:43,264 INFO L246 CegarLoopResult]: For program point L1481-1(lines 1481 1487) no Hoare annotation was computed. [2019-12-07 20:20:43,265 INFO L242 CegarLoopResult]: At program point L2406(lines 2396 2485) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv2 32) ~rjh~0)) (.cse3 (not (= (_ bv1 32) ~__ste_email_to0~0))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ULTIMATE.start_setClientAutoResponse_~handle) .cse4) (and .cse0 .cse1 .cse2 .cse3 (= ULTIMATE.start_test_~op2~0 (_ bv0 32)) .cse4))) [2019-12-07 20:20:43,265 INFO L246 CegarLoopResult]: For program point L1481-2(lines 1481 1487) no Hoare annotation was computed. [2019-12-07 20:20:43,265 INFO L246 CegarLoopResult]: For program point L1481-3(lines 1481 1487) no Hoare annotation was computed. [2019-12-07 20:20:43,265 INFO L246 CegarLoopResult]: For program point L1481-4(lines 1481 1487) no Hoare annotation was computed. [2019-12-07 20:20:43,265 INFO L246 CegarLoopResult]: For program point L1481-5(lines 1481 1487) no Hoare annotation was computed. [2019-12-07 20:20:43,265 INFO L246 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2019-12-07 20:20:43,265 INFO L246 CegarLoopResult]: For program point L953(lines 953 964) no Hoare annotation was computed. [2019-12-07 20:20:43,265 INFO L246 CegarLoopResult]: For program point L953-1(lines 953 964) no Hoare annotation was computed. [2019-12-07 20:20:43,265 INFO L246 CegarLoopResult]: For program point L953-2(lines 953 964) no Hoare annotation was computed. [2019-12-07 20:20:43,265 INFO L246 CegarLoopResult]: For program point L953-3(lines 953 964) no Hoare annotation was computed. [2019-12-07 20:20:43,265 INFO L246 CegarLoopResult]: For program point L957(lines 957 963) no Hoare annotation was computed. [2019-12-07 20:20:43,265 INFO L246 CegarLoopResult]: For program point L957-1(lines 957 963) no Hoare annotation was computed. [2019-12-07 20:20:43,265 INFO L246 CegarLoopResult]: For program point L957-2(lines 957 963) no Hoare annotation was computed. [2019-12-07 20:20:43,265 INFO L246 CegarLoopResult]: For program point L957-3(lines 957 963) no Hoare annotation was computed. [2019-12-07 20:20:43,265 INFO L242 CegarLoopResult]: At program point L1486(lines 1469 1492) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,265 INFO L242 CegarLoopResult]: At program point L1486-1(lines 1469 1492) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,265 INFO L242 CegarLoopResult]: At program point L1486-2(lines 1469 1492) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse6 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse8 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse9 (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2)) (.cse10 (= (_ bv2 32) ~rjh~0)) (.cse11 (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse12 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse0 .cse1 .cse2 .cse3 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12))) [2019-12-07 20:20:43,266 INFO L242 CegarLoopResult]: At program point L1486-3(lines 1469 1492) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,266 INFO L246 CegarLoopResult]: For program point L2411(lines 2411 2418) no Hoare annotation was computed. [2019-12-07 20:20:43,266 INFO L242 CegarLoopResult]: At program point L1486-4(lines 1469 1492) the Hoare annotation is: (let ((.cse0 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse1 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv2 32) ~rjh~0)) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= (_ bv0 32) |ULTIMATE.start_getClientForwardReceiver_#res|)) (and .cse0 .cse1 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) .cse2 .cse3 .cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)))) [2019-12-07 20:20:43,266 INFO L242 CegarLoopResult]: At program point L1486-5(lines 1469 1492) the Hoare annotation is: (let ((.cse0 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse1 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv2 32) ~rjh~0)) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= (_ bv0 32) |ULTIMATE.start_getClientForwardReceiver_#res|)) (and .cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) .cse1 (= (_ bv1 32) ~bob~0) .cse2 (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) .cse3 .cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)))) [2019-12-07 20:20:43,266 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 476) no Hoare annotation was computed. [2019-12-07 20:20:43,266 INFO L246 CegarLoopResult]: For program point L2550(lines 2550 2558) no Hoare annotation was computed. [2019-12-07 20:20:43,266 INFO L246 CegarLoopResult]: For program point L1758(lines 1758 1765) no Hoare annotation was computed. [2019-12-07 20:20:43,266 INFO L242 CegarLoopResult]: At program point L1758-1(lines 1661 1672) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,266 INFO L246 CegarLoopResult]: For program point L1758-2(lines 1758 1765) no Hoare annotation was computed. [2019-12-07 20:20:43,266 INFO L246 CegarLoopResult]: For program point L1758-4(lines 1758 1765) no Hoare annotation was computed. [2019-12-07 20:20:43,266 INFO L242 CegarLoopResult]: At program point L1758-5(lines 1784 1796) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,266 INFO L246 CegarLoopResult]: For program point L1758-6(lines 1758 1765) no Hoare annotation was computed. [2019-12-07 20:20:43,266 INFO L242 CegarLoopResult]: At program point L1758-7(lines 1661 1672) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,266 INFO L246 CegarLoopResult]: For program point L1758-8(lines 1758 1765) no Hoare annotation was computed. [2019-12-07 20:20:43,266 INFO L246 CegarLoopResult]: For program point L1758-10(lines 1758 1765) no Hoare annotation was computed. [2019-12-07 20:20:43,267 INFO L246 CegarLoopResult]: For program point L2287(lines 2287 2293) no Hoare annotation was computed. [2019-12-07 20:20:43,267 INFO L246 CegarLoopResult]: For program point L2287-2(lines 2287 2293) no Hoare annotation was computed. [2019-12-07 20:20:43,267 INFO L246 CegarLoopResult]: For program point L2287-4(lines 2287 2293) no Hoare annotation was computed. [2019-12-07 20:20:43,267 INFO L246 CegarLoopResult]: For program point L2287-6(lines 2287 2293) no Hoare annotation was computed. [2019-12-07 20:20:43,267 INFO L246 CegarLoopResult]: For program point L2287-8(lines 2287 2293) no Hoare annotation was computed. [2019-12-07 20:20:43,267 INFO L246 CegarLoopResult]: For program point L2287-10(lines 2287 2293) no Hoare annotation was computed. [2019-12-07 20:20:43,267 INFO L242 CegarLoopResult]: At program point L1627(lines 1616 1630) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,267 INFO L242 CegarLoopResult]: At program point L2420(lines 2407 2484) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv2 32) ~rjh~0)) (.cse3 (not (= (_ bv1 32) ~__ste_email_to0~0))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ULTIMATE.start_setClientAutoResponse_~handle) .cse4) (and .cse0 .cse1 .cse2 .cse3 (= ULTIMATE.start_test_~op2~0 (_ bv0 32)) .cse4))) [2019-12-07 20:20:43,267 INFO L242 CegarLoopResult]: At program point L968(lines 906 974) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,267 INFO L242 CegarLoopResult]: At program point L968-1(lines 906 974) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,267 INFO L242 CegarLoopResult]: At program point L968-2(lines 906 974) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,267 INFO L242 CegarLoopResult]: At program point L968-3(lines 906 974) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,267 INFO L246 CegarLoopResult]: For program point L1497(lines 1497 1509) no Hoare annotation was computed. [2019-12-07 20:20:43,267 INFO L246 CegarLoopResult]: For program point L1500(lines 1500 1508) no Hoare annotation was computed. [2019-12-07 20:20:43,267 INFO L246 CegarLoopResult]: For program point L2425(lines 2425 2429) no Hoare annotation was computed. [2019-12-07 20:20:43,267 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION(line 476) no Hoare annotation was computed. [2019-12-07 20:20:43,268 INFO L246 CegarLoopResult]: For program point L1503(lines 1503 1507) no Hoare annotation was computed. [2019-12-07 20:20:43,268 INFO L242 CegarLoopResult]: At program point L1503-2(lines 1 2649) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv2 32) ~rjh~0)) (.cse3 (not (= (_ bv1 32) ~__ste_email_to0~0))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ULTIMATE.start_setClientAutoResponse_~handle) .cse4) (and .cse0 .cse1 .cse2 .cse3 (= ULTIMATE.start_test_~op2~0 (_ bv0 32)) .cse4))) [2019-12-07 20:20:43,268 INFO L246 CegarLoopResult]: For program point L845(lines 845 893) no Hoare annotation was computed. [2019-12-07 20:20:43,268 INFO L242 CegarLoopResult]: At program point L2431(lines 2421 2483) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv2 32) ~rjh~0)) (.cse3 (not (= (_ bv1 32) ~__ste_email_to0~0))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ULTIMATE.start_setClientAutoResponse_~handle) .cse4) (and .cse0 .cse1 .cse2 .cse3 (= ULTIMATE.start_test_~op2~0 (_ bv0 32)) .cse4))) [2019-12-07 20:20:43,268 INFO L246 CegarLoopResult]: For program point L846(lines 846 858) no Hoare annotation was computed. [2019-12-07 20:20:43,268 INFO L246 CegarLoopResult]: For program point L979(lines 979 1027) no Hoare annotation was computed. [2019-12-07 20:20:43,268 INFO L246 CegarLoopResult]: For program point L979-1(lines 979 1027) no Hoare annotation was computed. [2019-12-07 20:20:43,268 INFO L246 CegarLoopResult]: For program point L980(lines 980 992) no Hoare annotation was computed. [2019-12-07 20:20:43,268 INFO L246 CegarLoopResult]: For program point L980-2(lines 980 992) no Hoare annotation was computed. [2019-12-07 20:20:43,268 INFO L246 CegarLoopResult]: For program point L849(lines 849 857) no Hoare annotation was computed. [2019-12-07 20:20:43,268 INFO L246 CegarLoopResult]: For program point L2436(lines 2436 2443) no Hoare annotation was computed. [2019-12-07 20:20:43,268 INFO L246 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2019-12-07 20:20:43,268 INFO L246 CegarLoopResult]: For program point L983(lines 983 991) no Hoare annotation was computed. [2019-12-07 20:20:43,268 INFO L246 CegarLoopResult]: For program point L983-2(lines 983 991) no Hoare annotation was computed. [2019-12-07 20:20:43,268 INFO L246 CegarLoopResult]: For program point L852(lines 852 856) no Hoare annotation was computed. [2019-12-07 20:20:43,268 INFO L246 CegarLoopResult]: For program point L1910(lines 1910 1921) no Hoare annotation was computed. [2019-12-07 20:20:43,268 INFO L246 CegarLoopResult]: For program point L1910-1(lines 1910 1921) no Hoare annotation was computed. [2019-12-07 20:20:43,268 INFO L246 CegarLoopResult]: For program point L1910-2(lines 1910 1921) no Hoare annotation was computed. [2019-12-07 20:20:43,268 INFO L246 CegarLoopResult]: For program point L1910-3(lines 1910 1921) no Hoare annotation was computed. [2019-12-07 20:20:43,268 INFO L246 CegarLoopResult]: For program point L1910-4(lines 1910 1921) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L1910-5(lines 1910 1921) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L986(lines 986 990) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L986-3(lines 986 990) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L1914(lines 1914 1920) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L1914-1(lines 1914 1920) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L1914-2(lines 1914 1920) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L1914-3(lines 1914 1920) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L1914-4(lines 1914 1920) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L1914-5(lines 1914 1920) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L1520(lines 1520 1536) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L1520-1(lines 1520 1536) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L1520-2(lines 1520 1536) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L1520-3(lines 1520 1536) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L242 CegarLoopResult]: At program point L2445(lines 2432 2482) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv2 32) ~rjh~0)) (.cse3 (not (= (_ bv1 32) ~__ste_email_to0~0))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ULTIMATE.start_setClientAutoResponse_~handle) .cse4) (and .cse0 .cse1 .cse2 .cse3 (= ULTIMATE.start_test_~op2~0 (_ bv0 32)) .cse4))) [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L1520-4(lines 1520 1536) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L1520-5(lines 1520 1536) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L860(lines 860 892) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L861(lines 861 873) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L994(lines 994 1026) no Hoare annotation was computed. [2019-12-07 20:20:43,269 INFO L246 CegarLoopResult]: For program point L994-1(lines 994 1026) no Hoare annotation was computed. [2019-12-07 20:20:43,270 INFO L242 CegarLoopResult]: At program point L1919(lines 1906 1924) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,270 INFO L242 CegarLoopResult]: At program point L1919-1(lines 1906 1924) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,270 INFO L242 CegarLoopResult]: At program point L1919-2(lines 1906 1924) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,270 INFO L242 CegarLoopResult]: At program point L1919-3(lines 1906 1924) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,270 INFO L249 CegarLoopResult]: At program point L1919-4(lines 1906 1924) the Hoare annotation is: true [2019-12-07 20:20:43,270 INFO L249 CegarLoopResult]: At program point L1919-5(lines 1906 1924) the Hoare annotation is: true [2019-12-07 20:20:43,270 INFO L246 CegarLoopResult]: For program point L995(lines 995 1007) no Hoare annotation was computed. [2019-12-07 20:20:43,270 INFO L246 CegarLoopResult]: For program point L995-2(lines 995 1007) no Hoare annotation was computed. [2019-12-07 20:20:43,270 INFO L246 CegarLoopResult]: For program point L1524(lines 1524 1535) no Hoare annotation was computed. [2019-12-07 20:20:43,270 INFO L246 CegarLoopResult]: For program point L1524-1(lines 1524 1535) no Hoare annotation was computed. [2019-12-07 20:20:43,270 INFO L246 CegarLoopResult]: For program point L1524-2(lines 1524 1535) no Hoare annotation was computed. [2019-12-07 20:20:43,270 INFO L246 CegarLoopResult]: For program point L1524-3(lines 1524 1535) no Hoare annotation was computed. [2019-12-07 20:20:43,270 INFO L246 CegarLoopResult]: For program point L1524-4(lines 1524 1535) no Hoare annotation was computed. [2019-12-07 20:20:43,270 INFO L246 CegarLoopResult]: For program point L1524-5(lines 1524 1535) no Hoare annotation was computed. [2019-12-07 20:20:43,270 INFO L246 CegarLoopResult]: For program point L864(lines 864 872) no Hoare annotation was computed. [2019-12-07 20:20:43,270 INFO L246 CegarLoopResult]: For program point L2450(lines 2450 2454) no Hoare annotation was computed. [2019-12-07 20:20:43,270 INFO L246 CegarLoopResult]: For program point L998(lines 998 1006) no Hoare annotation was computed. [2019-12-07 20:20:43,270 INFO L246 CegarLoopResult]: For program point L998-2(lines 998 1006) no Hoare annotation was computed. [2019-12-07 20:20:43,271 INFO L246 CegarLoopResult]: For program point L867(lines 867 871) no Hoare annotation was computed. [2019-12-07 20:20:43,271 INFO L246 CegarLoopResult]: For program point L1528(lines 1528 1534) no Hoare annotation was computed. [2019-12-07 20:20:43,271 INFO L246 CegarLoopResult]: For program point L1528-1(lines 1528 1534) no Hoare annotation was computed. [2019-12-07 20:20:43,271 INFO L246 CegarLoopResult]: For program point L1528-2(lines 1528 1534) no Hoare annotation was computed. [2019-12-07 20:20:43,271 INFO L246 CegarLoopResult]: For program point L1528-3(lines 1528 1534) no Hoare annotation was computed. [2019-12-07 20:20:43,271 INFO L246 CegarLoopResult]: For program point L1528-4(lines 1528 1534) no Hoare annotation was computed. [2019-12-07 20:20:43,271 INFO L246 CegarLoopResult]: For program point L1528-5(lines 1528 1534) no Hoare annotation was computed. [2019-12-07 20:20:43,271 INFO L242 CegarLoopResult]: At program point L75(lines 1 2649) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 (_ bv0 32)) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (not (= (_ bv1 32) ~rjh~0))) [2019-12-07 20:20:43,271 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 476) no Hoare annotation was computed. [2019-12-07 20:20:43,271 INFO L246 CegarLoopResult]: For program point L1001(lines 1001 1005) no Hoare annotation was computed. [2019-12-07 20:20:43,271 INFO L246 CegarLoopResult]: For program point L1001-3(lines 1001 1005) no Hoare annotation was computed. [2019-12-07 20:20:43,271 INFO L242 CegarLoopResult]: At program point L2456(lines 2446 2481) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv2 32) ~rjh~0)) (.cse3 (not (= (_ bv1 32) ~__ste_email_to0~0))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ULTIMATE.start_setClientAutoResponse_~handle) .cse4) (and .cse0 .cse1 .cse2 .cse3 (= ULTIMATE.start_test_~op2~0 (_ bv0 32)) .cse4))) [2019-12-07 20:20:43,271 INFO L242 CegarLoopResult]: At program point L1533(lines 1516 1539) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32)))) (.cse4 (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32)))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse6 (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|)) (.cse8 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse9 (= (_ bv2 32) ~rjh~0)) (.cse10 (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32))) (.cse11 (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 (= (_ bv2 32) ~__ste_email_to0~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse1 .cse2 .cse3 (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11))) [2019-12-07 20:20:43,271 INFO L246 CegarLoopResult]: For program point L476(line 476) no Hoare annotation was computed. [2019-12-07 20:20:43,271 INFO L242 CegarLoopResult]: At program point L1533-1(lines 1516 1539) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,271 INFO L246 CegarLoopResult]: For program point L476-1(line 476) no Hoare annotation was computed. [2019-12-07 20:20:43,272 INFO L242 CegarLoopResult]: At program point L1533-2(lines 1516 1539) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ULTIMATE.start_setEmailTo_~value) (= (_ bv2 32) ~__ste_email_to0~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_setEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,272 INFO L246 CegarLoopResult]: For program point L476-2(line 476) no Hoare annotation was computed. [2019-12-07 20:20:43,272 INFO L242 CegarLoopResult]: At program point L1533-3(lines 1516 1539) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,272 INFO L246 CegarLoopResult]: For program point L476-3(line 476) no Hoare annotation was computed. [2019-12-07 20:20:43,272 INFO L242 CegarLoopResult]: At program point L1533-4(lines 1516 1539) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,272 INFO L246 CegarLoopResult]: For program point L476-4(line 476) no Hoare annotation was computed. [2019-12-07 20:20:43,272 INFO L242 CegarLoopResult]: At program point L1533-5(lines 1516 1539) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 20:20:43,272 INFO L246 CegarLoopResult]: For program point L476-5(line 476) no Hoare annotation was computed. [2019-12-07 20:20:43,272 INFO L242 CegarLoopResult]: At program point L477(lines 2279 2296) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,272 INFO L242 CegarLoopResult]: At program point L477-1(lines 2279 2296) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,272 INFO L242 CegarLoopResult]: At program point L477-2(lines 2279 2296) the Hoare annotation is: (and (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (bvadd ULTIMATE.start_getEmailTo_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv0 32) ULTIMATE.start_outgoing_~size~2) (= (_ bv2 32) ~rjh~0) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,272 INFO L242 CegarLoopResult]: At program point L477-3(lines 2279 2296) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv1 32) |ULTIMATE.start_isReadable_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 (_ bv4294967295 32)))) [2019-12-07 20:20:43,272 INFO L249 CegarLoopResult]: At program point L477-4(lines 2279 2296) the Hoare annotation is: true [2019-12-07 20:20:43,272 INFO L249 CegarLoopResult]: At program point L477-5(lines 2279 2296) the Hoare annotation is: true [2019-12-07 20:20:43,273 INFO L246 CegarLoopResult]: For program point L875(lines 875 891) no Hoare annotation was computed. [2019-12-07 20:20:43,273 INFO L242 CegarLoopResult]: At program point L875-1(lines 841 896) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv2 32) ~rjh~0)) (.cse3 (not (= (_ bv1 32) ~__ste_email_to0~0))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ULTIMATE.start_setClientAutoResponse_~handle) .cse4) (and .cse0 .cse1 .cse2 .cse3 (= ULTIMATE.start_test_~op2~0 (_ bv0 32)) .cse4))) [2019-12-07 20:20:43,273 INFO L242 CegarLoopResult]: At program point L2593(lines 2573 2595) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= ~__ste_ClientAddressBook_size0~0 (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) ~__ste_client_forwardReceiver1~0)) [2019-12-07 20:20:43,273 INFO L246 CegarLoopResult]: For program point L2461(lines 2461 2465) no Hoare annotation was computed. [2019-12-07 20:20:43,273 INFO L242 CegarLoopResult]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 (_ bv0 32)) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (not (= (_ bv1 32) ~rjh~0))) [2019-12-07 20:20:43,273 INFO L246 CegarLoopResult]: For program point L876(lines 876 888) no Hoare annotation was computed. [2019-12-07 20:20:43,273 INFO L246 CegarLoopResult]: For program point L1009(lines 1009 1025) no Hoare annotation was computed. [2019-12-07 20:20:43,273 INFO L242 CegarLoopResult]: At program point L1009-1(lines 975 1030) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv2 32) ~rjh~0)) (.cse3 (not (= (_ bv1 32) ~__ste_email_to0~0))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ULTIMATE.start_setClientAutoResponse_~handle) .cse4) (and .cse0 .cse1 .cse2 .cse3 (= ULTIMATE.start_test_~op2~0 (_ bv0 32)) .cse4))) [2019-12-07 20:20:43,273 INFO L246 CegarLoopResult]: For program point L1009-2(lines 1009 1025) no Hoare annotation was computed. [2019-12-07 20:20:43,273 INFO L242 CegarLoopResult]: At program point L1009-3(lines 1 2649) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv2 32) ~rjh~0)) (.cse3 (not (= (_ bv1 32) ~__ste_email_to0~0))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ULTIMATE.start_setClientAutoResponse_~handle) .cse4) (and .cse0 .cse1 .cse2 .cse3 (= ULTIMATE.start_test_~op2~0 (_ bv0 32)) .cse4))) [2019-12-07 20:20:43,273 INFO L246 CegarLoopResult]: For program point L1010(lines 1010 1022) no Hoare annotation was computed. [2019-12-07 20:20:43,273 INFO L246 CegarLoopResult]: For program point L1010-2(lines 1010 1022) no Hoare annotation was computed. [2019-12-07 20:20:43,273 INFO L246 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2019-12-07 20:20:43,273 INFO L246 CegarLoopResult]: For program point L879(lines 879 887) no Hoare annotation was computed. [2019-12-07 20:20:43,273 INFO L246 CegarLoopResult]: For program point L1013(lines 1013 1021) no Hoare annotation was computed. [2019-12-07 20:20:43,273 INFO L246 CegarLoopResult]: For program point L1013-2(lines 1013 1021) no Hoare annotation was computed. [2019-12-07 20:20:43,273 INFO L242 CegarLoopResult]: At program point L2467(lines 2457 2480) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv2 32) ~rjh~0)) (.cse3 (not (= (_ bv1 32) ~__ste_email_to0~0))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ULTIMATE.start_setClientAutoResponse_~handle) .cse4) (and .cse0 .cse1 .cse2 .cse3 (= ULTIMATE.start_test_~op2~0 (_ bv0 32)) .cse4))) [2019-12-07 20:20:43,274 INFO L246 CegarLoopResult]: For program point L882(lines 882 886) no Hoare annotation was computed. [2019-12-07 20:20:43,274 INFO L246 CegarLoopResult]: For program point L1544(lines 1544 1556) no Hoare annotation was computed. [2019-12-07 20:20:43,274 INFO L246 CegarLoopResult]: For program point L1544-2(lines 1544 1556) no Hoare annotation was computed. [2019-12-07 20:20:43,274 INFO L246 CegarLoopResult]: For program point L1544-4(lines 1544 1556) no Hoare annotation was computed. [2019-12-07 20:20:43,274 INFO L246 CegarLoopResult]: For program point L1016(lines 1016 1020) no Hoare annotation was computed. [2019-12-07 20:20:43,274 INFO L246 CegarLoopResult]: For program point L1016-3(lines 1016 1020) no Hoare annotation was computed. [2019-12-07 20:20:43,274 INFO L246 CegarLoopResult]: For program point L1547(lines 1547 1555) no Hoare annotation was computed. [2019-12-07 20:20:43,274 INFO L246 CegarLoopResult]: For program point L1547-2(lines 1547 1555) no Hoare annotation was computed. [2019-12-07 20:20:43,274 INFO L246 CegarLoopResult]: For program point L2472(lines 2472 2476) no Hoare annotation was computed. [2019-12-07 20:20:43,274 INFO L246 CegarLoopResult]: For program point L1547-4(lines 1547 1555) no Hoare annotation was computed. [2019-12-07 20:20:43,274 INFO L242 CegarLoopResult]: At program point L2472-1(lines 2341 2490) the Hoare annotation is: (let ((.cse0 (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32))) (.cse1 (= (_ bv1 32) ~bob~0)) (.cse2 (= (_ bv2 32) ~rjh~0)) (.cse3 (not (= (_ bv1 32) ~__ste_email_to0~0))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv2 32) ULTIMATE.start_setClientAutoResponse_~handle) .cse4) (and .cse0 .cse1 .cse2 .cse3 (= ULTIMATE.start_test_~op2~0 (_ bv0 32)) .cse4))) [2019-12-07 20:20:43,274 INFO L242 CegarLoopResult]: At program point L1812(lines 1807 1815) the Hoare annotation is: (and (= (_ bv1 32) |ULTIMATE.start_createEmail_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_sendEmail_~sender (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~msg~0 (_ bv4294967295 32))) (= (_ bv2 32) ~rjh~0) (= (_ bv0 32) (bvadd ULTIMATE.start_createEmail_~to (_ bv4294967294 32))) (= (bvadd ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg (_ bv4294967295 32)) (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) (bvadd ULTIMATE.start_outgoing_~msg (_ bv4294967295 32))) (= (bvadd ULTIMATE.start_getClientAddressBookSize_~handle (_ bv4294967295 32)) (_ bv0 32))) [2019-12-07 20:20:43,274 INFO L246 CegarLoopResult]: For program point L2606(lines 2606 2613) no Hoare annotation was computed. [2019-12-07 20:20:43,274 INFO L249 CegarLoopResult]: At program point L2606-1(lines 2606 2613) the Hoare annotation is: true [2019-12-07 20:20:43,274 INFO L246 CegarLoopResult]: For program point L2342(lines 2341 2490) no Hoare annotation was computed. [2019-12-07 20:20:43,274 INFO L246 CegarLoopResult]: For program point L1550(lines 1550 1554) no Hoare annotation was computed. [2019-12-07 20:20:43,274 INFO L242 CegarLoopResult]: At program point L1550-2(lines 1 2649) the Hoare annotation is: (and (= (_ bv1 32) ~bob~0) (= ~__ste_ClientAddressBook_size0~0 (_ bv0 32)) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) ~__ste_client_forwardReceiver1~0) (not (= (_ bv1 32) ~rjh~0)) (not (= (_ bv2 32) ULTIMATE.start_setClientId_~handle))) [2019-12-07 20:20:43,274 INFO L246 CegarLoopResult]: For program point L1550-3(lines 1550 1554) no Hoare annotation was computed. [2019-12-07 20:20:43,274 INFO L242 CegarLoopResult]: At program point L1550-5(lines 1 2649) the Hoare annotation is: (and (= (_ bv2 32) ULTIMATE.start_setClientId_~handle) (= (_ bv1 32) ~bob~0) (= ~__ste_ClientAddressBook_size0~0 (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) ~__ste_client_forwardReceiver1~0)) [2019-12-07 20:20:43,275 INFO L246 CegarLoopResult]: For program point L1550-6(lines 1550 1554) no Hoare annotation was computed. [2019-12-07 20:20:43,275 INFO L242 CegarLoopResult]: At program point L1550-8(lines 1 2649) the Hoare annotation is: (and (= (bvadd ULTIMATE.start_setClientId_~handle (_ bv4294967293 32)) (_ bv0 32)) (= (_ bv1 32) ~bob~0) (= ~__ste_ClientAddressBook_size0~0 (_ bv0 32)) (= (_ bv2 32) ~rjh~0) (not (= (_ bv1 32) ~__ste_email_to0~0)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|) (= (_ bv0 32) ~__ste_client_forwardReceiver1~0)) [2019-12-07 20:20:43,275 INFO L246 CegarLoopResult]: For program point L2343(lines 2343 2347) no Hoare annotation was computed. [2019-12-07 20:20:43,275 INFO L246 CegarLoopResult]: For program point L1947(lines 1947 1958) no Hoare annotation was computed. [2019-12-07 20:20:43,275 INFO L246 CegarLoopResult]: For program point L1947-1(lines 1947 1958) no Hoare annotation was computed. [2019-12-07 20:20:43,275 INFO L246 CegarLoopResult]: For program point L1947-2(lines 1947 1958) no Hoare annotation was computed. [2019-12-07 20:20:43,275 INFO L246 CegarLoopResult]: For program point L1947-3(lines 1947 1958) no Hoare annotation was computed. [2019-12-07 20:20:43,275 INFO L246 CegarLoopResult]: For program point L1947-4(lines 1947 1958) no Hoare annotation was computed. [2019-12-07 20:20:43,275 INFO L246 CegarLoopResult]: For program point L1947-5(lines 1947 1958) no Hoare annotation was computed. [2019-12-07 20:20:43,275 INFO L246 CegarLoopResult]: For program point L1947-6(lines 1947 1958) no Hoare annotation was computed. [2019-12-07 20:20:43,275 INFO L246 CegarLoopResult]: For program point L1947-7(lines 1947 1958) no Hoare annotation was computed. [2019-12-07 20:20:43,275 INFO L246 CegarLoopResult]: For program point L1947-8(lines 1947 1958) no Hoare annotation was computed. [2019-12-07 20:20:43,275 INFO L246 CegarLoopResult]: For program point L1947-9(lines 1947 1958) no Hoare annotation was computed. [2019-12-07 20:20:43,275 INFO L246 CegarLoopResult]: For program point L1947-10(lines 1947 1958) no Hoare annotation was computed. [2019-12-07 20:20:43,275 INFO L246 CegarLoopResult]: For program point L1947-11(lines 1947 1958) no Hoare annotation was computed. [2019-12-07 20:20:43,275 INFO L246 CegarLoopResult]: For program point L629(lines 629 645) no Hoare annotation was computed. [2019-12-07 20:20:43,275 INFO L246 CegarLoopResult]: For program point L629-1(lines 629 645) no Hoare annotation was computed. [2019-12-07 20:20:43,334 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 07.12 08:20:43 BoogieIcfgContainer [2019-12-07 20:20:43,334 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-12-07 20:20:43,335 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-12-07 20:20:43,335 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-12-07 20:20:43,335 INFO L275 PluginConnector]: Witness Printer initialized [2019-12-07 20:20:43,335 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 08:17:35" (3/4) ... [2019-12-07 20:20:43,338 INFO L137 WitnessPrinter]: Generating witness for correct program [2019-12-07 20:20:43,371 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 206 nodes and edges [2019-12-07 20:20:43,375 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 112 nodes and edges [2019-12-07 20:20:43,378 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2019-12-07 20:20:43,382 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2019-12-07 20:20:43,385 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-12-07 20:20:43,389 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-12-07 20:20:43,412 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((__ste_ClientAddressBook_size0 == 0bv32 && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1) && !(1bv32 == rjh) [2019-12-07 20:20:43,412 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1bv32 == bob && __ste_ClientAddressBook_size0 == 0bv32) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1) && !(1bv32 == rjh)) && !(2bv32 == handle) [2019-12-07 20:20:43,412 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2bv32 == handle && 1bv32 == bob) && __ste_ClientAddressBook_size0 == 0bv32) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1 [2019-12-07 20:20:43,412 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && __ste_ClientAddressBook_size0 == 0bv32) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1 [2019-12-07 20:20:43,412 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && __ste_ClientAddressBook_size0 == 0bv32) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1 [2019-12-07 20:20:43,413 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) [2019-12-07 20:20:43,413 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result [2019-12-07 20:20:43,413 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) [2019-12-07 20:20:43,413 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) [2019-12-07 20:20:43,413 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) [2019-12-07 20:20:43,413 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) [2019-12-07 20:20:43,413 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) [2019-12-07 20:20:43,414 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) [2019-12-07 20:20:43,414 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) [2019-12-07 20:20:43,414 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) [2019-12-07 20:20:43,414 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 2bv32 == handle) && 1bv32 == \result [2019-12-07 20:20:43,414 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) [2019-12-07 20:20:43,414 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) [2019-12-07 20:20:43,414 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) [2019-12-07 20:20:43,415 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) [2019-12-07 20:20:43,415 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,415 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) [2019-12-07 20:20:43,415 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:20:43,415 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:20:43,415 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) [2019-12-07 20:20:43,416 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) [2019-12-07 20:20:43,416 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,416 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,417 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,417 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,417 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,417 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,418 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32 [2019-12-07 20:20:43,418 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || (((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) [2019-12-07 20:20:43,418 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) [2019-12-07 20:20:43,418 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && client == 2bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(client, 4294967294bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32 [2019-12-07 20:20:43,418 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) [2019-12-07 20:20:43,418 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32 [2019-12-07 20:20:43,419 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) || (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) [2019-12-07 20:20:43,419 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) || ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) [2019-12-07 20:20:43,419 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) [2019-12-07 20:20:43,419 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,419 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32 [2019-12-07 20:20:43,420 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,420 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,420 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) || (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) [2019-12-07 20:20:43,420 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && client == 2bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(client, 4294967294bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) [2019-12-07 20:20:43,420 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,420 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) || ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) [2019-12-07 20:20:43,420 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:20:43,420 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,420 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,420 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,421 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,421 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,421 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) || ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) [2019-12-07 20:20:43,421 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,421 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:20:43,421 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,421 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,422 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,422 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,422 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:20:43,422 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:20:43,422 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,422 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,422 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,422 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,423 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,423 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,423 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,423 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,423 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,423 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && fwreceiver == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && 0bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) || ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) [2019-12-07 20:20:43,423 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,423 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,424 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,424 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:20:43,424 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,424 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,424 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,424 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || (((((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && 0bv32 == \result) && ~bvadd64(client, 4294967294bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) [2019-12-07 20:20:43,424 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,424 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,424 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || ((((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && 0bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) [2019-12-07 20:20:43,424 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,425 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,425 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || (((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && 0bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) [2019-12-07 20:20:43,425 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,425 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,425 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == \result) || ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) [2019-12-07 20:20:43,425 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,425 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,426 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || ((((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && 0bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) [2019-12-07 20:20:43,426 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,426 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,426 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,426 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,426 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || (((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && 0bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) [2019-12-07 20:20:43,426 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,426 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 [2019-12-07 20:20:43,426 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,426 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result [2019-12-07 20:20:43,426 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result [2019-12-07 20:20:43,427 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,427 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,427 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,427 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,427 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,427 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,427 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,428 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,428 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,428 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,428 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result [2019-12-07 20:20:43,428 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,428 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,428 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,428 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,428 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,429 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,429 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || ((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) [2019-12-07 20:20:43,429 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,429 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,429 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,429 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || ((((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(client, 4294967294bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) [2019-12-07 20:20:43,429 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,429 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || (((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) [2019-12-07 20:20:43,429 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || ((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) [2019-12-07 20:20:43,430 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,430 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == \result) || (((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) [2019-12-07 20:20:43,430 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) [2019-12-07 20:20:43,430 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || (((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) [2019-12-07 20:20:43,430 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result [2019-12-07 20:20:43,430 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || ((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) [2019-12-07 20:20:43,430 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result [2019-12-07 20:20:43,527 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/run_dir_13ff84c4-7f8f-4937-9514-15f1d70c0630/bin/utaipan/witness.graphml [2019-12-07 20:20:43,527 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-12-07 20:20:43,528 INFO L168 Benchmark]: Toolchain (without parser) took 189759.82 ms. Allocated memory was 1.0 GB in the beginning and 2.3 GB in the end (delta: 1.2 GB). Free memory was 948.4 MB in the beginning and 1.9 GB in the end (delta: -911.0 MB). Peak memory consumption was 334.8 MB. Max. memory is 11.5 GB. [2019-12-07 20:20:43,528 INFO L168 Benchmark]: CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 981.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 20:20:43,528 INFO L168 Benchmark]: CACSL2BoogieTranslator took 537.20 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 118.0 MB). Free memory was 948.4 MB in the beginning and 1.0 GB in the end (delta: -96.5 MB). Peak memory consumption was 32.3 MB. Max. memory is 11.5 GB. [2019-12-07 20:20:43,528 INFO L168 Benchmark]: Boogie Procedure Inliner took 79.00 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 13.7 MB). Peak memory consumption was 13.7 MB. Max. memory is 11.5 GB. [2019-12-07 20:20:43,528 INFO L168 Benchmark]: Boogie Preprocessor took 71.43 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 13.7 MB). Peak memory consumption was 13.7 MB. Max. memory is 11.5 GB. [2019-12-07 20:20:43,529 INFO L168 Benchmark]: RCFGBuilder took 1368.51 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 797.7 MB in the end (delta: 219.8 MB). Peak memory consumption was 219.8 MB. Max. memory is 11.5 GB. [2019-12-07 20:20:43,529 INFO L168 Benchmark]: TraceAbstraction took 187508.45 ms. Allocated memory was 1.1 GB in the beginning and 2.3 GB in the end (delta: 1.1 GB). Free memory was 797.7 MB in the beginning and 1.9 GB in the end (delta: -1.1 GB). Peak memory consumption was 1.8 GB. Max. memory is 11.5 GB. [2019-12-07 20:20:43,529 INFO L168 Benchmark]: Witness Printer took 192.05 ms. Allocated memory is still 2.3 GB. Free memory was 1.9 GB in the beginning and 1.9 GB in the end (delta: 84.3 MB). Peak memory consumption was 84.3 MB. Max. memory is 11.5 GB. [2019-12-07 20:20:43,530 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 981.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 537.20 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 118.0 MB). Free memory was 948.4 MB in the beginning and 1.0 GB in the end (delta: -96.5 MB). Peak memory consumption was 32.3 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 79.00 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 13.7 MB). Peak memory consumption was 13.7 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 71.43 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 13.7 MB). Peak memory consumption was 13.7 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1368.51 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 797.7 MB in the end (delta: 219.8 MB). Peak memory consumption was 219.8 MB. Max. memory is 11.5 GB. * TraceAbstraction took 187508.45 ms. Allocated memory was 1.1 GB in the beginning and 2.3 GB in the end (delta: 1.1 GB). Free memory was 797.7 MB in the beginning and 1.9 GB in the end (delta: -1.1 GB). Peak memory consumption was 1.8 GB. Max. memory is 11.5 GB. * Witness Printer took 192.05 ms. Allocated memory is still 2.3 GB. Free memory was 1.9 GB in the beginning and 1.9 GB in the end (delta: 84.3 MB). Peak memory consumption was 84.3 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 476]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 476]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 476]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 476]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 476]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 476]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 6 specifications checked. All of them hold - InvariantResult [Line: 1943]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1943]: Loop Invariant Derived loop invariant: ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) || ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 1943]: Loop Invariant Derived loop invariant: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 2596]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1943]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1943]: Loop Invariant Derived loop invariant: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1943]: Loop Invariant Derived loop invariant: ((((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32 - InvariantResult [Line: 1816]: Loop Invariant Derived loop invariant: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1962]: Loop Invariant Derived loop invariant: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 975]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 1570]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1598]: Loop Invariant Derived loop invariant: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result - InvariantResult [Line: 1962]: Loop Invariant Derived loop invariant: ((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 1730]: Loop Invariant Derived loop invariant: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 1598]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1570]: Loop Invariant Derived loop invariant: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1570]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1570]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1730]: Loop Invariant Derived loop invariant: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || ((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) - InvariantResult [Line: 1730]: Loop Invariant Derived loop invariant: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || (((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && 0bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) - InvariantResult [Line: 1962]: Loop Invariant Derived loop invariant: ((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 1730]: Loop Invariant Derived loop invariant: ((((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1598]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1962]: Loop Invariant Derived loop invariant: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1598]: Loop Invariant Derived loop invariant: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result - InvariantResult [Line: 1730]: Loop Invariant Derived loop invariant: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1962]: Loop Invariant Derived loop invariant: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 649]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 1598]: Loop Invariant Derived loop invariant: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1570]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1598]: Loop Invariant Derived loop invariant: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result - InvariantResult [Line: 1730]: Loop Invariant Derived loop invariant: (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) || (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) - InvariantResult [Line: 1570]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1598]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2279]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1598]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 1999]: Loop Invariant Derived loop invariant: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 2279]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1598]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1598]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 1962]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) - InvariantResult [Line: 1598]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1598]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 1807]: Loop Invariant Derived loop invariant: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 2279]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1999]: Loop Invariant Derived loop invariant: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || (((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && 0bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) - InvariantResult [Line: 2279]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 2279]: Loop Invariant Derived loop invariant: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1962]: Loop Invariant Derived loop invariant: ((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 2279]: Loop Invariant Derived loop invariant: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 2457]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 625]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 2432]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 2446]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 1999]: Loop Invariant Derived loop invariant: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || ((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) - InvariantResult [Line: 625]: Loop Invariant Derived loop invariant: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: (((__ste_ClientAddressBook_size0 == 0bv32 && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1) && !(1bv32 == rjh) - InvariantResult [Line: 1999]: Loop Invariant Derived loop invariant: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((2bv32 == handle && 1bv32 == bob) && __ste_ClientAddressBook_size0 == 0bv32) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1 - InvariantResult [Line: 1906]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1980]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1999]: Loop Invariant Derived loop invariant: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 2407]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((__ste_ClientAddressBook_size0 == 0bv32 && !(1bv32 == __ste_email_to0)) && 0bv32 == __ste_client_forwardReceiver1) && !(1bv32 == rjh) - InvariantResult [Line: 1849]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1906]: Loop Invariant Derived loop invariant: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1980]: Loop Invariant Derived loop invariant: ((((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && fwreceiver == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && 0bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) || ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) - InvariantResult [Line: 1906]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1849]: Loop Invariant Derived loop invariant: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 1980]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1906]: Loop Invariant Derived loop invariant: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && __ste_ClientAddressBook_size0 == 0bv32) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1 - InvariantResult [Line: 1906]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1999]: Loop Invariant Derived loop invariant: ((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 1980]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1980]: Loop Invariant Derived loop invariant: (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32 - InvariantResult [Line: 1999]: Loop Invariant Derived loop invariant: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 1980]: Loop Invariant Derived loop invariant: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 1999]: Loop Invariant Derived loop invariant: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((1bv32 == bob && __ste_ClientAddressBook_size0 == 0bv32) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1) && !(1bv32 == rjh)) && !(2bv32 == handle) - InvariantResult [Line: 1980]: Loop Invariant Derived loop invariant: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 2421]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 1906]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1980]: Loop Invariant Derived loop invariant: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || ((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) - InvariantResult [Line: 1980]: Loop Invariant Derived loop invariant: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1980]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 2341]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 1980]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1980]: Loop Invariant Derived loop invariant: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) || ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) - InvariantResult [Line: 2396]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 1980]: Loop Invariant Derived loop invariant: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 2385]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 1616]: Loop Invariant Derived loop invariant: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 1999]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 2374]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 2360]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 1980]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1516]: Loop Invariant Derived loop invariant: ((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 1999]: Loop Invariant Derived loop invariant: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 2349]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 1516]: Loop Invariant Derived loop invariant: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 2573]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && __ste_ClientAddressBook_size0 == 0bv32) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result) && 0bv32 == __ste_client_forwardReceiver1 - InvariantResult [Line: 1999]: Loop Invariant Derived loop invariant: (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) || (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 2bv32 == handle) && 1bv32 == \result - InvariantResult [Line: 1469]: Loop Invariant Derived loop invariant: (((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == \result) || ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) - InvariantResult [Line: 1516]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) - InvariantResult [Line: 1999]: Loop Invariant Derived loop invariant: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 2340]: Loop Invariant Derived loop invariant: (((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 1bv32 == \result - InvariantResult [Line: 1516]: Loop Invariant Derived loop invariant: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1516]: Loop Invariant Derived loop invariant: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1516]: Loop Invariant Derived loop invariant: ((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 1999]: Loop Invariant Derived loop invariant: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1034]: Loop Invariant Derived loop invariant: ((((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32 - InvariantResult [Line: 1999]: Loop Invariant Derived loop invariant: ((((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1469]: Loop Invariant Derived loop invariant: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1469]: Loop Invariant Derived loop invariant: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1034]: Loop Invariant Derived loop invariant: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 1034]: Loop Invariant Derived loop invariant: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || (((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) - InvariantResult [Line: 1469]: Loop Invariant Derived loop invariant: (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || (((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) - InvariantResult [Line: 1999]: Loop Invariant Derived loop invariant: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1469]: Loop Invariant Derived loop invariant: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 1034]: Loop Invariant Derived loop invariant: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || ((((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && 0bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) - InvariantResult [Line: 841]: Loop Invariant Derived loop invariant: (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && 2bv32 == handle) && 1bv32 == \result) || (((((~bvadd64(handle, 4294967293bv32) == 0bv32 && 1bv32 == bob) && 2bv32 == rjh) && !(1bv32 == __ste_email_to0)) && op2 == 0bv32) && 1bv32 == \result) - InvariantResult [Line: 1469]: Loop Invariant Derived loop invariant: (((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == \result) || (((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && client == 2bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == size) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(client, 4294967294bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32 - InvariantResult [Line: 1999]: Loop Invariant Derived loop invariant: ((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == value) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 1825]: Loop Invariant Derived loop invariant: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1034]: Loop Invariant Derived loop invariant: ((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) || ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) - InvariantResult [Line: 1999]: Loop Invariant Derived loop invariant: (((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || (((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || ((((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(client, 4294967294bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || (((((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && 0bv32 == \result) && ~bvadd64(client, 4294967294bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) - InvariantResult [Line: 1034]: Loop Invariant Derived loop invariant: ((((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1784]: Loop Invariant Derived loop invariant: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1943]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1661]: Loop Invariant Derived loop invariant: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 2606]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) || (((((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && client == 2bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && ~bvadd64(client, 4294967294bv32) == 0bv32) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) - InvariantResult [Line: 1943]: Loop Invariant Derived loop invariant: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == ~bvadd64(sender, 4294967295bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == value) && 2bv32 == __ste_email_to0) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && 1bv32 == \result) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 2bv32 == rjh) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1661]: Loop Invariant Derived loop invariant: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: (((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32 - InvariantResult [Line: 1943]: Loop Invariant Derived loop invariant: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp, 4294967295bv32) - InvariantResult [Line: 1943]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && ~bvadd64(msg, 4294967295bv32) == 0bv32) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - InvariantResult [Line: 1943]: Loop Invariant Derived loop invariant: (((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || (((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) - InvariantResult [Line: 1943]: Loop Invariant Derived loop invariant: ((((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 0bv32 == size) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result) || ((((((((((1bv32 == \result && ~bvadd64(handle, 4294967293bv32) == 0bv32) && client == 2bv32) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 2bv32 == __ste_email_to0) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 0bv32 == __ste_client_forwardReceiver1) && 0bv32 == \result) && ~bvadd64(handle, 4294967295bv32) == 0bv32) && ~bvadd64(\result, 4294967294bv32) == 0bv32) - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: ((((((1bv32 == \result && 0bv32 == ~bvadd64(sender, 4294967295bv32)) && ~bvadd64(handle, 4294967293bv32) == 0bv32) && 1bv32 == bob) && 0bv32 == ~bvadd64(msg, 4294967295bv32)) && 2bv32 == rjh) && 0bv32 == ~bvadd64(to, 4294967294bv32)) && 1bv32 == \result - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 477 locations, 6 error locations. Result: SAFE, OverallTime: 33.7s, OverallIterations: 19, TraceHistogramMax: 3, AutomataDifference: 18.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 153.6s, HoareTripleCheckerStatistics: 20579 SDtfs, 52742 SDslu, 54653 SDs, 0 SdLazy, 4794 SolverSat, 528 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 5.7s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 3342 GetRequests, 3030 SyntacticMatches, 4 SemanticMatches, 308 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6995 ImplicationChecksByTransitivity, 6.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=10667occurred in iteration=18, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 2.5s AutomataMinimizationTime, 19 MinimizatonAttempts, 26938 StatesRemovedByMinimization, 17 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 151 LocationsWithAnnotation, 151 PreInvPairs, 3080 NumberOfFragments, 7505 HoareAnnotationTreeSize, 151 FomulaSimplifications, 25773008264 FormulaSimplificationTreeSizeReduction, 23.8s HoareSimplificationTime, 151 FomulaSimplificationsInter, 3749696386 FormulaSimplificationTreeSizeReductionInter, 129.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.9s SsaConstructionTime, 2.3s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 1600 NumberOfCodeBlocks, 1600 NumberOfCodeBlocksAsserted, 27 NumberOfCheckSat, 3146 ConstructedInterpolants, 0 QuantifiedInterpolants, 327819 SizeOfPredicates, 100 NumberOfNonLiveVariables, 11563 ConjunctsInSsa, 150 ConjunctsInUnsatCore, 54 InterpolantComputations, 38 PerfectInterpolantSequences, 226/354 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...