./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ssh/s3_srvr.blast.11.i.cil-1.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f470102c Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/ssh/s3_srvr.blast.11.i.cil-1.c -s /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ca7b987059c829f244238d9119096032ac44debc ...................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/ssh/s3_srvr.blast.11.i.cil-1.c -s /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ca7b987059c829f244238d9119096032ac44debc ....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE --- Real Ultimate output --- This is Ultimate 0.1.25-f470102 [2019-12-07 15:21:14,626 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 15:21:14,627 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 15:21:14,635 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 15:21:14,635 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 15:21:14,636 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 15:21:14,636 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 15:21:14,638 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 15:21:14,639 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 15:21:14,640 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 15:21:14,640 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 15:21:14,641 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 15:21:14,641 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 15:21:14,642 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 15:21:14,642 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 15:21:14,643 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 15:21:14,644 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 15:21:14,644 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 15:21:14,646 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 15:21:14,648 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 15:21:14,649 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 15:21:14,649 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 15:21:14,650 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 15:21:14,650 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 15:21:14,652 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 15:21:14,652 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 15:21:14,653 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 15:21:14,653 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 15:21:14,653 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 15:21:14,654 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 15:21:14,654 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 15:21:14,654 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 15:21:14,655 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 15:21:14,655 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 15:21:14,656 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 15:21:14,656 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 15:21:14,656 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 15:21:14,657 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 15:21:14,657 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 15:21:14,657 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 15:21:14,658 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 15:21:14,658 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf [2019-12-07 15:21:14,668 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 15:21:14,668 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 15:21:14,669 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-12-07 15:21:14,669 INFO L138 SettingsManager]: * User list type=DISABLED [2019-12-07 15:21:14,669 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-12-07 15:21:14,669 INFO L138 SettingsManager]: * Explicit value domain=true [2019-12-07 15:21:14,669 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2019-12-07 15:21:14,669 INFO L138 SettingsManager]: * Octagon Domain=false [2019-12-07 15:21:14,669 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-12-07 15:21:14,669 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2019-12-07 15:21:14,670 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2019-12-07 15:21:14,670 INFO L138 SettingsManager]: * Interval Domain=false [2019-12-07 15:21:14,670 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2019-12-07 15:21:14,670 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2019-12-07 15:21:14,670 INFO L138 SettingsManager]: * Simplification Technique=SIMPLIFY_QUICK [2019-12-07 15:21:14,670 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 15:21:14,670 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 15:21:14,671 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-12-07 15:21:14,671 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 15:21:14,671 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 15:21:14,671 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-12-07 15:21:14,671 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-12-07 15:21:14,671 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-12-07 15:21:14,671 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2019-12-07 15:21:14,671 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 15:21:14,671 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 15:21:14,672 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 15:21:14,672 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-12-07 15:21:14,672 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 15:21:14,672 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-12-07 15:21:14,672 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-12-07 15:21:14,672 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 15:21:14,672 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 15:21:14,672 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-12-07 15:21:14,673 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-12-07 15:21:14,673 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2019-12-07 15:21:14,673 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-12-07 15:21:14,673 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-12-07 15:21:14,673 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 15:21:14,673 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-12-07 15:21:14,673 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ca7b987059c829f244238d9119096032ac44debc [2019-12-07 15:21:14,772 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 15:21:14,780 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 15:21:14,783 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 15:21:14,784 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 15:21:14,784 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 15:21:14,785 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/../../sv-benchmarks/c/ssh/s3_srvr.blast.11.i.cil-1.c [2019-12-07 15:21:14,831 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/data/1b667e9d6/8b4973a1650d468fb1181c10604de3e5/FLAGabf6b3c43 [2019-12-07 15:21:15,370 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 15:21:15,371 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/sv-benchmarks/c/ssh/s3_srvr.blast.11.i.cil-1.c [2019-12-07 15:21:15,383 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/data/1b667e9d6/8b4973a1650d468fb1181c10604de3e5/FLAGabf6b3c43 [2019-12-07 15:21:15,811 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/data/1b667e9d6/8b4973a1650d468fb1181c10604de3e5 [2019-12-07 15:21:15,814 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 15:21:15,815 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 15:21:15,816 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 15:21:15,816 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 15:21:15,819 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 15:21:15,819 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 03:21:15" (1/1) ... [2019-12-07 15:21:15,821 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6837e5f9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:21:15, skipping insertion in model container [2019-12-07 15:21:15,821 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 03:21:15" (1/1) ... [2019-12-07 15:21:15,827 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 15:21:15,860 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 15:21:16,127 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 15:21:16,138 ERROR L326 MainTranslator]: Unsupported Syntax: Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) [2019-12-07 15:21:16,138 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@526cf774 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:21:16, skipping insertion in model container [2019-12-07 15:21:16,139 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 15:21:16,139 INFO L184 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.procedureinliner [2019-12-07 15:21:16,140 INFO L168 Benchmark]: Toolchain (without parser) took 325.03 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 88.6 MB). Free memory was 939.3 MB in the beginning and 1.1 GB in the end (delta: -131.5 MB). Peak memory consumption was 24.1 MB. Max. memory is 11.5 GB. [2019-12-07 15:21:16,141 INFO L168 Benchmark]: CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 960.8 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 15:21:16,141 INFO L168 Benchmark]: CACSL2BoogieTranslator took 322.99 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 88.6 MB). Free memory was 939.3 MB in the beginning and 1.1 GB in the end (delta: -131.5 MB). Peak memory consumption was 24.1 MB. Max. memory is 11.5 GB. [2019-12-07 15:21:16,142 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 960.8 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 322.99 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 88.6 MB). Free memory was 939.3 MB in the beginning and 1.1 GB in the end (delta: -131.5 MB). Peak memory consumption was 24.1 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - UnsupportedSyntaxResult [Line: 1038]: Unsupported Syntax Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.25-f470102 [2019-12-07 15:21:17,269 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 15:21:17,271 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 15:21:17,279 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 15:21:17,279 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 15:21:17,280 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 15:21:17,281 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 15:21:17,283 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 15:21:17,285 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 15:21:17,286 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 15:21:17,286 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 15:21:17,287 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 15:21:17,287 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 15:21:17,288 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 15:21:17,289 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 15:21:17,290 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 15:21:17,290 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 15:21:17,291 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 15:21:17,292 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 15:21:17,294 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 15:21:17,296 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 15:21:17,297 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 15:21:17,298 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 15:21:17,299 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 15:21:17,301 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 15:21:17,301 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 15:21:17,301 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 15:21:17,302 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 15:21:17,303 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 15:21:17,303 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 15:21:17,304 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 15:21:17,304 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 15:21:17,305 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 15:21:17,305 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 15:21:17,306 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 15:21:17,306 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 15:21:17,306 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 15:21:17,306 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 15:21:17,306 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 15:21:17,307 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 15:21:17,308 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 15:21:17,308 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf [2019-12-07 15:21:17,321 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 15:21:17,321 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 15:21:17,322 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-12-07 15:21:17,322 INFO L138 SettingsManager]: * User list type=DISABLED [2019-12-07 15:21:17,322 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-12-07 15:21:17,322 INFO L138 SettingsManager]: * Explicit value domain=true [2019-12-07 15:21:17,322 INFO L138 SettingsManager]: * Octagon Domain=false [2019-12-07 15:21:17,323 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-12-07 15:21:17,323 INFO L138 SettingsManager]: * Interval Domain=false [2019-12-07 15:21:17,323 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 15:21:17,324 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 15:21:17,324 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 15:21:17,324 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 15:21:17,324 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-12-07 15:21:17,324 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-12-07 15:21:17,325 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-12-07 15:21:17,325 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2019-12-07 15:21:17,325 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2019-12-07 15:21:17,325 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2019-12-07 15:21:17,325 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 15:21:17,326 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 15:21:17,326 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 15:21:17,326 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-12-07 15:21:17,326 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 15:21:17,326 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-12-07 15:21:17,327 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-12-07 15:21:17,327 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-12-07 15:21:17,327 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 15:21:17,327 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 15:21:17,327 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-12-07 15:21:17,327 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-12-07 15:21:17,328 INFO L138 SettingsManager]: * Trace refinement strategy=WALRUS [2019-12-07 15:21:17,328 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --rewrite-divk --print-success --lang smt [2019-12-07 15:21:17,328 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-12-07 15:21:17,328 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 15:21:17,328 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-12-07 15:21:17,329 INFO L138 SettingsManager]: * Logic for external solver=AUFBV Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ca7b987059c829f244238d9119096032ac44debc [2019-12-07 15:21:17,500 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 15:21:17,507 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 15:21:17,509 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 15:21:17,510 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 15:21:17,511 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 15:21:17,511 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/../../sv-benchmarks/c/ssh/s3_srvr.blast.11.i.cil-1.c [2019-12-07 15:21:17,547 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/data/f3c364e19/b449a625a837477babe16ab176aaa621/FLAG138bbab8e [2019-12-07 15:21:17,985 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 15:21:17,986 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/sv-benchmarks/c/ssh/s3_srvr.blast.11.i.cil-1.c [2019-12-07 15:21:17,999 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/data/f3c364e19/b449a625a837477babe16ab176aaa621/FLAG138bbab8e [2019-12-07 15:21:18,321 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/data/f3c364e19/b449a625a837477babe16ab176aaa621 [2019-12-07 15:21:18,326 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 15:21:18,328 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 15:21:18,329 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 15:21:18,329 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 15:21:18,333 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 15:21:18,334 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 03:21:18" (1/1) ... [2019-12-07 15:21:18,337 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@67747d05 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:21:18, skipping insertion in model container [2019-12-07 15:21:18,337 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 03:21:18" (1/1) ... [2019-12-07 15:21:18,343 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 15:21:18,378 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 15:21:18,693 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 15:21:18,709 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2019-12-07 15:21:18,719 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 15:21:18,794 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 15:21:18,801 INFO L203 MainTranslator]: Completed pre-run [2019-12-07 15:21:18,864 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 15:21:18,882 INFO L208 MainTranslator]: Completed translation [2019-12-07 15:21:18,883 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:21:18 WrapperNode [2019-12-07 15:21:18,883 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 15:21:18,884 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-12-07 15:21:18,884 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-12-07 15:21:18,884 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-12-07 15:21:18,891 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:21:18" (1/1) ... [2019-12-07 15:21:18,915 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:21:18" (1/1) ... [2019-12-07 15:21:18,951 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-12-07 15:21:18,952 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-12-07 15:21:18,952 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-12-07 15:21:18,952 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-12-07 15:21:18,960 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:21:18" (1/1) ... [2019-12-07 15:21:18,961 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:21:18" (1/1) ... [2019-12-07 15:21:18,968 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:21:18" (1/1) ... [2019-12-07 15:21:18,969 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:21:18" (1/1) ... [2019-12-07 15:21:19,001 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:21:18" (1/1) ... [2019-12-07 15:21:19,009 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:21:18" (1/1) ... [2019-12-07 15:21:19,013 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:21:18" (1/1) ... [2019-12-07 15:21:19,019 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-12-07 15:21:19,020 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-12-07 15:21:19,020 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-12-07 15:21:19,020 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-12-07 15:21:19,021 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:21:18" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 15:21:19,067 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2019-12-07 15:21:19,067 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-12-07 15:21:19,067 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2019-12-07 15:21:19,067 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2019-12-07 15:21:19,067 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2019-12-07 15:21:19,067 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-12-07 15:21:19,068 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-12-07 15:21:19,068 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2019-12-07 15:21:19,209 WARN L738 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2019-12-07 15:21:28,067 INFO L691 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##87: assume false; [2019-12-07 15:21:28,067 INFO L691 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##88: assume !false; [2019-12-07 15:21:28,069 INFO L282 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-12-07 15:21:28,069 INFO L287 CfgBuilder]: Removed 7 assume(true) statements. [2019-12-07 15:21:28,070 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 03:21:28 BoogieIcfgContainer [2019-12-07 15:21:28,070 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-12-07 15:21:28,071 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-12-07 15:21:28,071 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-12-07 15:21:28,074 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-12-07 15:21:28,074 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 07.12 03:21:18" (1/3) ... [2019-12-07 15:21:28,075 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6285044d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 03:21:28, skipping insertion in model container [2019-12-07 15:21:28,075 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:21:18" (2/3) ... [2019-12-07 15:21:28,075 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6285044d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 03:21:28, skipping insertion in model container [2019-12-07 15:21:28,075 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 03:21:28" (3/3) ... [2019-12-07 15:21:28,077 INFO L109 eAbstractionObserver]: Analyzing ICFG s3_srvr.blast.11.i.cil-1.c [2019-12-07 15:21:28,083 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-12-07 15:21:28,088 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2019-12-07 15:21:28,096 INFO L249 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2019-12-07 15:21:28,114 INFO L373 AbstractCegarLoop]: Interprodecural is true [2019-12-07 15:21:28,114 INFO L374 AbstractCegarLoop]: Hoare is true [2019-12-07 15:21:28,115 INFO L375 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-12-07 15:21:28,115 INFO L376 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-12-07 15:21:28,115 INFO L377 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-12-07 15:21:28,115 INFO L378 AbstractCegarLoop]: Difference is false [2019-12-07 15:21:28,115 INFO L379 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-12-07 15:21:28,115 INFO L383 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-12-07 15:21:28,129 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states. [2019-12-07 15:21:28,135 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2019-12-07 15:21:28,135 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 15:21:28,135 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:21:28,136 INFO L410 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 15:21:28,139 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:21:28,140 INFO L82 PathProgramCache]: Analyzing trace with hash -2031756972, now seen corresponding path program 1 times [2019-12-07 15:21:28,151 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 15:21:28,151 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1877113929] [2019-12-07 15:21:28,151 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/mathsat Starting monitored process 2 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with mathsat -unsat_core_generation=3 [2019-12-07 15:21:28,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:21:28,293 INFO L264 TraceCheckSpWp]: Trace formula consists of 125 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 15:21:28,298 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 15:21:28,329 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:21:28,330 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 15:21:28,350 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:21:28,351 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1877113929] [2019-12-07 15:21:28,351 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:21:28,352 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 15:21:28,352 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2050322929] [2019-12-07 15:21:28,357 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 15:21:28,357 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 15:21:28,369 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 15:21:28,370 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 15:21:28,372 INFO L87 Difference]: Start difference. First operand 148 states. Second operand 4 states. [2019-12-07 15:21:28,491 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:21:28,491 INFO L93 Difference]: Finished difference Result 561 states and 957 transitions. [2019-12-07 15:21:28,492 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 15:21:28,493 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 35 [2019-12-07 15:21:28,493 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 15:21:28,503 INFO L225 Difference]: With dead ends: 561 [2019-12-07 15:21:28,503 INFO L226 Difference]: Without dead ends: 382 [2019-12-07 15:21:28,506 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 15:21:28,519 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 382 states. [2019-12-07 15:21:28,548 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 382 to 380. [2019-12-07 15:21:28,549 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 380 states. [2019-12-07 15:21:28,550 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 380 states to 380 states and 579 transitions. [2019-12-07 15:21:28,551 INFO L78 Accepts]: Start accepts. Automaton has 380 states and 579 transitions. Word has length 35 [2019-12-07 15:21:28,551 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 15:21:28,551 INFO L462 AbstractCegarLoop]: Abstraction has 380 states and 579 transitions. [2019-12-07 15:21:28,551 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 15:21:28,552 INFO L276 IsEmpty]: Start isEmpty. Operand 380 states and 579 transitions. [2019-12-07 15:21:28,554 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2019-12-07 15:21:28,554 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 15:21:28,555 INFO L410 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:21:28,756 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 mathsat -unsat_core_generation=3 [2019-12-07 15:21:28,756 INFO L410 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 15:21:28,757 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:21:28,758 INFO L82 PathProgramCache]: Analyzing trace with hash -1192573563, now seen corresponding path program 1 times [2019-12-07 15:21:28,761 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 15:21:28,762 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1012705809] [2019-12-07 15:21:28,763 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/mathsat Starting monitored process 3 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with mathsat -unsat_core_generation=3 [2019-12-07 15:21:28,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:21:29,000 INFO L264 TraceCheckSpWp]: Trace formula consists of 170 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 15:21:29,004 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 15:21:29,021 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:21:29,021 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 15:21:29,040 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:21:29,040 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1012705809] [2019-12-07 15:21:29,041 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:21:29,041 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 15:21:29,041 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1171302821] [2019-12-07 15:21:29,042 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 15:21:29,043 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 15:21:29,043 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 15:21:29,043 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 15:21:29,043 INFO L87 Difference]: Start difference. First operand 380 states and 579 transitions. Second operand 4 states. [2019-12-07 15:21:30,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:21:30,877 INFO L93 Difference]: Finished difference Result 876 states and 1345 transitions. [2019-12-07 15:21:30,877 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 15:21:30,878 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 59 [2019-12-07 15:21:30,878 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 15:21:30,882 INFO L225 Difference]: With dead ends: 876 [2019-12-07 15:21:30,882 INFO L226 Difference]: Without dead ends: 628 [2019-12-07 15:21:30,885 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 116 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 15:21:30,886 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 628 states. [2019-12-07 15:21:30,912 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 628 to 626. [2019-12-07 15:21:30,912 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 626 states. [2019-12-07 15:21:30,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 626 states to 626 states and 950 transitions. [2019-12-07 15:21:30,915 INFO L78 Accepts]: Start accepts. Automaton has 626 states and 950 transitions. Word has length 59 [2019-12-07 15:21:30,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 15:21:30,916 INFO L462 AbstractCegarLoop]: Abstraction has 626 states and 950 transitions. [2019-12-07 15:21:30,916 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 15:21:30,916 INFO L276 IsEmpty]: Start isEmpty. Operand 626 states and 950 transitions. [2019-12-07 15:21:30,920 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2019-12-07 15:21:30,921 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 15:21:30,921 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:21:31,121 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 mathsat -unsat_core_generation=3 [2019-12-07 15:21:31,122 INFO L410 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 15:21:31,122 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:21:31,122 INFO L82 PathProgramCache]: Analyzing trace with hash 1680839393, now seen corresponding path program 1 times [2019-12-07 15:21:31,123 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 15:21:31,123 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [294465896] [2019-12-07 15:21:31,123 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/mathsat Starting monitored process 4 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with mathsat -unsat_core_generation=3 [2019-12-07 15:21:31,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:21:31,301 INFO L264 TraceCheckSpWp]: Trace formula consists of 264 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 15:21:31,305 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 15:21:31,318 INFO L134 CoverageAnalysis]: Checked inductivity of 88 backedges. 77 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2019-12-07 15:21:31,318 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 15:21:31,333 INFO L134 CoverageAnalysis]: Checked inductivity of 88 backedges. 77 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2019-12-07 15:21:31,333 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [294465896] [2019-12-07 15:21:31,333 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:21:31,334 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 15:21:31,334 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [324807521] [2019-12-07 15:21:31,334 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 15:21:31,334 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 15:21:31,334 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 15:21:31,335 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 15:21:31,335 INFO L87 Difference]: Start difference. First operand 626 states and 950 transitions. Second operand 4 states. [2019-12-07 15:21:33,430 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:21:33,430 INFO L93 Difference]: Finished difference Result 1489 states and 2268 transitions. [2019-12-07 15:21:33,430 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 15:21:33,431 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 103 [2019-12-07 15:21:33,431 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 15:21:33,436 INFO L225 Difference]: With dead ends: 1489 [2019-12-07 15:21:33,436 INFO L226 Difference]: Without dead ends: 995 [2019-12-07 15:21:33,437 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 204 GetRequests, 202 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 15:21:33,439 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 995 states. [2019-12-07 15:21:33,465 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 995 to 872. [2019-12-07 15:21:33,465 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 872 states. [2019-12-07 15:21:33,468 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 872 states to 872 states and 1320 transitions. [2019-12-07 15:21:33,468 INFO L78 Accepts]: Start accepts. Automaton has 872 states and 1320 transitions. Word has length 103 [2019-12-07 15:21:33,469 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 15:21:33,469 INFO L462 AbstractCegarLoop]: Abstraction has 872 states and 1320 transitions. [2019-12-07 15:21:33,469 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 15:21:33,469 INFO L276 IsEmpty]: Start isEmpty. Operand 872 states and 1320 transitions. [2019-12-07 15:21:33,472 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 128 [2019-12-07 15:21:33,472 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 15:21:33,472 INFO L410 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:21:33,673 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 mathsat -unsat_core_generation=3 [2019-12-07 15:21:33,674 INFO L410 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 15:21:33,674 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:21:33,675 INFO L82 PathProgramCache]: Analyzing trace with hash 1159018067, now seen corresponding path program 1 times [2019-12-07 15:21:33,677 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 15:21:33,678 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2061876192] [2019-12-07 15:21:33,678 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/mathsat Starting monitored process 5 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with mathsat -unsat_core_generation=3 [2019-12-07 15:21:34,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:21:34,352 INFO L264 TraceCheckSpWp]: Trace formula consists of 314 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 15:21:34,356 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 15:21:34,382 INFO L189 IndexEqualityManager]: detected not equals via solver [2019-12-07 15:21:34,383 INFO L189 IndexEqualityManager]: detected not equals via solver [2019-12-07 15:21:34,384 INFO L189 IndexEqualityManager]: detected not equals via solver [2019-12-07 15:21:34,386 INFO L189 IndexEqualityManager]: detected not equals via solver [2019-12-07 15:21:34,387 INFO L189 IndexEqualityManager]: detected not equals via solver [2019-12-07 15:21:34,388 INFO L172 IndexEqualityManager]: detected equality via solver [2019-12-07 15:21:34,457 INFO L343 Elim1Store]: treesize reduction 190, result has 12.8 percent of original size [2019-12-07 15:21:34,457 INFO L377 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 3 case distinctions, treesize of input 32 treesize of output 38 [2019-12-07 15:21:34,457 INFO L534 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2019-12-07 15:21:34,473 INFO L614 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2019-12-07 15:21:34,473 INFO L534 ElimStorePlain]: Start of recursive call 1: 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2019-12-07 15:21:34,473 INFO L239 ElimStorePlain]: Needed 2 recursive calls to eliminate 1 variables, input treesize:32, output treesize:38 [2019-12-07 15:21:34,500 INFO L172 IndexEqualityManager]: detected equality via solver [2019-12-07 15:21:34,500 INFO L172 IndexEqualityManager]: detected equality via solver [2019-12-07 15:21:34,501 INFO L172 IndexEqualityManager]: detected equality via solver [2019-12-07 15:21:34,750 WARN L192 SmtUtils]: Spent 246.00 ms on a formula simplification. DAG size of input: 163 DAG size of output: 41 [2019-12-07 15:21:34,751 INFO L343 Elim1Store]: treesize reduction 850, result has 7.0 percent of original size [2019-12-07 15:21:34,751 INFO L377 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 13 case distinctions, treesize of input 72 treesize of output 89 [2019-12-07 15:21:34,752 INFO L534 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2019-12-07 15:21:34,789 INFO L614 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2019-12-07 15:21:34,789 INFO L534 ElimStorePlain]: Start of recursive call 1: 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2019-12-07 15:21:34,789 INFO L239 ElimStorePlain]: Needed 2 recursive calls to eliminate 1 variables, input treesize:72, output treesize:77 [2019-12-07 15:21:34,860 INFO L343 Elim1Store]: treesize reduction 336, result has 0.3 percent of original size [2019-12-07 15:21:34,861 INFO L377 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 2, 0 stores, 8 select indices, 8 select index equivalence classes, 0 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 28 case distinctions, treesize of input 110 treesize of output 38 [2019-12-07 15:21:34,862 INFO L534 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2019-12-07 15:21:34,864 INFO L614 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2019-12-07 15:21:34,864 INFO L534 ElimStorePlain]: Start of recursive call 1: 2 dim-0 vars, 1 dim-2 vars, End of recursive call: and 1 xjuncts. [2019-12-07 15:21:34,864 INFO L239 ElimStorePlain]: Needed 2 recursive calls to eliminate 3 variables, input treesize:110, output treesize:10 [2019-12-07 15:21:34,910 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 122 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2019-12-07 15:21:34,911 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 15:21:34,981 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 122 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2019-12-07 15:21:34,982 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2061876192] [2019-12-07 15:21:34,982 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:21:34,982 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 4] imperfect sequences [] total 7 [2019-12-07 15:21:34,982 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [747073240] [2019-12-07 15:21:34,982 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2019-12-07 15:21:34,983 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 15:21:34,983 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 15:21:34,983 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2019-12-07 15:21:34,983 INFO L87 Difference]: Start difference. First operand 872 states and 1320 transitions. Second operand 7 states. [2019-12-07 15:22:38,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:22:38,200 INFO L93 Difference]: Finished difference Result 3288 states and 4998 transitions. [2019-12-07 15:22:38,203 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-12-07 15:22:38,203 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 127 [2019-12-07 15:22:38,204 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 15:22:38,213 INFO L225 Difference]: With dead ends: 3288 [2019-12-07 15:22:38,213 INFO L226 Difference]: Without dead ends: 2424 [2019-12-07 15:22:38,214 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 254 GetRequests, 245 SyntacticMatches, 2 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2019-12-07 15:22:38,217 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2424 states. [2019-12-07 15:22:38,254 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2424 to 1109. [2019-12-07 15:22:38,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1109 states. [2019-12-07 15:22:38,256 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1109 states to 1109 states and 1732 transitions. [2019-12-07 15:22:38,256 INFO L78 Accepts]: Start accepts. Automaton has 1109 states and 1732 transitions. Word has length 127 [2019-12-07 15:22:38,256 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 15:22:38,256 INFO L462 AbstractCegarLoop]: Abstraction has 1109 states and 1732 transitions. [2019-12-07 15:22:38,256 INFO L463 AbstractCegarLoop]: Interpolant automaton has 7 states. [2019-12-07 15:22:38,257 INFO L276 IsEmpty]: Start isEmpty. Operand 1109 states and 1732 transitions. [2019-12-07 15:22:38,258 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 128 [2019-12-07 15:22:38,258 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 15:22:38,258 INFO L410 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:22:38,459 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 mathsat -unsat_core_generation=3 [2019-12-07 15:22:38,460 INFO L410 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 15:22:38,460 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:22:38,461 INFO L82 PathProgramCache]: Analyzing trace with hash -799556719, now seen corresponding path program 1 times [2019-12-07 15:22:38,463 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 15:22:38,464 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [400709653] [2019-12-07 15:22:38,464 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/mathsat Starting monitored process 6 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with mathsat -unsat_core_generation=3 [2019-12-07 15:22:39,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-12-07 15:22:40,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-12-07 15:22:40,492 INFO L174 FreeRefinementEngine]: Strategy WALRUS found a feasible trace [2019-12-07 15:22:40,492 INFO L475 BasicCegarLoop]: Counterexample might be feasible [2019-12-07 15:22:40,692 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 mathsat -unsat_core_generation=3 [2019-12-07 15:22:40,773 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 07.12 03:22:40 BoogieIcfgContainer [2019-12-07 15:22:40,773 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-12-07 15:22:40,773 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-12-07 15:22:40,774 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-12-07 15:22:40,774 INFO L275 PluginConnector]: Witness Printer initialized [2019-12-07 15:22:40,774 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 03:21:28" (3/4) ... [2019-12-07 15:22:40,775 INFO L131 WitnessPrinter]: Generating witness for reachability counterexample [2019-12-07 15:22:40,854 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/run_dir_2d8af17a-c559-4143-b156-a903633638e6/bin/utaipan/witness.graphml [2019-12-07 15:22:40,854 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-12-07 15:22:40,855 INFO L168 Benchmark]: Toolchain (without parser) took 82527.93 ms. Allocated memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: 272.6 MB). Free memory was 945.7 MB in the beginning and 1.0 GB in the end (delta: -69.6 MB). Peak memory consumption was 203.0 MB. Max. memory is 11.5 GB. [2019-12-07 15:22:40,855 INFO L168 Benchmark]: CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 981.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 15:22:40,855 INFO L168 Benchmark]: CACSL2BoogieTranslator took 554.07 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 157.8 MB). Free memory was 945.7 MB in the beginning and 1.1 GB in the end (delta: -155.0 MB). Peak memory consumption was 28.2 MB. Max. memory is 11.5 GB. [2019-12-07 15:22:40,855 INFO L168 Benchmark]: Boogie Procedure Inliner took 68.16 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 13.0 MB). Peak memory consumption was 13.0 MB. Max. memory is 11.5 GB. [2019-12-07 15:22:40,856 INFO L168 Benchmark]: Boogie Preprocessor took 67.37 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.5 MB). Peak memory consumption was 6.5 MB. Max. memory is 11.5 GB. [2019-12-07 15:22:40,856 INFO L168 Benchmark]: RCFGBuilder took 9050.71 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 966.0 MB in the end (delta: 115.1 MB). Peak memory consumption was 115.1 MB. Max. memory is 11.5 GB. [2019-12-07 15:22:40,856 INFO L168 Benchmark]: TraceAbstraction took 72702.36 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 114.8 MB). Free memory was 966.0 MB in the beginning and 1.0 GB in the end (delta: -65.8 MB). Peak memory consumption was 49.0 MB. Max. memory is 11.5 GB. [2019-12-07 15:22:40,856 INFO L168 Benchmark]: Witness Printer took 80.50 ms. Allocated memory is still 1.3 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 16.6 MB). Peak memory consumption was 16.6 MB. Max. memory is 11.5 GB. [2019-12-07 15:22:40,858 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 981.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 554.07 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 157.8 MB). Free memory was 945.7 MB in the beginning and 1.1 GB in the end (delta: -155.0 MB). Peak memory consumption was 28.2 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 68.16 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 13.0 MB). Peak memory consumption was 13.0 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 67.37 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.5 MB). Peak memory consumption was 6.5 MB. Max. memory is 11.5 GB. * RCFGBuilder took 9050.71 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 966.0 MB in the end (delta: 115.1 MB). Peak memory consumption was 115.1 MB. Max. memory is 11.5 GB. * TraceAbstraction took 72702.36 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 114.8 MB). Free memory was 966.0 MB in the beginning and 1.0 GB in the end (delta: -65.8 MB). Peak memory consumption was 49.0 MB. Max. memory is 11.5 GB. * Witness Printer took 80.50 ms. Allocated memory is still 1.3 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 16.6 MB). Peak memory consumption was 16.6 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 1726]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [init=1, SSLv3_server_data={15:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1080] BUF_MEM *buf ; [L1081] unsigned long l ; [L1082] unsigned long Time ; [L1083] unsigned long tmp ; [L1084] void (*cb)() ; [L1085] long num1 ; [L1086] int ret ; [L1087] int new_state ; [L1088] int state ; [L1089] int skip ; [L1090] int got_new_session ; [L1091] int tmp___1 = __VERIFIER_nondet_int() ; [L1092] int tmp___2 = __VERIFIER_nondet_int() ; [L1093] int tmp___3 = __VERIFIER_nondet_int() ; [L1094] int tmp___4 = __VERIFIER_nondet_int() ; [L1095] int tmp___5 = __VERIFIER_nondet_int() ; [L1096] int tmp___6 = __VERIFIER_nondet_int() ; [L1097] int tmp___7 ; [L1098] long tmp___8 = __VERIFIER_nondet_long() ; [L1099] int tmp___9 = __VERIFIER_nondet_int() ; [L1100] int tmp___10 = __VERIFIER_nondet_int() ; [L1101] int blastFlag ; [L1105] s->state = 8464 [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] tmp = __VERIFIER_nondet_int() [L1110] Time = tmp [L1111] cb = (void (*)())((void *)0) [L1112] ret = -1 [L1113] skip = 0 [L1114] got_new_session = 0 [L1115] EXPR s->info_callback VAL [init=1, SSLv3_server_data={15:0}] [L1115] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1116] EXPR s->info_callback [L1116] cb = s->info_callback [L1120] EXPR s->in_handshake [L1120] s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [init=1, SSLv3_server_data={15:0}] [L1130] EXPR s->cert VAL [init=1, SSLv3_server_data={15:0}] [L1130] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1136] COND TRUE 1 VAL [init=1, SSLv3_server_data={15:0}] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1163] COND TRUE s->state == 8464 [L1323] s->shutdown = 0 [L1324] ret = __VERIFIER_nondet_int() [L1325] COND TRUE blastFlag == 0 [L1326] blastFlag = 1 VAL [init=1, SSLv3_server_data={15:0}] [L1330] COND FALSE !(ret <= 0) [L1335] got_new_session = 1 [L1336] s->state = 8496 [L1337] s->init_num = 0 VAL [init=1, SSLv3_server_data={15:0}] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [init=1, SSLv3_server_data={15:0}] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [init=1, SSLv3_server_data={15:0}] [L1136] COND TRUE 1 VAL [init=1, SSLv3_server_data={15:0}] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1172] COND TRUE s->state == 8496 [L1341] ret = __VERIFIER_nondet_int() [L1342] COND TRUE blastFlag == 1 [L1343] blastFlag = 2 VAL [init=1, SSLv3_server_data={15:0}] [L1347] COND FALSE !(ret <= 0) [L1352] s->hit VAL [init=1, SSLv3_server_data={15:0}] [L1352] COND FALSE !(s->hit) [L1355] s->state = 8512 VAL [init=1, SSLv3_server_data={15:0}] [L1357] s->init_num = 0 VAL [init=1, SSLv3_server_data={15:0}] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [init=1, SSLv3_server_data={15:0}] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [init=1, SSLv3_server_data={15:0}] [L1136] COND TRUE 1 VAL [init=1, SSLv3_server_data={15:0}] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1178] COND TRUE s->state == 8512 [L1361] EXPR s->s3 [L1361] EXPR (s->s3)->tmp.new_cipher [L1361] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [init=1, SSLv3_server_data={15:0}] [L1361] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1364] ret = __VERIFIER_nondet_int() [L1365] COND TRUE blastFlag == 2 [L1366] blastFlag = 6 VAL [init=1, SSLv3_server_data={15:0}] [L1370] COND FALSE !(ret <= 0) VAL [init=1, SSLv3_server_data={15:0}] [L1376] s->state = 8528 [L1377] s->init_num = 0 VAL [init=1, SSLv3_server_data={15:0}] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [init=1, SSLv3_server_data={15:0}] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [init=1, SSLv3_server_data={15:0}] [L1136] COND TRUE 1 VAL [init=1, SSLv3_server_data={15:0}] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1184] COND TRUE s->state == 8528 [L1381] EXPR s->s3 [L1381] EXPR (s->s3)->tmp.new_cipher [L1381] EXPR ((s->s3)->tmp.new_cipher)->algorithms [L1381] l = ((s->s3)->tmp.new_cipher)->algorithms [L1382] EXPR s->options VAL [init=1, SSLv3_server_data={15:0}] [L1382] COND TRUE s->options & 2097152UL [L1383] EXPR s->s3 [L1383] (s->s3)->tmp.use_rsa_tmp = 1 [L1387] EXPR s->s3 [L1387] (s->s3)->tmp.use_rsa_tmp VAL [init=1, SSLv3_server_data={15:0}] [L1387] COND TRUE (s->s3)->tmp.use_rsa_tmp [L1405] ret = __VERIFIER_nondet_int() [L1406] COND TRUE blastFlag == 6 [L1407] blastFlag = 7 VAL [init=1, SSLv3_server_data={15:0}] [L1411] COND FALSE !(ret <= 0) VAL [init=1, SSLv3_server_data={15:0}] [L1428] s->state = 8544 [L1429] s->init_num = 0 VAL [init=1, SSLv3_server_data={15:0}] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [init=1, SSLv3_server_data={15:0}] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [init=1, SSLv3_server_data={15:0}] [L1136] COND TRUE 1 VAL [init=1, SSLv3_server_data={15:0}] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [init=1, SSLv3_server_data={15:0}] [L1190] COND TRUE s->state == 8544 [L1433] EXPR s->verify_mode VAL [init=1, SSLv3_server_data={15:0}] [L1433] COND TRUE s->verify_mode & 1 [L1434] EXPR s->session [L1434] EXPR (s->session)->peer VAL [init=1, SSLv3_server_data={15:0}] [L1434] COND FALSE !((unsigned long )(s->session)->peer != (unsigned long )((void *)0)) [L1444] EXPR s->s3 [L1444] EXPR (s->s3)->tmp.new_cipher [L1444] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [init=1, SSLv3_server_data={15:0}] [L1444] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1454] EXPR s->s3 [L1454] (s->s3)->tmp.cert_request = 1 [L1455] ret = __VERIFIER_nondet_int() [L1456] COND TRUE blastFlag == 7 VAL [init=1, SSLv3_server_data={15:0}] [L1726] __VERIFIER_error() VAL [init=1, SSLv3_server_data={15:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 148 locations, 1 error locations. Result: UNSAFE, OverallTime: 72.5s, OverallIterations: 5, TraceHistogramMax: 5, AutomataDifference: 67.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, HoareTripleCheckerStatistics: 1487 SDtfs, 1583 SDslu, 2337 SDs, 0 SdLazy, 979 SolverSat, 127 SolverUnsat, 7 SolverUnknown, 0 SolverNotchecked, 66.2s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 642 GetRequests, 627 SyntacticMatches, 2 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1109occurred in iteration=4, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 1442 StatesRemovedByMinimization, 4 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 1.6s SatisfiabilityAnalysisTime, 0.8s InterpolantComputationTime, 451 NumberOfCodeBlocks, 451 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 640 ConstructedInterpolants, 0 QuantifiedInterpolants, 374388 SizeOfPredicates, 8 NumberOfNonLiveVariables, 873 ConjunctsInSsa, 10 ConjunctsInUnsatCore, 8 InterpolantComputations, 8 PerfectInterpolantSequences, 506/506 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...