./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 4e77c044 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3a4526955ec47ece593df350860d30065bd0ba55 ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.2.1-dev-4e77c04 [2021-10-13 01:24:38,864 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-10-13 01:24:38,867 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-10-13 01:24:38,930 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-10-13 01:24:38,931 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-10-13 01:24:38,938 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-10-13 01:24:38,940 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-10-13 01:24:38,945 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-10-13 01:24:38,949 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-10-13 01:24:38,956 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-10-13 01:24:38,957 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-10-13 01:24:38,959 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-10-13 01:24:38,960 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-10-13 01:24:38,964 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-10-13 01:24:38,967 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-10-13 01:24:38,972 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-10-13 01:24:38,974 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-10-13 01:24:38,976 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-10-13 01:24:38,979 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-10-13 01:24:38,992 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-10-13 01:24:38,994 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-10-13 01:24:38,996 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-10-13 01:24:39,001 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-10-13 01:24:39,003 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-10-13 01:24:39,008 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-10-13 01:24:39,008 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-10-13 01:24:39,009 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-10-13 01:24:39,011 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-10-13 01:24:39,012 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-10-13 01:24:39,014 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-10-13 01:24:39,016 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-10-13 01:24:39,017 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-10-13 01:24:39,020 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-10-13 01:24:39,021 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-10-13 01:24:39,023 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-10-13 01:24:39,024 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-10-13 01:24:39,025 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-10-13 01:24:39,025 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-10-13 01:24:39,025 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-10-13 01:24:39,027 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-10-13 01:24:39,027 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-10-13 01:24:39,029 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-10-13 01:24:39,083 INFO L113 SettingsManager]: Loading preferences was successful [2021-10-13 01:24:39,083 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-10-13 01:24:39,084 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-10-13 01:24:39,085 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-10-13 01:24:39,094 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-10-13 01:24:39,095 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-10-13 01:24:39,095 INFO L138 SettingsManager]: * Use SBE=true [2021-10-13 01:24:39,095 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-10-13 01:24:39,096 INFO L138 SettingsManager]: * sizeof long=4 [2021-10-13 01:24:39,096 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-10-13 01:24:39,097 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-10-13 01:24:39,098 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-10-13 01:24:39,098 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-10-13 01:24:39,098 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-10-13 01:24:39,098 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-10-13 01:24:39,099 INFO L138 SettingsManager]: * sizeof long double=12 [2021-10-13 01:24:39,099 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-10-13 01:24:39,099 INFO L138 SettingsManager]: * Use constant arrays=true [2021-10-13 01:24:39,099 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-10-13 01:24:39,100 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-10-13 01:24:39,100 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-10-13 01:24:39,100 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-10-13 01:24:39,101 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-10-13 01:24:39,101 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-10-13 01:24:39,101 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-10-13 01:24:39,102 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-10-13 01:24:39,102 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-10-13 01:24:39,102 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-10-13 01:24:39,102 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-10-13 01:24:39,104 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-10-13 01:24:39,105 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3a4526955ec47ece593df350860d30065bd0ba55 [2021-10-13 01:24:39,547 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-10-13 01:24:39,584 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-10-13 01:24:39,587 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-10-13 01:24:39,590 INFO L271 PluginConnector]: Initializing CDTParser... [2021-10-13 01:24:39,591 INFO L275 PluginConnector]: CDTParser initialized [2021-10-13 01:24:39,592 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c [2021-10-13 01:24:39,679 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/data/461eaac0f/e63d345c99694ca5a240cafc644b97d3/FLAG9b0fdf03d [2021-10-13 01:24:40,419 INFO L306 CDTParser]: Found 1 translation units. [2021-10-13 01:24:40,420 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c [2021-10-13 01:24:40,450 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/data/461eaac0f/e63d345c99694ca5a240cafc644b97d3/FLAG9b0fdf03d [2021-10-13 01:24:40,557 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/data/461eaac0f/e63d345c99694ca5a240cafc644b97d3 [2021-10-13 01:24:40,561 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-10-13 01:24:40,562 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-10-13 01:24:40,565 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-10-13 01:24:40,565 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-10-13 01:24:40,569 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-10-13 01:24:40,570 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.10 01:24:40" (1/1) ... [2021-10-13 01:24:40,571 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7423d19d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 01:24:40, skipping insertion in model container [2021-10-13 01:24:40,573 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.10 01:24:40" (1/1) ... [2021-10-13 01:24:40,581 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-10-13 01:24:40,665 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-10-13 01:24:41,091 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c[12205,12218] [2021-10-13 01:24:41,437 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-13 01:24:41,468 INFO L203 MainTranslator]: Completed pre-run [2021-10-13 01:24:41,525 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c[12205,12218] [2021-10-13 01:24:41,619 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-13 01:24:41,671 INFO L208 MainTranslator]: Completed translation [2021-10-13 01:24:41,671 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 01:24:41 WrapperNode [2021-10-13 01:24:41,671 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-10-13 01:24:41,673 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-10-13 01:24:41,673 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-10-13 01:24:41,674 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-10-13 01:24:41,681 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 01:24:41" (1/1) ... [2021-10-13 01:24:41,730 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 01:24:41" (1/1) ... [2021-10-13 01:24:41,876 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-10-13 01:24:41,877 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-10-13 01:24:41,877 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-10-13 01:24:41,877 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-10-13 01:24:41,887 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 01:24:41" (1/1) ... [2021-10-13 01:24:41,888 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 01:24:41" (1/1) ... [2021-10-13 01:24:41,922 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 01:24:41" (1/1) ... [2021-10-13 01:24:41,923 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 01:24:41" (1/1) ... [2021-10-13 01:24:42,017 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 01:24:41" (1/1) ... [2021-10-13 01:24:42,059 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 01:24:41" (1/1) ... [2021-10-13 01:24:42,069 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 01:24:41" (1/1) ... [2021-10-13 01:24:42,100 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-10-13 01:24:42,103 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-10-13 01:24:42,103 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-10-13 01:24:42,104 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-10-13 01:24:42,105 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 01:24:41" (1/1) ... [2021-10-13 01:24:42,117 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-10-13 01:24:42,130 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/z3 [2021-10-13 01:24:42,146 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-10-13 01:24:42,151 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-10-13 01:24:42,195 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2021-10-13 01:24:42,195 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-10-13 01:24:42,195 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-10-13 01:24:42,196 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-10-13 01:24:42,196 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-10-13 01:24:44,599 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-10-13 01:24:44,599 INFO L299 CfgBuilder]: Removed 405 assume(true) statements. [2021-10-13 01:24:44,604 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.10 01:24:44 BoogieIcfgContainer [2021-10-13 01:24:44,604 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-10-13 01:24:44,607 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-10-13 01:24:44,607 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-10-13 01:24:44,611 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-10-13 01:24:44,612 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.10 01:24:40" (1/3) ... [2021-10-13 01:24:44,613 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5bf5f4c2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.10 01:24:44, skipping insertion in model container [2021-10-13 01:24:44,613 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.10 01:24:41" (2/3) ... [2021-10-13 01:24:44,614 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5bf5f4c2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.10 01:24:44, skipping insertion in model container [2021-10-13 01:24:44,614 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.10 01:24:44" (3/3) ... [2021-10-13 01:24:44,616 INFO L111 eAbstractionObserver]: Analyzing ICFG email_spec0_product36.cil.c [2021-10-13 01:24:44,623 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-10-13 01:24:44,624 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 6 error locations. [2021-10-13 01:24:44,693 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-10-13 01:24:44,701 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-10-13 01:24:44,701 INFO L340 AbstractCegarLoop]: Starting to check reachability of 6 error locations. [2021-10-13 01:24:44,733 INFO L276 IsEmpty]: Start isEmpty. Operand has 477 states, 470 states have (on average 1.695744680851064) internal successors, (797), 476 states have internal predecessors, (797), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:44,745 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-10-13 01:24:44,745 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:24:44,746 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:24:44,747 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:24:44,753 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:24:44,754 INFO L82 PathProgramCache]: Analyzing trace with hash 727264019, now seen corresponding path program 1 times [2021-10-13 01:24:44,765 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:24:44,766 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [53344772] [2021-10-13 01:24:44,766 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:24:44,768 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:24:45,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:24:45,229 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-13 01:24:45,230 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:24:45,230 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [53344772] [2021-10-13 01:24:45,231 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [53344772] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:24:45,232 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:24:45,232 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-10-13 01:24:45,239 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1723841102] [2021-10-13 01:24:45,245 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-10-13 01:24:45,246 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:24:45,261 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-10-13 01:24:45,262 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-10-13 01:24:45,267 INFO L87 Difference]: Start difference. First operand has 477 states, 470 states have (on average 1.695744680851064) internal successors, (797), 476 states have internal predecessors, (797), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 20.5) internal successors, (41), 2 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:45,353 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:24:45,358 INFO L93 Difference]: Finished difference Result 860 states and 1420 transitions. [2021-10-13 01:24:45,358 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-10-13 01:24:45,359 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 20.5) internal successors, (41), 2 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2021-10-13 01:24:45,360 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:24:45,378 INFO L225 Difference]: With dead ends: 860 [2021-10-13 01:24:45,379 INFO L226 Difference]: Without dead ends: 449 [2021-10-13 01:24:45,405 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0ms TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-10-13 01:24:45,432 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 449 states. [2021-10-13 01:24:45,497 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 449 to 449. [2021-10-13 01:24:45,501 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 449 states, 443 states have (on average 1.6794582392776525) internal successors, (744), 448 states have internal predecessors, (744), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:45,512 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 449 states to 449 states and 744 transitions. [2021-10-13 01:24:45,526 INFO L78 Accepts]: Start accepts. Automaton has 449 states and 744 transitions. Word has length 41 [2021-10-13 01:24:45,527 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:24:45,527 INFO L470 AbstractCegarLoop]: Abstraction has 449 states and 744 transitions. [2021-10-13 01:24:45,527 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 20.5) internal successors, (41), 2 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:45,527 INFO L276 IsEmpty]: Start isEmpty. Operand 449 states and 744 transitions. [2021-10-13 01:24:45,530 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2021-10-13 01:24:45,530 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:24:45,531 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:24:45,531 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-10-13 01:24:45,531 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:24:45,532 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:24:45,533 INFO L82 PathProgramCache]: Analyzing trace with hash 1990434142, now seen corresponding path program 1 times [2021-10-13 01:24:45,533 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:24:45,533 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [419938640] [2021-10-13 01:24:45,534 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:24:45,534 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:24:45,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:24:45,742 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-13 01:24:45,742 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:24:45,743 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [419938640] [2021-10-13 01:24:45,743 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [419938640] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:24:45,743 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:24:45,743 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-13 01:24:45,744 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [20389010] [2021-10-13 01:24:45,746 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-13 01:24:45,746 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:24:45,747 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-13 01:24:45,748 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-13 01:24:45,748 INFO L87 Difference]: Start difference. First operand 449 states and 744 transitions. Second operand has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:45,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:24:45,888 INFO L93 Difference]: Finished difference Result 1320 states and 2190 transitions. [2021-10-13 01:24:45,889 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-13 01:24:45,889 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2021-10-13 01:24:45,890 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:24:45,899 INFO L225 Difference]: With dead ends: 1320 [2021-10-13 01:24:45,900 INFO L226 Difference]: Without dead ends: 882 [2021-10-13 01:24:45,904 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 7.2ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-13 01:24:45,907 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 882 states. [2021-10-13 01:24:45,963 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 882 to 448. [2021-10-13 01:24:45,964 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 448 states, 442 states have (on average 1.6742081447963801) internal successors, (740), 447 states have internal predecessors, (740), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:45,967 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 740 transitions. [2021-10-13 01:24:45,967 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 740 transitions. Word has length 42 [2021-10-13 01:24:45,968 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:24:45,968 INFO L470 AbstractCegarLoop]: Abstraction has 448 states and 740 transitions. [2021-10-13 01:24:45,968 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:45,968 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 740 transitions. [2021-10-13 01:24:45,972 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2021-10-13 01:24:45,972 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:24:45,972 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:24:45,973 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-10-13 01:24:45,973 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:24:45,974 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:24:45,974 INFO L82 PathProgramCache]: Analyzing trace with hash -1205522101, now seen corresponding path program 1 times [2021-10-13 01:24:45,974 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:24:45,975 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [872757645] [2021-10-13 01:24:45,975 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:24:45,975 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:24:46,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:24:46,117 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-13 01:24:46,117 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:24:46,118 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [872757645] [2021-10-13 01:24:46,120 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [872757645] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:24:46,124 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:24:46,124 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-13 01:24:46,125 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [62539798] [2021-10-13 01:24:46,127 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-13 01:24:46,127 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:24:46,133 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-13 01:24:46,134 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-13 01:24:46,135 INFO L87 Difference]: Start difference. First operand 448 states and 740 transitions. Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:46,189 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:24:46,198 INFO L93 Difference]: Finished difference Result 882 states and 1460 transitions. [2021-10-13 01:24:46,199 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-13 01:24:46,199 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2021-10-13 01:24:46,200 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:24:46,204 INFO L225 Difference]: With dead ends: 882 [2021-10-13 01:24:46,204 INFO L226 Difference]: Without dead ends: 449 [2021-10-13 01:24:46,205 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.7ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-13 01:24:46,207 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 449 states. [2021-10-13 01:24:46,243 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 449 to 448. [2021-10-13 01:24:46,245 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 448 states, 442 states have (on average 1.667420814479638) internal successors, (737), 447 states have internal predecessors, (737), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:46,250 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 737 transitions. [2021-10-13 01:24:46,250 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 737 transitions. Word has length 43 [2021-10-13 01:24:46,250 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:24:46,251 INFO L470 AbstractCegarLoop]: Abstraction has 448 states and 737 transitions. [2021-10-13 01:24:46,251 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:46,251 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 737 transitions. [2021-10-13 01:24:46,262 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2021-10-13 01:24:46,262 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:24:46,262 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:24:46,263 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-10-13 01:24:46,263 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:24:46,266 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:24:46,266 INFO L82 PathProgramCache]: Analyzing trace with hash 945994064, now seen corresponding path program 1 times [2021-10-13 01:24:46,266 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:24:46,267 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1411570793] [2021-10-13 01:24:46,267 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:24:46,267 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:24:46,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:24:46,426 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-13 01:24:46,426 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:24:46,426 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1411570793] [2021-10-13 01:24:46,427 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1411570793] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:24:46,427 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:24:46,427 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-13 01:24:46,450 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [346645214] [2021-10-13 01:24:46,451 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-13 01:24:46,451 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:24:46,452 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-13 01:24:46,452 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-13 01:24:46,453 INFO L87 Difference]: Start difference. First operand 448 states and 737 transitions. Second operand has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:46,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:24:46,481 INFO L93 Difference]: Finished difference Result 806 states and 1314 transitions. [2021-10-13 01:24:46,482 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-13 01:24:46,482 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2021-10-13 01:24:46,482 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:24:46,487 INFO L225 Difference]: With dead ends: 806 [2021-10-13 01:24:46,487 INFO L226 Difference]: Without dead ends: 451 [2021-10-13 01:24:46,490 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.5ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-13 01:24:46,492 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 451 states. [2021-10-13 01:24:46,508 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 451 to 450. [2021-10-13 01:24:46,510 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 450 states, 444 states have (on average 1.6644144144144144) internal successors, (739), 449 states have internal predecessors, (739), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:46,513 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 450 states to 450 states and 739 transitions. [2021-10-13 01:24:46,513 INFO L78 Accepts]: Start accepts. Automaton has 450 states and 739 transitions. Word has length 45 [2021-10-13 01:24:46,514 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:24:46,514 INFO L470 AbstractCegarLoop]: Abstraction has 450 states and 739 transitions. [2021-10-13 01:24:46,514 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:46,514 INFO L276 IsEmpty]: Start isEmpty. Operand 450 states and 739 transitions. [2021-10-13 01:24:46,515 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2021-10-13 01:24:46,515 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:24:46,516 INFO L512 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:24:46,516 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-10-13 01:24:46,516 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:24:46,518 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:24:46,518 INFO L82 PathProgramCache]: Analyzing trace with hash -1740183871, now seen corresponding path program 1 times [2021-10-13 01:24:46,518 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:24:46,519 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [658723276] [2021-10-13 01:24:46,519 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:24:46,519 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:24:46,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:24:46,644 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-13 01:24:46,644 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:24:46,644 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [658723276] [2021-10-13 01:24:46,645 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [658723276] provided 0 perfect and 1 imperfect interpolant sequences [2021-10-13 01:24:46,647 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [119200288] [2021-10-13 01:24:46,647 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:24:46,647 INFO L170 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-10-13 01:24:46,647 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/z3 [2021-10-13 01:24:46,651 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-10-13 01:24:46,668 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-10-13 01:24:47,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:24:47,012 INFO L263 TraceCheckSpWp]: Trace formula consists of 802 conjuncts, 3 conjunts are in the unsatisfiable core [2021-10-13 01:24:47,021 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-10-13 01:24:47,301 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-13 01:24:47,302 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [119200288] provided 0 perfect and 1 imperfect interpolant sequences [2021-10-13 01:24:47,302 INFO L186 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2021-10-13 01:24:47,302 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4] total 5 [2021-10-13 01:24:47,302 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1210877734] [2021-10-13 01:24:47,303 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-13 01:24:47,303 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:24:47,304 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-13 01:24:47,304 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2021-10-13 01:24:47,304 INFO L87 Difference]: Start difference. First operand 450 states and 739 transitions. Second operand has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:47,447 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:24:47,448 INFO L93 Difference]: Finished difference Result 1237 states and 2030 transitions. [2021-10-13 01:24:47,462 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-10-13 01:24:47,462 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2021-10-13 01:24:47,463 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:24:47,476 INFO L225 Difference]: With dead ends: 1237 [2021-10-13 01:24:47,476 INFO L226 Difference]: Without dead ends: 882 [2021-10-13 01:24:47,477 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 17.2ms TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2021-10-13 01:24:47,479 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 882 states. [2021-10-13 01:24:47,519 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 882 to 526. [2021-10-13 01:24:47,521 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 526 states, 520 states have (on average 1.6961538461538461) internal successors, (882), 525 states have internal predecessors, (882), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:47,524 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 526 states to 526 states and 882 transitions. [2021-10-13 01:24:47,524 INFO L78 Accepts]: Start accepts. Automaton has 526 states and 882 transitions. Word has length 50 [2021-10-13 01:24:47,525 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:24:47,525 INFO L470 AbstractCegarLoop]: Abstraction has 526 states and 882 transitions. [2021-10-13 01:24:47,525 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:47,525 INFO L276 IsEmpty]: Start isEmpty. Operand 526 states and 882 transitions. [2021-10-13 01:24:47,526 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-10-13 01:24:47,527 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:24:47,527 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:24:47,571 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2021-10-13 01:24:47,744 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-10-13 01:24:47,744 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:24:47,745 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:24:47,745 INFO L82 PathProgramCache]: Analyzing trace with hash 298481648, now seen corresponding path program 2 times [2021-10-13 01:24:47,745 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:24:47,746 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1577885333] [2021-10-13 01:24:47,746 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:24:47,746 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:24:47,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:24:47,869 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-13 01:24:47,870 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:24:47,870 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1577885333] [2021-10-13 01:24:47,871 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1577885333] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:24:47,871 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:24:47,873 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-13 01:24:47,874 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1383907295] [2021-10-13 01:24:47,874 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-13 01:24:47,875 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:24:47,876 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-13 01:24:47,877 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-13 01:24:47,880 INFO L87 Difference]: Start difference. First operand 526 states and 882 transitions. Second operand has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:47,932 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:24:47,932 INFO L93 Difference]: Finished difference Result 1389 states and 2316 transitions. [2021-10-13 01:24:47,933 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-13 01:24:47,933 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2021-10-13 01:24:47,934 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:24:47,942 INFO L225 Difference]: With dead ends: 1389 [2021-10-13 01:24:47,942 INFO L226 Difference]: Without dead ends: 958 [2021-10-13 01:24:47,944 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.9ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-13 01:24:47,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 958 states. [2021-10-13 01:24:47,978 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 958 to 603. [2021-10-13 01:24:47,981 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 603 states, 597 states have (on average 1.7169179229480738) internal successors, (1025), 602 states have internal predecessors, (1025), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:47,985 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 603 states to 603 states and 1025 transitions. [2021-10-13 01:24:47,985 INFO L78 Accepts]: Start accepts. Automaton has 603 states and 1025 transitions. Word has length 55 [2021-10-13 01:24:47,986 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:24:47,986 INFO L470 AbstractCegarLoop]: Abstraction has 603 states and 1025 transitions. [2021-10-13 01:24:47,986 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:47,987 INFO L276 IsEmpty]: Start isEmpty. Operand 603 states and 1025 transitions. [2021-10-13 01:24:47,988 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-10-13 01:24:47,988 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:24:47,989 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:24:47,989 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-10-13 01:24:47,989 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:24:48,002 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:24:48,003 INFO L82 PathProgramCache]: Analyzing trace with hash -226823759, now seen corresponding path program 1 times [2021-10-13 01:24:48,003 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:24:48,004 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1154253411] [2021-10-13 01:24:48,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:24:48,004 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:24:48,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:24:48,090 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-10-13 01:24:48,090 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:24:48,090 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1154253411] [2021-10-13 01:24:48,091 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1154253411] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:24:48,091 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:24:48,091 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-13 01:24:48,091 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [658895088] [2021-10-13 01:24:48,092 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-13 01:24:48,093 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:24:48,093 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-13 01:24:48,094 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-13 01:24:48,094 INFO L87 Difference]: Start difference. First operand 603 states and 1025 transitions. Second operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:48,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:24:48,157 INFO L93 Difference]: Finished difference Result 1537 states and 2594 transitions. [2021-10-13 01:24:48,158 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-13 01:24:48,158 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2021-10-13 01:24:48,159 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:24:48,167 INFO L225 Difference]: With dead ends: 1537 [2021-10-13 01:24:48,167 INFO L226 Difference]: Without dead ends: 958 [2021-10-13 01:24:48,169 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.6ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-13 01:24:48,171 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 958 states. [2021-10-13 01:24:48,213 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 958 to 603. [2021-10-13 01:24:48,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 603 states, 597 states have (on average 1.7135678391959799) internal successors, (1023), 602 states have internal predecessors, (1023), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:48,219 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 603 states to 603 states and 1023 transitions. [2021-10-13 01:24:48,219 INFO L78 Accepts]: Start accepts. Automaton has 603 states and 1023 transitions. Word has length 57 [2021-10-13 01:24:48,219 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:24:48,221 INFO L470 AbstractCegarLoop]: Abstraction has 603 states and 1023 transitions. [2021-10-13 01:24:48,221 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:48,221 INFO L276 IsEmpty]: Start isEmpty. Operand 603 states and 1023 transitions. [2021-10-13 01:24:48,223 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-10-13 01:24:48,224 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:24:48,224 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:24:48,224 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-10-13 01:24:48,224 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:24:48,225 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:24:48,225 INFO L82 PathProgramCache]: Analyzing trace with hash -1735157297, now seen corresponding path program 2 times [2021-10-13 01:24:48,225 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:24:48,226 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [226237575] [2021-10-13 01:24:48,226 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:24:48,226 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:24:48,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:24:48,333 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-13 01:24:48,334 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:24:48,334 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [226237575] [2021-10-13 01:24:48,334 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [226237575] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:24:48,334 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:24:48,335 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-13 01:24:48,335 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1179922820] [2021-10-13 01:24:48,336 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-13 01:24:48,336 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:24:48,336 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-13 01:24:48,337 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-13 01:24:48,337 INFO L87 Difference]: Start difference. First operand 603 states and 1023 transitions. Second operand has 3 states, 3 states have (on average 18.0) internal successors, (54), 3 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:48,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:24:48,411 INFO L93 Difference]: Finished difference Result 1674 states and 2848 transitions. [2021-10-13 01:24:48,412 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-13 01:24:48,412 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.0) internal successors, (54), 3 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2021-10-13 01:24:48,413 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:24:48,421 INFO L225 Difference]: With dead ends: 1674 [2021-10-13 01:24:48,422 INFO L226 Difference]: Without dead ends: 1101 [2021-10-13 01:24:48,424 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.6ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-13 01:24:48,426 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1101 states. [2021-10-13 01:24:48,471 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1101 to 746. [2021-10-13 01:24:48,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 746 states, 740 states have (on average 1.7405405405405405) internal successors, (1288), 745 states have internal predecessors, (1288), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:48,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 746 states to 746 states and 1288 transitions. [2021-10-13 01:24:48,479 INFO L78 Accepts]: Start accepts. Automaton has 746 states and 1288 transitions. Word has length 57 [2021-10-13 01:24:48,508 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:24:48,508 INFO L470 AbstractCegarLoop]: Abstraction has 746 states and 1288 transitions. [2021-10-13 01:24:48,508 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.0) internal successors, (54), 3 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:48,508 INFO L276 IsEmpty]: Start isEmpty. Operand 746 states and 1288 transitions. [2021-10-13 01:24:48,510 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-10-13 01:24:48,510 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:24:48,510 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:24:48,511 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-10-13 01:24:48,511 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:24:48,513 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:24:48,514 INFO L82 PathProgramCache]: Analyzing trace with hash 1243815331, now seen corresponding path program 1 times [2021-10-13 01:24:48,514 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:24:48,515 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2013118068] [2021-10-13 01:24:48,515 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:24:48,515 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:24:48,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:24:48,625 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-13 01:24:48,627 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:24:48,629 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2013118068] [2021-10-13 01:24:48,632 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2013118068] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:24:48,633 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:24:48,633 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-13 01:24:48,633 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2027754122] [2021-10-13 01:24:48,635 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-13 01:24:48,635 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:24:48,636 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-13 01:24:48,636 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-13 01:24:48,636 INFO L87 Difference]: Start difference. First operand 746 states and 1288 transitions. Second operand has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:49,121 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:24:49,121 INFO L93 Difference]: Finished difference Result 1894 states and 3253 transitions. [2021-10-13 01:24:49,122 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-13 01:24:49,122 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2021-10-13 01:24:49,122 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:24:49,133 INFO L225 Difference]: With dead ends: 1894 [2021-10-13 01:24:49,133 INFO L226 Difference]: Without dead ends: 1244 [2021-10-13 01:24:49,135 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 36.1ms TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-10-13 01:24:49,138 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1244 states. [2021-10-13 01:24:49,188 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1244 to 746. [2021-10-13 01:24:49,191 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 746 states, 740 states have (on average 1.7364864864864864) internal successors, (1285), 745 states have internal predecessors, (1285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:49,195 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 746 states to 746 states and 1285 transitions. [2021-10-13 01:24:49,196 INFO L78 Accepts]: Start accepts. Automaton has 746 states and 1285 transitions. Word has length 58 [2021-10-13 01:24:49,196 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:24:49,196 INFO L470 AbstractCegarLoop]: Abstraction has 746 states and 1285 transitions. [2021-10-13 01:24:49,197 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:49,197 INFO L276 IsEmpty]: Start isEmpty. Operand 746 states and 1285 transitions. [2021-10-13 01:24:49,198 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-10-13 01:24:49,199 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:24:49,199 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:24:49,199 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-10-13 01:24:49,200 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:24:49,200 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:24:49,200 INFO L82 PathProgramCache]: Analyzing trace with hash -462083701, now seen corresponding path program 1 times [2021-10-13 01:24:49,201 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:24:49,201 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [773582377] [2021-10-13 01:24:49,201 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:24:49,201 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:24:49,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:24:49,350 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-13 01:24:49,350 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:24:49,350 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [773582377] [2021-10-13 01:24:49,351 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [773582377] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:24:49,351 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:24:49,351 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-10-13 01:24:49,351 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1284093996] [2021-10-13 01:24:49,352 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-10-13 01:24:49,352 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:24:49,353 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-10-13 01:24:49,353 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2021-10-13 01:24:49,354 INFO L87 Difference]: Start difference. First operand 746 states and 1285 transitions. Second operand has 10 states, 10 states have (on average 5.4) internal successors, (54), 10 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:51,857 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:24:51,857 INFO L93 Difference]: Finished difference Result 3388 states and 5518 transitions. [2021-10-13 01:24:51,858 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-10-13 01:24:51,858 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 10 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2021-10-13 01:24:51,858 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:24:51,883 INFO L225 Difference]: With dead ends: 3388 [2021-10-13 01:24:51,883 INFO L226 Difference]: Without dead ends: 3094 [2021-10-13 01:24:51,886 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 208 ImplicationChecksByTransitivity, 425.7ms TimeCoverageRelationStatistics Valid=290, Invalid=766, Unknown=0, NotChecked=0, Total=1056 [2021-10-13 01:24:51,892 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3094 states. [2021-10-13 01:24:52,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3094 to 1013. [2021-10-13 01:24:52,013 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1013 states, 1007 states have (on average 1.6971201588877856) internal successors, (1709), 1012 states have internal predecessors, (1709), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:52,019 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1013 states to 1013 states and 1709 transitions. [2021-10-13 01:24:52,019 INFO L78 Accepts]: Start accepts. Automaton has 1013 states and 1709 transitions. Word has length 58 [2021-10-13 01:24:52,019 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:24:52,019 INFO L470 AbstractCegarLoop]: Abstraction has 1013 states and 1709 transitions. [2021-10-13 01:24:52,020 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 10 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:52,020 INFO L276 IsEmpty]: Start isEmpty. Operand 1013 states and 1709 transitions. [2021-10-13 01:24:52,022 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-10-13 01:24:52,022 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:24:52,022 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:24:52,022 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-10-13 01:24:52,023 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:24:52,023 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:24:52,023 INFO L82 PathProgramCache]: Analyzing trace with hash -1190675934, now seen corresponding path program 1 times [2021-10-13 01:24:52,023 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:24:52,024 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [816542408] [2021-10-13 01:24:52,024 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:24:52,024 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:24:52,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:24:52,172 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-13 01:24:52,172 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:24:52,172 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [816542408] [2021-10-13 01:24:52,172 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [816542408] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:24:52,172 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:24:52,173 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-10-13 01:24:52,173 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [34032461] [2021-10-13 01:24:52,173 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-10-13 01:24:52,173 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:24:52,174 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-10-13 01:24:52,174 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2021-10-13 01:24:52,175 INFO L87 Difference]: Start difference. First operand 1013 states and 1709 transitions. Second operand has 10 states, 10 states have (on average 5.5) internal successors, (55), 10 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:54,586 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:24:54,586 INFO L93 Difference]: Finished difference Result 3650 states and 5919 transitions. [2021-10-13 01:24:54,587 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-10-13 01:24:54,587 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.5) internal successors, (55), 10 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2021-10-13 01:24:54,588 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:24:54,613 INFO L225 Difference]: With dead ends: 3650 [2021-10-13 01:24:54,613 INFO L226 Difference]: Without dead ends: 3154 [2021-10-13 01:24:54,616 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 205 ImplicationChecksByTransitivity, 384.5ms TimeCoverageRelationStatistics Valid=290, Invalid=766, Unknown=0, NotChecked=0, Total=1056 [2021-10-13 01:24:54,621 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3154 states. [2021-10-13 01:24:54,748 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3154 to 1124. [2021-10-13 01:24:54,751 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1124 states, 1118 states have (on average 1.684257602862254) internal successors, (1883), 1123 states have internal predecessors, (1883), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:54,759 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1124 states to 1124 states and 1883 transitions. [2021-10-13 01:24:54,760 INFO L78 Accepts]: Start accepts. Automaton has 1124 states and 1883 transitions. Word has length 59 [2021-10-13 01:24:54,761 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:24:54,762 INFO L470 AbstractCegarLoop]: Abstraction has 1124 states and 1883 transitions. [2021-10-13 01:24:54,762 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.5) internal successors, (55), 10 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:54,762 INFO L276 IsEmpty]: Start isEmpty. Operand 1124 states and 1883 transitions. [2021-10-13 01:24:54,764 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-10-13 01:24:54,764 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:24:54,765 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:24:54,765 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-10-13 01:24:54,768 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:24:54,768 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:24:54,769 INFO L82 PathProgramCache]: Analyzing trace with hash -1608706913, now seen corresponding path program 1 times [2021-10-13 01:24:54,769 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:24:54,769 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [309226497] [2021-10-13 01:24:54,769 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:24:54,770 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:24:54,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:24:54,892 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-13 01:24:54,892 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:24:54,893 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [309226497] [2021-10-13 01:24:54,893 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [309226497] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:24:54,893 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:24:54,893 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-10-13 01:24:54,894 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [894666726] [2021-10-13 01:24:54,894 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-10-13 01:24:54,894 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:24:54,895 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-10-13 01:24:54,895 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-10-13 01:24:54,896 INFO L87 Difference]: Start difference. First operand 1124 states and 1883 transitions. Second operand has 7 states, 7 states have (on average 7.857142857142857) internal successors, (55), 7 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:55,353 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:24:55,353 INFO L93 Difference]: Finished difference Result 2109 states and 3448 transitions. [2021-10-13 01:24:55,354 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-10-13 01:24:55,354 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.857142857142857) internal successors, (55), 7 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2021-10-13 01:24:55,355 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:24:55,365 INFO L225 Difference]: With dead ends: 2109 [2021-10-13 01:24:55,366 INFO L226 Difference]: Without dead ends: 1399 [2021-10-13 01:24:55,368 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 90.8ms TimeCoverageRelationStatistics Valid=74, Invalid=136, Unknown=0, NotChecked=0, Total=210 [2021-10-13 01:24:55,371 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1399 states. [2021-10-13 01:24:55,516 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1399 to 1046. [2021-10-13 01:24:55,521 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1046 states, 1040 states have (on average 1.6836538461538462) internal successors, (1751), 1045 states have internal predecessors, (1751), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:55,527 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1046 states to 1046 states and 1751 transitions. [2021-10-13 01:24:55,527 INFO L78 Accepts]: Start accepts. Automaton has 1046 states and 1751 transitions. Word has length 59 [2021-10-13 01:24:55,528 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:24:55,528 INFO L470 AbstractCegarLoop]: Abstraction has 1046 states and 1751 transitions. [2021-10-13 01:24:55,528 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.857142857142857) internal successors, (55), 7 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:55,528 INFO L276 IsEmpty]: Start isEmpty. Operand 1046 states and 1751 transitions. [2021-10-13 01:24:55,537 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-10-13 01:24:55,537 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:24:55,538 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:24:55,538 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-10-13 01:24:55,538 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:24:55,539 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:24:55,539 INFO L82 PathProgramCache]: Analyzing trace with hash 1160689309, now seen corresponding path program 1 times [2021-10-13 01:24:55,539 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:24:55,540 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [763898469] [2021-10-13 01:24:55,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:24:55,540 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:24:55,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:24:55,655 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-13 01:24:55,655 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:24:55,655 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [763898469] [2021-10-13 01:24:55,656 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [763898469] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:24:55,656 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:24:55,656 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-13 01:24:55,656 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1993277574] [2021-10-13 01:24:55,657 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-13 01:24:55,657 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:24:55,658 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-13 01:24:55,658 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-13 01:24:55,659 INFO L87 Difference]: Start difference. First operand 1046 states and 1751 transitions. Second operand has 5 states, 5 states have (on average 11.2) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:56,249 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:24:56,250 INFO L93 Difference]: Finished difference Result 3655 states and 6060 transitions. [2021-10-13 01:24:56,250 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-10-13 01:24:56,250 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.2) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 60 [2021-10-13 01:24:56,251 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:24:56,274 INFO L225 Difference]: With dead ends: 3655 [2021-10-13 01:24:56,274 INFO L226 Difference]: Without dead ends: 3116 [2021-10-13 01:24:56,277 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 37.5ms TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-10-13 01:24:56,282 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3116 states. [2021-10-13 01:24:56,509 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3116 to 2000. [2021-10-13 01:24:56,516 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2000 states, 1994 states have (on average 1.6745235707121364) internal successors, (3339), 1999 states have internal predecessors, (3339), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:56,529 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2000 states to 2000 states and 3339 transitions. [2021-10-13 01:24:56,529 INFO L78 Accepts]: Start accepts. Automaton has 2000 states and 3339 transitions. Word has length 60 [2021-10-13 01:24:56,530 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:24:56,530 INFO L470 AbstractCegarLoop]: Abstraction has 2000 states and 3339 transitions. [2021-10-13 01:24:56,530 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.2) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:56,530 INFO L276 IsEmpty]: Start isEmpty. Operand 2000 states and 3339 transitions. [2021-10-13 01:24:56,533 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-10-13 01:24:56,534 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:24:56,534 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:24:56,534 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-10-13 01:24:56,535 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:24:56,535 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:24:56,535 INFO L82 PathProgramCache]: Analyzing trace with hash 1162684893, now seen corresponding path program 1 times [2021-10-13 01:24:56,535 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:24:56,536 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [206032547] [2021-10-13 01:24:56,536 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:24:56,536 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:24:56,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:24:56,676 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-13 01:24:56,676 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:24:56,677 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [206032547] [2021-10-13 01:24:56,677 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [206032547] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:24:56,677 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:24:56,677 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-10-13 01:24:56,678 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [965382030] [2021-10-13 01:24:56,679 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-10-13 01:24:56,679 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:24:56,680 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-10-13 01:24:56,680 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2021-10-13 01:24:56,681 INFO L87 Difference]: Start difference. First operand 2000 states and 3339 transitions. Second operand has 9 states, 9 states have (on average 6.333333333333333) internal successors, (57), 9 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:59,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:24:59,128 INFO L93 Difference]: Finished difference Result 6190 states and 9970 transitions. [2021-10-13 01:24:59,129 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-10-13 01:24:59,129 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 6.333333333333333) internal successors, (57), 9 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 61 [2021-10-13 01:24:59,129 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:24:59,192 INFO L225 Difference]: With dead ends: 6190 [2021-10-13 01:24:59,193 INFO L226 Difference]: Without dead ends: 5030 [2021-10-13 01:24:59,197 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 186 ImplicationChecksByTransitivity, 350.2ms TimeCoverageRelationStatistics Valid=268, Invalid=662, Unknown=0, NotChecked=0, Total=930 [2021-10-13 01:24:59,206 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5030 states. [2021-10-13 01:24:59,644 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5030 to 2639. [2021-10-13 01:24:59,651 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2639 states, 2633 states have (on average 1.645271553361185) internal successors, (4332), 2638 states have internal predecessors, (4332), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:59,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2639 states to 2639 states and 4332 transitions. [2021-10-13 01:24:59,664 INFO L78 Accepts]: Start accepts. Automaton has 2639 states and 4332 transitions. Word has length 61 [2021-10-13 01:24:59,664 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:24:59,664 INFO L470 AbstractCegarLoop]: Abstraction has 2639 states and 4332 transitions. [2021-10-13 01:24:59,665 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 6.333333333333333) internal successors, (57), 9 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:24:59,665 INFO L276 IsEmpty]: Start isEmpty. Operand 2639 states and 4332 transitions. [2021-10-13 01:24:59,668 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2021-10-13 01:24:59,668 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:24:59,668 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:24:59,669 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2021-10-13 01:24:59,669 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:24:59,670 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:24:59,670 INFO L82 PathProgramCache]: Analyzing trace with hash 1212942047, now seen corresponding path program 1 times [2021-10-13 01:24:59,670 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:24:59,670 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2015515762] [2021-10-13 01:24:59,671 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:24:59,671 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:24:59,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:24:59,780 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-13 01:24:59,781 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:24:59,781 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2015515762] [2021-10-13 01:24:59,781 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2015515762] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:24:59,782 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:24:59,782 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-13 01:24:59,782 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1475474485] [2021-10-13 01:24:59,783 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-10-13 01:24:59,783 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:24:59,784 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-13 01:24:59,784 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-13 01:24:59,784 INFO L87 Difference]: Start difference. First operand 2639 states and 4332 transitions. Second operand has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:00,272 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:25:00,272 INFO L93 Difference]: Finished difference Result 3927 states and 6332 transitions. [2021-10-13 01:25:00,273 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-10-13 01:25:00,273 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 62 [2021-10-13 01:25:00,273 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:25:00,281 INFO L225 Difference]: With dead ends: 3927 [2021-10-13 01:25:00,281 INFO L226 Difference]: Without dead ends: 2623 [2021-10-13 01:25:00,286 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 10.8ms TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-10-13 01:25:00,290 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2623 states. [2021-10-13 01:25:00,527 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2623 to 1982. [2021-10-13 01:25:00,532 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1982 states, 1976 states have (on average 1.6634615384615385) internal successors, (3287), 1981 states have internal predecessors, (3287), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:00,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1982 states to 1982 states and 3287 transitions. [2021-10-13 01:25:00,542 INFO L78 Accepts]: Start accepts. Automaton has 1982 states and 3287 transitions. Word has length 62 [2021-10-13 01:25:00,543 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:25:00,543 INFO L470 AbstractCegarLoop]: Abstraction has 1982 states and 3287 transitions. [2021-10-13 01:25:00,543 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:00,544 INFO L276 IsEmpty]: Start isEmpty. Operand 1982 states and 3287 transitions. [2021-10-13 01:25:00,547 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-10-13 01:25:00,547 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:25:00,547 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:25:00,547 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2021-10-13 01:25:00,548 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:25:00,548 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:25:00,549 INFO L82 PathProgramCache]: Analyzing trace with hash 737410204, now seen corresponding path program 1 times [2021-10-13 01:25:00,549 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:25:00,549 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [801190790] [2021-10-13 01:25:00,549 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:25:00,550 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:25:00,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:25:00,626 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-13 01:25:00,627 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:25:00,627 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [801190790] [2021-10-13 01:25:00,627 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [801190790] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:25:00,627 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:25:00,628 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-13 01:25:00,628 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2135652936] [2021-10-13 01:25:00,628 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-13 01:25:00,629 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:25:00,629 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-13 01:25:00,630 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-13 01:25:00,630 INFO L87 Difference]: Start difference. First operand 1982 states and 3287 transitions. Second operand has 5 states, 5 states have (on average 12.4) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:01,284 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:25:01,285 INFO L93 Difference]: Finished difference Result 5624 states and 9108 transitions. [2021-10-13 01:25:01,285 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-10-13 01:25:01,286 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 66 [2021-10-13 01:25:01,286 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:25:01,300 INFO L225 Difference]: With dead ends: 5624 [2021-10-13 01:25:01,300 INFO L226 Difference]: Without dead ends: 4452 [2021-10-13 01:25:01,304 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 32.9ms TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-10-13 01:25:01,312 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4452 states. [2021-10-13 01:25:01,685 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4452 to 3216. [2021-10-13 01:25:01,695 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3216 states, 3210 states have (on average 1.6763239875389409) internal successors, (5381), 3215 states have internal predecessors, (5381), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:01,707 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3216 states to 3216 states and 5381 transitions. [2021-10-13 01:25:01,708 INFO L78 Accepts]: Start accepts. Automaton has 3216 states and 5381 transitions. Word has length 66 [2021-10-13 01:25:01,708 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:25:01,708 INFO L470 AbstractCegarLoop]: Abstraction has 3216 states and 5381 transitions. [2021-10-13 01:25:01,709 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:01,709 INFO L276 IsEmpty]: Start isEmpty. Operand 3216 states and 5381 transitions. [2021-10-13 01:25:01,714 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-10-13 01:25:01,714 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:25:01,714 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:25:01,715 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2021-10-13 01:25:01,715 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:25:01,715 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:25:01,716 INFO L82 PathProgramCache]: Analyzing trace with hash -2115831750, now seen corresponding path program 1 times [2021-10-13 01:25:01,716 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:25:01,716 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [988342469] [2021-10-13 01:25:01,716 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:25:01,717 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:25:01,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:25:01,775 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-13 01:25:01,775 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:25:01,775 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [988342469] [2021-10-13 01:25:01,776 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [988342469] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:25:01,776 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:25:01,776 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-13 01:25:01,776 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1671364862] [2021-10-13 01:25:01,777 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-13 01:25:01,777 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:25:01,778 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-13 01:25:01,778 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-13 01:25:01,778 INFO L87 Difference]: Start difference. First operand 3216 states and 5381 transitions. Second operand has 3 states, 3 states have (on average 21.0) internal successors, (63), 3 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:02,517 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:25:02,517 INFO L93 Difference]: Finished difference Result 9456 states and 15823 transitions. [2021-10-13 01:25:02,517 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-13 01:25:02,518 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.0) internal successors, (63), 3 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 66 [2021-10-13 01:25:02,518 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:25:02,536 INFO L225 Difference]: With dead ends: 9456 [2021-10-13 01:25:02,536 INFO L226 Difference]: Without dead ends: 6274 [2021-10-13 01:25:02,543 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.3ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-13 01:25:02,552 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6274 states. [2021-10-13 01:25:02,997 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6274 to 4370. [2021-10-13 01:25:03,017 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4370 states, 4364 states have (on average 1.722731439046746) internal successors, (7518), 4369 states have internal predecessors, (7518), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:03,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4370 states to 4370 states and 7518 transitions. [2021-10-13 01:25:03,041 INFO L78 Accepts]: Start accepts. Automaton has 4370 states and 7518 transitions. Word has length 66 [2021-10-13 01:25:03,041 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:25:03,041 INFO L470 AbstractCegarLoop]: Abstraction has 4370 states and 7518 transitions. [2021-10-13 01:25:03,042 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.0) internal successors, (63), 3 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:03,043 INFO L276 IsEmpty]: Start isEmpty. Operand 4370 states and 7518 transitions. [2021-10-13 01:25:03,053 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-10-13 01:25:03,054 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:25:03,054 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:25:03,054 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2021-10-13 01:25:03,054 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:25:03,055 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:25:03,055 INFO L82 PathProgramCache]: Analyzing trace with hash -245114945, now seen corresponding path program 1 times [2021-10-13 01:25:03,055 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:25:03,056 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [440652799] [2021-10-13 01:25:03,056 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:25:03,056 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:25:03,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:25:03,140 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-13 01:25:03,141 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:25:03,141 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [440652799] [2021-10-13 01:25:03,141 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [440652799] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:25:03,141 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:25:03,141 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-13 01:25:03,142 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1213686753] [2021-10-13 01:25:03,144 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-13 01:25:03,144 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:25:03,145 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-13 01:25:03,145 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-13 01:25:03,146 INFO L87 Difference]: Start difference. First operand 4370 states and 7518 transitions. Second operand has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:03,792 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:25:03,792 INFO L93 Difference]: Finished difference Result 6478 states and 10803 transitions. [2021-10-13 01:25:03,793 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-13 01:25:03,793 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 67 [2021-10-13 01:25:03,793 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:25:03,807 INFO L225 Difference]: With dead ends: 6478 [2021-10-13 01:25:03,807 INFO L226 Difference]: Without dead ends: 4606 [2021-10-13 01:25:03,813 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 23.7ms TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-10-13 01:25:03,821 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4606 states. [2021-10-13 01:25:04,222 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4606 to 3908. [2021-10-13 01:25:04,229 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3908 states, 3902 states have (on average 1.7391081496668375) internal successors, (6786), 3907 states have internal predecessors, (6786), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:04,241 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3908 states to 3908 states and 6786 transitions. [2021-10-13 01:25:04,242 INFO L78 Accepts]: Start accepts. Automaton has 3908 states and 6786 transitions. Word has length 67 [2021-10-13 01:25:04,242 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:25:04,242 INFO L470 AbstractCegarLoop]: Abstraction has 3908 states and 6786 transitions. [2021-10-13 01:25:04,242 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:04,243 INFO L276 IsEmpty]: Start isEmpty. Operand 3908 states and 6786 transitions. [2021-10-13 01:25:04,249 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-10-13 01:25:04,249 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:25:04,250 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:25:04,250 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2021-10-13 01:25:04,250 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:25:04,251 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:25:04,251 INFO L82 PathProgramCache]: Analyzing trace with hash 167071917, now seen corresponding path program 1 times [2021-10-13 01:25:04,251 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:25:04,251 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2120779396] [2021-10-13 01:25:04,252 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:25:04,252 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:25:04,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:25:04,316 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-13 01:25:04,317 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:25:04,317 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2120779396] [2021-10-13 01:25:04,317 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2120779396] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:25:04,317 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:25:04,317 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-13 01:25:04,318 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1100402471] [2021-10-13 01:25:04,319 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-13 01:25:04,320 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:25:04,320 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-13 01:25:04,320 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-13 01:25:04,321 INFO L87 Difference]: Start difference. First operand 3908 states and 6786 transitions. Second operand has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:04,979 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:25:04,980 INFO L93 Difference]: Finished difference Result 11510 states and 20000 transitions. [2021-10-13 01:25:04,980 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-13 01:25:04,981 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 67 [2021-10-13 01:25:04,981 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:25:05,003 INFO L225 Difference]: With dead ends: 11510 [2021-10-13 01:25:05,003 INFO L226 Difference]: Without dead ends: 7640 [2021-10-13 01:25:05,010 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.5ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-13 01:25:05,021 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7640 states. [2021-10-13 01:25:05,501 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7640 to 6198. [2021-10-13 01:25:05,509 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6198 states, 6192 states have (on average 1.7782622739018088) internal successors, (11011), 6197 states have internal predecessors, (11011), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:05,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6198 states to 6198 states and 11011 transitions. [2021-10-13 01:25:05,533 INFO L78 Accepts]: Start accepts. Automaton has 6198 states and 11011 transitions. Word has length 67 [2021-10-13 01:25:05,533 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:25:05,534 INFO L470 AbstractCegarLoop]: Abstraction has 6198 states and 11011 transitions. [2021-10-13 01:25:05,534 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:05,534 INFO L276 IsEmpty]: Start isEmpty. Operand 6198 states and 11011 transitions. [2021-10-13 01:25:05,548 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2021-10-13 01:25:05,548 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:25:05,548 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:25:05,549 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2021-10-13 01:25:05,549 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:25:05,550 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:25:05,550 INFO L82 PathProgramCache]: Analyzing trace with hash -268562696, now seen corresponding path program 1 times [2021-10-13 01:25:05,550 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:25:05,550 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2051885094] [2021-10-13 01:25:05,551 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:25:05,551 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:25:05,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:25:05,612 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-13 01:25:05,612 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:25:05,613 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2051885094] [2021-10-13 01:25:05,613 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2051885094] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:25:05,613 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:25:05,613 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-13 01:25:05,614 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [422396306] [2021-10-13 01:25:05,614 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-13 01:25:05,614 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:25:05,615 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-13 01:25:05,615 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-13 01:25:05,616 INFO L87 Difference]: Start difference. First operand 6198 states and 11011 transitions. Second operand has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:06,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:25:06,437 INFO L93 Difference]: Finished difference Result 18342 states and 32605 transitions. [2021-10-13 01:25:06,438 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-13 01:25:06,438 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2021-10-13 01:25:06,438 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:25:06,474 INFO L225 Difference]: With dead ends: 18342 [2021-10-13 01:25:06,475 INFO L226 Difference]: Without dead ends: 12186 [2021-10-13 01:25:06,485 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.3ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-13 01:25:06,499 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12186 states. [2021-10-13 01:25:07,150 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12186 to 10744. [2021-10-13 01:25:07,159 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10744 states, 10738 states have (on average 1.8033153287390575) internal successors, (19364), 10743 states have internal predecessors, (19364), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:07,188 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10744 states to 10744 states and 19364 transitions. [2021-10-13 01:25:07,189 INFO L78 Accepts]: Start accepts. Automaton has 10744 states and 19364 transitions. Word has length 68 [2021-10-13 01:25:07,189 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:25:07,189 INFO L470 AbstractCegarLoop]: Abstraction has 10744 states and 19364 transitions. [2021-10-13 01:25:07,189 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:07,189 INFO L276 IsEmpty]: Start isEmpty. Operand 10744 states and 19364 transitions. [2021-10-13 01:25:07,205 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-10-13 01:25:07,206 INFO L504 BasicCegarLoop]: Found error trace [2021-10-13 01:25:07,206 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-13 01:25:07,206 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2021-10-13 01:25:07,206 INFO L402 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-13 01:25:07,207 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-13 01:25:07,207 INFO L82 PathProgramCache]: Analyzing trace with hash -552890897, now seen corresponding path program 1 times [2021-10-13 01:25:07,207 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-13 01:25:07,207 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1576695439] [2021-10-13 01:25:07,208 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-13 01:25:07,208 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-13 01:25:07,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-13 01:25:07,301 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-13 01:25:07,302 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-13 01:25:07,302 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1576695439] [2021-10-13 01:25:07,303 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1576695439] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-13 01:25:07,303 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-13 01:25:07,303 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-13 01:25:07,303 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [200942302] [2021-10-13 01:25:07,304 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-10-13 01:25:07,304 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-13 01:25:07,305 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-13 01:25:07,305 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-13 01:25:07,305 INFO L87 Difference]: Start difference. First operand 10744 states and 19364 transitions. Second operand has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:07,898 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-13 01:25:07,898 INFO L93 Difference]: Finished difference Result 11460 states and 20513 transitions. [2021-10-13 01:25:07,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-10-13 01:25:07,899 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 69 [2021-10-13 01:25:07,899 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-13 01:25:07,899 INFO L225 Difference]: With dead ends: 11460 [2021-10-13 01:25:07,900 INFO L226 Difference]: Without dead ends: 0 [2021-10-13 01:25:07,914 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 11.0ms TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-10-13 01:25:07,914 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-10-13 01:25:07,914 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-10-13 01:25:07,915 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:07,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-10-13 01:25:07,915 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 69 [2021-10-13 01:25:07,915 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-13 01:25:07,916 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-13 01:25:07,916 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-13 01:25:07,916 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-10-13 01:25:07,916 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-10-13 01:25:07,919 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION [2021-10-13 01:25:07,920 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION [2021-10-13 01:25:07,920 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION [2021-10-13 01:25:07,921 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION [2021-10-13 01:25:07,921 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION [2021-10-13 01:25:07,921 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION [2021-10-13 01:25:07,921 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2021-10-13 01:25:07,924 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-10-13 01:25:07,936 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:08,995 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:09,325 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:09,645 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:10,118 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:10,164 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:10,500 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:10,669 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:10,816 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:11,468 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:11,600 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:11,687 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:12,085 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:12,386 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:12,421 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:12,422 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:12,595 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:12,633 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:13,193 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:13,194 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:13,195 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:13,564 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:13,838 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:14,015 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:14,016 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:14,314 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:14,403 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:14,551 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:14,619 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:14,806 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:14,873 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:15,040 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:15,173 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:15,252 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:15,503 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:15,733 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:15,786 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:15,787 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:15,948 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:15,949 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:15,949 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:16,545 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:16,891 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:16,893 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:16,894 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:17,017 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:17,131 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:17,293 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:17,635 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:17,801 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:17,944 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:18,270 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:18,351 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:18,434 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:18,592 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:18,814 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:18,900 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:19,342 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:19,656 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:19,712 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:19,751 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:19,905 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:19,961 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:20,091 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:20,269 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:20,434 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:20,747 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:20,801 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:20,853 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:20,854 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:20,855 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:20,936 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:21,419 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:21,548 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:21,549 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:21,820 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:22,288 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:22,607 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:22,648 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:22,649 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:22,778 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:22,909 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:23,430 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:23,432 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:23,456 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:24,087 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:24,114 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:24,129 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:24,397 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:24,442 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:24,517 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:24,518 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:24,851 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:24,899 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:24,939 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:25,095 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:25,552 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:25,633 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:25,810 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:25,915 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:25,995 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:26,129 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:26,181 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:26,266 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:26,267 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:26,397 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:26,427 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:26,711 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:26,780 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:26,910 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:27,019 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:27,133 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:27,268 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:27,313 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:27,366 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:27,415 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:27,465 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:27,543 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:28,144 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:28,450 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:28,583 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:28,680 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:28,805 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:28,845 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:29,370 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:29,524 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:29,964 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:30,089 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:30,091 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:30,091 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:30,198 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:30,525 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:30,538 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:30,601 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:30,666 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:30,770 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:30,771 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:30,823 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:31,264 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:31,372 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:31,425 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:31,454 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:31,522 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:31,574 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:31,589 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:31,853 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:31,984 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:32,027 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:32,558 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:32,641 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:25:33,062 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-13 01:26:25,423 INFO L857 garLoopResultBuilder]: For program point L631(lines 631 647) no Hoare annotation was computed. [2021-10-13 01:26:25,424 INFO L857 garLoopResultBuilder]: For program point L631-1(lines 631 647) no Hoare annotation was computed. [2021-10-13 01:26:25,424 INFO L857 garLoopResultBuilder]: For program point L1953(lines 1953 1959) no Hoare annotation was computed. [2021-10-13 01:26:25,424 INFO L857 garLoopResultBuilder]: For program point L1953-1(lines 1953 1959) no Hoare annotation was computed. [2021-10-13 01:26:25,424 INFO L857 garLoopResultBuilder]: For program point L1953-2(lines 1953 1959) no Hoare annotation was computed. [2021-10-13 01:26:25,424 INFO L857 garLoopResultBuilder]: For program point L1953-3(lines 1953 1959) no Hoare annotation was computed. [2021-10-13 01:26:25,425 INFO L857 garLoopResultBuilder]: For program point L1953-4(lines 1953 1959) no Hoare annotation was computed. [2021-10-13 01:26:25,425 INFO L857 garLoopResultBuilder]: For program point L1953-5(lines 1953 1959) no Hoare annotation was computed. [2021-10-13 01:26:25,425 INFO L857 garLoopResultBuilder]: For program point L1953-6(lines 1953 1959) no Hoare annotation was computed. [2021-10-13 01:26:25,425 INFO L857 garLoopResultBuilder]: For program point L1953-7(lines 1953 1959) no Hoare annotation was computed. [2021-10-13 01:26:25,425 INFO L857 garLoopResultBuilder]: For program point L1689(lines 1689 1708) no Hoare annotation was computed. [2021-10-13 01:26:25,426 INFO L857 garLoopResultBuilder]: For program point L1953-8(lines 1953 1959) no Hoare annotation was computed. [2021-10-13 01:26:25,426 INFO L857 garLoopResultBuilder]: For program point L1689-1(lines 1689 1708) no Hoare annotation was computed. [2021-10-13 01:26:25,426 INFO L857 garLoopResultBuilder]: For program point L1953-9(lines 1953 1959) no Hoare annotation was computed. [2021-10-13 01:26:25,426 INFO L857 garLoopResultBuilder]: For program point L1953-10(lines 1953 1959) no Hoare annotation was computed. [2021-10-13 01:26:25,426 INFO L857 garLoopResultBuilder]: For program point L1953-11(lines 1953 1959) no Hoare annotation was computed. [2021-10-13 01:26:25,426 INFO L857 garLoopResultBuilder]: For program point L2351(lines 2351 2491) no Hoare annotation was computed. [2021-10-13 01:26:25,427 INFO L853 garLoopResultBuilder]: At program point L1823(lines 1818 1826) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,427 INFO L860 garLoopResultBuilder]: At program point L2616(lines 2598 2618) the Hoare annotation is: true [2021-10-13 01:26:25,427 INFO L857 garLoopResultBuilder]: For program point L635(lines 635 646) no Hoare annotation was computed. [2021-10-13 01:26:25,427 INFO L857 garLoopResultBuilder]: For program point L635-1(lines 635 646) no Hoare annotation was computed. [2021-10-13 01:26:25,428 INFO L853 garLoopResultBuilder]: At program point L1958(lines 1945 1963) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10) (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-13 01:26:25,428 INFO L853 garLoopResultBuilder]: At program point L1958-1(lines 1945 1963) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,428 INFO L853 garLoopResultBuilder]: At program point L1958-2(lines 1945 1963) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,429 INFO L853 garLoopResultBuilder]: At program point L1958-3(lines 1945 1963) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,429 INFO L853 garLoopResultBuilder]: At program point L1958-4(lines 1945 1963) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= 2 ULTIMATE.start_incoming_~client)) [2021-10-13 01:26:25,429 INFO L853 garLoopResultBuilder]: At program point L1958-5(lines 1945 1963) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,430 INFO L853 garLoopResultBuilder]: At program point L1958-6(lines 1945 1963) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,430 INFO L853 garLoopResultBuilder]: At program point L1958-7(lines 1945 1963) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,430 INFO L853 garLoopResultBuilder]: At program point L1958-8(lines 1945 1963) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-13 01:26:25,430 INFO L860 garLoopResultBuilder]: At program point L1958-9(lines 1945 1963) the Hoare annotation is: true [2021-10-13 01:26:25,431 INFO L853 garLoopResultBuilder]: At program point L1958-10(lines 1945 1963) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-13 01:26:25,431 INFO L860 garLoopResultBuilder]: At program point L1958-11(lines 1945 1963) the Hoare annotation is: true [2021-10-13 01:26:25,431 INFO L857 garLoopResultBuilder]: For program point L2355(lines 2355 2359) no Hoare annotation was computed. [2021-10-13 01:26:25,431 INFO L857 garLoopResultBuilder]: For program point L639(lines 639 645) no Hoare annotation was computed. [2021-10-13 01:26:25,431 INFO L857 garLoopResultBuilder]: For program point L639-1(lines 639 645) no Hoare annotation was computed. [2021-10-13 01:26:25,432 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION(line 478) no Hoare annotation was computed. [2021-10-13 01:26:25,432 INFO L853 garLoopResultBuilder]: At program point L1832(lines 1827 1835) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,432 INFO L853 garLoopResultBuilder]: At program point L2493(lines 2342 2494) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle 3) (= ~bob~0 1) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1))) [2021-10-13 01:26:25,432 INFO L853 garLoopResultBuilder]: At program point L2361(lines 2351 2491) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-13 01:26:25,433 INFO L857 garLoopResultBuilder]: For program point L1040(lines 1040 1056) no Hoare annotation was computed. [2021-10-13 01:26:25,433 INFO L857 garLoopResultBuilder]: For program point L1040-1(lines 1040 1056) no Hoare annotation was computed. [2021-10-13 01:26:25,433 INFO L857 garLoopResultBuilder]: For program point L1040-2(lines 1040 1056) no Hoare annotation was computed. [2021-10-13 01:26:25,433 INFO L857 garLoopResultBuilder]: For program point L1040-3(lines 1040 1056) no Hoare annotation was computed. [2021-10-13 01:26:25,433 INFO L857 garLoopResultBuilder]: For program point L1040-4(lines 1040 1056) no Hoare annotation was computed. [2021-10-13 01:26:25,433 INFO L857 garLoopResultBuilder]: For program point L1040-5(lines 1040 1056) no Hoare annotation was computed. [2021-10-13 01:26:25,434 INFO L853 garLoopResultBuilder]: At program point L644(lines 627 650) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,434 INFO L853 garLoopResultBuilder]: At program point L644-1(lines 627 650) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,434 INFO L857 garLoopResultBuilder]: For program point L1968(lines 1968 1976) no Hoare annotation was computed. [2021-10-13 01:26:25,434 INFO L857 garLoopResultBuilder]: For program point L1968-2(lines 1968 1976) no Hoare annotation was computed. [2021-10-13 01:26:25,434 INFO L857 garLoopResultBuilder]: For program point L1968-4(lines 1968 1976) no Hoare annotation was computed. [2021-10-13 01:26:25,435 INFO L857 garLoopResultBuilder]: For program point L1968-6(lines 1968 1976) no Hoare annotation was computed. [2021-10-13 01:26:25,435 INFO L857 garLoopResultBuilder]: For program point L1968-8(lines 1968 1976) no Hoare annotation was computed. [2021-10-13 01:26:25,435 INFO L857 garLoopResultBuilder]: For program point L1968-10(lines 1968 1976) no Hoare annotation was computed. [2021-10-13 01:26:25,435 INFO L857 garLoopResultBuilder]: For program point L1968-12(lines 1968 1976) no Hoare annotation was computed. [2021-10-13 01:26:25,435 INFO L857 garLoopResultBuilder]: For program point L1044(lines 1044 1055) no Hoare annotation was computed. [2021-10-13 01:26:25,436 INFO L857 garLoopResultBuilder]: For program point L1044-1(lines 1044 1055) no Hoare annotation was computed. [2021-10-13 01:26:25,436 INFO L857 garLoopResultBuilder]: For program point L1044-2(lines 1044 1055) no Hoare annotation was computed. [2021-10-13 01:26:25,436 INFO L857 garLoopResultBuilder]: For program point L1044-3(lines 1044 1055) no Hoare annotation was computed. [2021-10-13 01:26:25,436 INFO L857 garLoopResultBuilder]: For program point L912(lines 912 973) no Hoare annotation was computed. [2021-10-13 01:26:25,436 INFO L857 garLoopResultBuilder]: For program point L1044-4(lines 1044 1055) no Hoare annotation was computed. [2021-10-13 01:26:25,436 INFO L857 garLoopResultBuilder]: For program point L912-1(lines 912 973) no Hoare annotation was computed. [2021-10-13 01:26:25,437 INFO L857 garLoopResultBuilder]: For program point L1044-5(lines 1044 1055) no Hoare annotation was computed. [2021-10-13 01:26:25,437 INFO L857 garLoopResultBuilder]: For program point L912-2(lines 912 973) no Hoare annotation was computed. [2021-10-13 01:26:25,437 INFO L857 garLoopResultBuilder]: For program point L912-3(lines 912 973) no Hoare annotation was computed. [2021-10-13 01:26:25,437 INFO L857 garLoopResultBuilder]: For program point L2366(lines 2366 2373) no Hoare annotation was computed. [2021-10-13 01:26:25,437 INFO L857 garLoopResultBuilder]: For program point L913(lines 913 929) no Hoare annotation was computed. [2021-10-13 01:26:25,437 INFO L857 garLoopResultBuilder]: For program point L913-1(lines 913 929) no Hoare annotation was computed. [2021-10-13 01:26:25,438 INFO L857 garLoopResultBuilder]: For program point L913-2(lines 913 929) no Hoare annotation was computed. [2021-10-13 01:26:25,438 INFO L857 garLoopResultBuilder]: For program point L913-3(lines 913 929) no Hoare annotation was computed. [2021-10-13 01:26:25,438 INFO L857 garLoopResultBuilder]: For program point L1971(lines 1971 1975) no Hoare annotation was computed. [2021-10-13 01:26:25,438 INFO L853 garLoopResultBuilder]: At program point L1971-2(lines 1964 1979) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1)) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,438 INFO L857 garLoopResultBuilder]: For program point L1971-3(lines 1971 1975) no Hoare annotation was computed. [2021-10-13 01:26:25,439 INFO L853 garLoopResultBuilder]: At program point L1971-5(lines 1964 1979) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-10-13 01:26:25,439 INFO L857 garLoopResultBuilder]: For program point L1971-6(lines 1971 1975) no Hoare annotation was computed. [2021-10-13 01:26:25,439 INFO L853 garLoopResultBuilder]: At program point L1971-8(lines 1964 1979) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,439 INFO L857 garLoopResultBuilder]: For program point L1971-9(lines 1971 1975) no Hoare annotation was computed. [2021-10-13 01:26:25,440 INFO L853 garLoopResultBuilder]: At program point L1971-11(lines 1964 1979) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,440 INFO L857 garLoopResultBuilder]: For program point L1971-12(lines 1971 1975) no Hoare annotation was computed. [2021-10-13 01:26:25,440 INFO L853 garLoopResultBuilder]: At program point L1971-14(lines 1964 1979) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,440 INFO L857 garLoopResultBuilder]: For program point L1971-15(lines 1971 1975) no Hoare annotation was computed. [2021-10-13 01:26:25,440 INFO L853 garLoopResultBuilder]: At program point L1971-17(lines 1964 1979) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,441 INFO L857 garLoopResultBuilder]: For program point L1971-18(lines 1971 1975) no Hoare annotation was computed. [2021-10-13 01:26:25,441 INFO L853 garLoopResultBuilder]: At program point L1971-20(lines 1964 1979) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,441 INFO L857 garLoopResultBuilder]: For program point L1048(lines 1048 1054) no Hoare annotation was computed. [2021-10-13 01:26:25,441 INFO L857 garLoopResultBuilder]: For program point L1048-1(lines 1048 1054) no Hoare annotation was computed. [2021-10-13 01:26:25,441 INFO L857 garLoopResultBuilder]: For program point L1048-2(lines 1048 1054) no Hoare annotation was computed. [2021-10-13 01:26:25,441 INFO L857 garLoopResultBuilder]: For program point L1048-3(lines 1048 1054) no Hoare annotation was computed. [2021-10-13 01:26:25,442 INFO L857 garLoopResultBuilder]: For program point L1048-4(lines 1048 1054) no Hoare annotation was computed. [2021-10-13 01:26:25,442 INFO L857 garLoopResultBuilder]: For program point L1048-5(lines 1048 1054) no Hoare annotation was computed. [2021-10-13 01:26:25,442 INFO L857 garLoopResultBuilder]: For program point L917(lines 917 928) no Hoare annotation was computed. [2021-10-13 01:26:25,442 INFO L857 garLoopResultBuilder]: For program point L917-1(lines 917 928) no Hoare annotation was computed. [2021-10-13 01:26:25,442 INFO L857 garLoopResultBuilder]: For program point L917-2(lines 917 928) no Hoare annotation was computed. [2021-10-13 01:26:25,443 INFO L857 garLoopResultBuilder]: For program point L917-3(lines 917 928) no Hoare annotation was computed. [2021-10-13 01:26:25,443 INFO L857 garLoopResultBuilder]: For program point L655(lines 655 667) no Hoare annotation was computed. [2021-10-13 01:26:25,443 INFO L853 garLoopResultBuilder]: At program point L1053(lines 1036 1059) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10) (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-13 01:26:25,443 INFO L853 garLoopResultBuilder]: At program point L1053-1(lines 1036 1059) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,443 INFO L853 garLoopResultBuilder]: At program point L1053-2(lines 1036 1059) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= 2 ULTIMATE.start_incoming_~client)) [2021-10-13 01:26:25,444 INFO L853 garLoopResultBuilder]: At program point L1053-3(lines 1036 1059) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,444 INFO L857 garLoopResultBuilder]: For program point L921(lines 921 927) no Hoare annotation was computed. [2021-10-13 01:26:25,444 INFO L853 garLoopResultBuilder]: At program point L1053-4(lines 1036 1059) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-13 01:26:25,444 INFO L857 garLoopResultBuilder]: For program point L921-1(lines 921 927) no Hoare annotation was computed. [2021-10-13 01:26:25,445 INFO L853 garLoopResultBuilder]: At program point L1053-5(lines 1036 1059) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-13 01:26:25,445 INFO L857 garLoopResultBuilder]: For program point L921-2(lines 921 927) no Hoare annotation was computed. [2021-10-13 01:26:25,445 INFO L857 garLoopResultBuilder]: For program point L921-3(lines 921 927) no Hoare annotation was computed. [2021-10-13 01:26:25,445 INFO L853 garLoopResultBuilder]: At program point L2375(lines 2362 2490) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-13 01:26:25,445 INFO L857 garLoopResultBuilder]: For program point L658(lines 658 666) no Hoare annotation was computed. [2021-10-13 01:26:25,446 INFO L857 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-10-13 01:26:25,446 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 478) no Hoare annotation was computed. [2021-10-13 01:26:25,446 INFO L857 garLoopResultBuilder]: For program point L661(lines 661 665) no Hoare annotation was computed. [2021-10-13 01:26:25,446 INFO L853 garLoopResultBuilder]: At program point L661-2(lines 651 670) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-13 01:26:25,447 INFO L853 garLoopResultBuilder]: At program point L1719(lines 1 2651) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (= 2 ULTIMATE.start_incoming_~client)) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-10-13 01:26:25,447 INFO L853 garLoopResultBuilder]: At program point L1719-1(lines 1 2651) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,447 INFO L853 garLoopResultBuilder]: At program point L1719-2(lines 1 2651) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= 2 ULTIMATE.start_incoming_~client)) [2021-10-13 01:26:25,447 INFO L853 garLoopResultBuilder]: At program point L1719-3(lines 1 2651) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,448 INFO L853 garLoopResultBuilder]: At program point L1719-4(lines 1 2651) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-13 01:26:25,448 INFO L853 garLoopResultBuilder]: At program point L1719-5(lines 1 2651) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-13 01:26:25,448 INFO L857 garLoopResultBuilder]: For program point L2380(lines 2380 2384) no Hoare annotation was computed. [2021-10-13 01:26:25,448 INFO L857 garLoopResultBuilder]: For program point L1986(lines 1986 1997) no Hoare annotation was computed. [2021-10-13 01:26:25,449 INFO L857 garLoopResultBuilder]: For program point L1986-1(lines 1986 1997) no Hoare annotation was computed. [2021-10-13 01:26:25,449 INFO L857 garLoopResultBuilder]: For program point L1986-2(lines 1986 1997) no Hoare annotation was computed. [2021-10-13 01:26:25,449 INFO L857 garLoopResultBuilder]: For program point L1986-3(lines 1986 1997) no Hoare annotation was computed. [2021-10-13 01:26:25,449 INFO L857 garLoopResultBuilder]: For program point L1986-4(lines 1986 1997) no Hoare annotation was computed. [2021-10-13 01:26:25,449 INFO L857 garLoopResultBuilder]: For program point L1986-5(lines 1986 1997) no Hoare annotation was computed. [2021-10-13 01:26:25,449 INFO L857 garLoopResultBuilder]: For program point L1986-6(lines 1986 1997) no Hoare annotation was computed. [2021-10-13 01:26:25,450 INFO L857 garLoopResultBuilder]: For program point L1986-7(lines 1986 1997) no Hoare annotation was computed. [2021-10-13 01:26:25,450 INFO L857 garLoopResultBuilder]: For program point L1986-8(lines 1986 1997) no Hoare annotation was computed. [2021-10-13 01:26:25,450 INFO L857 garLoopResultBuilder]: For program point L1986-9(lines 1986 1997) no Hoare annotation was computed. [2021-10-13 01:26:25,450 INFO L857 garLoopResultBuilder]: For program point L1986-10(lines 1986 1997) no Hoare annotation was computed. [2021-10-13 01:26:25,450 INFO L857 garLoopResultBuilder]: For program point L1986-11(lines 1986 1997) no Hoare annotation was computed. [2021-10-13 01:26:25,450 INFO L857 garLoopResultBuilder]: For program point L1986-12(lines 1986 1997) no Hoare annotation was computed. [2021-10-13 01:26:25,451 INFO L857 garLoopResultBuilder]: For program point L1986-13(lines 1986 1997) no Hoare annotation was computed. [2021-10-13 01:26:25,451 INFO L853 garLoopResultBuilder]: At program point L1855(lines 1851 1857) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,451 INFO L853 garLoopResultBuilder]: At program point L1855-1(lines 1851 1857) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,451 INFO L857 garLoopResultBuilder]: For program point L931(lines 931 972) no Hoare annotation was computed. [2021-10-13 01:26:25,452 INFO L857 garLoopResultBuilder]: For program point L931-1(lines 931 972) no Hoare annotation was computed. [2021-10-13 01:26:25,452 INFO L857 garLoopResultBuilder]: For program point L931-2(lines 931 972) no Hoare annotation was computed. [2021-10-13 01:26:25,452 INFO L857 garLoopResultBuilder]: For program point L931-3(lines 931 972) no Hoare annotation was computed. [2021-10-13 01:26:25,452 INFO L857 garLoopResultBuilder]: For program point L1064(lines 1064 1076) no Hoare annotation was computed. [2021-10-13 01:26:25,452 INFO L857 garLoopResultBuilder]: For program point L932(lines 932 948) no Hoare annotation was computed. [2021-10-13 01:26:25,452 INFO L857 garLoopResultBuilder]: For program point L932-1(lines 932 948) no Hoare annotation was computed. [2021-10-13 01:26:25,453 INFO L857 garLoopResultBuilder]: For program point L932-2(lines 932 948) no Hoare annotation was computed. [2021-10-13 01:26:25,453 INFO L857 garLoopResultBuilder]: For program point L932-3(lines 932 948) no Hoare annotation was computed. [2021-10-13 01:26:25,453 INFO L853 garLoopResultBuilder]: At program point L2386(lines 2376 2489) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-13 01:26:25,453 INFO L857 garLoopResultBuilder]: For program point L1990(lines 1990 1996) no Hoare annotation was computed. [2021-10-13 01:26:25,453 INFO L857 garLoopResultBuilder]: For program point L1990-1(lines 1990 1996) no Hoare annotation was computed. [2021-10-13 01:26:25,454 INFO L857 garLoopResultBuilder]: For program point L1990-2(lines 1990 1996) no Hoare annotation was computed. [2021-10-13 01:26:25,454 INFO L857 garLoopResultBuilder]: For program point L1990-3(lines 1990 1996) no Hoare annotation was computed. [2021-10-13 01:26:25,454 INFO L857 garLoopResultBuilder]: For program point L1990-4(lines 1990 1996) no Hoare annotation was computed. [2021-10-13 01:26:25,454 INFO L857 garLoopResultBuilder]: For program point L1990-5(lines 1990 1996) no Hoare annotation was computed. [2021-10-13 01:26:25,454 INFO L857 garLoopResultBuilder]: For program point L1990-6(lines 1990 1996) no Hoare annotation was computed. [2021-10-13 01:26:25,454 INFO L857 garLoopResultBuilder]: For program point L1990-7(lines 1990 1996) no Hoare annotation was computed. [2021-10-13 01:26:25,455 INFO L857 garLoopResultBuilder]: For program point L1990-8(lines 1990 1996) no Hoare annotation was computed. [2021-10-13 01:26:25,455 INFO L857 garLoopResultBuilder]: For program point L1990-9(lines 1990 1996) no Hoare annotation was computed. [2021-10-13 01:26:25,455 INFO L857 garLoopResultBuilder]: For program point L1990-10(lines 1990 1996) no Hoare annotation was computed. [2021-10-13 01:26:25,455 INFO L857 garLoopResultBuilder]: For program point L1990-11(lines 1990 1996) no Hoare annotation was computed. [2021-10-13 01:26:25,455 INFO L857 garLoopResultBuilder]: For program point L1990-12(lines 1990 1996) no Hoare annotation was computed. [2021-10-13 01:26:25,455 INFO L857 garLoopResultBuilder]: For program point L1990-13(lines 1990 1996) no Hoare annotation was computed. [2021-10-13 01:26:25,456 INFO L857 garLoopResultBuilder]: For program point L1067(lines 1067 1075) no Hoare annotation was computed. [2021-10-13 01:26:25,456 INFO L857 garLoopResultBuilder]: For program point L936(lines 936 947) no Hoare annotation was computed. [2021-10-13 01:26:25,456 INFO L857 garLoopResultBuilder]: For program point L936-1(lines 936 947) no Hoare annotation was computed. [2021-10-13 01:26:25,456 INFO L857 garLoopResultBuilder]: For program point L936-2(lines 936 947) no Hoare annotation was computed. [2021-10-13 01:26:25,456 INFO L857 garLoopResultBuilder]: For program point L936-3(lines 936 947) no Hoare annotation was computed. [2021-10-13 01:26:25,457 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION(line 478) no Hoare annotation was computed. [2021-10-13 01:26:25,457 INFO L853 garLoopResultBuilder]: At program point L1597(lines 1572 1599) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,457 INFO L853 garLoopResultBuilder]: At program point L1597-1(lines 1572 1599) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,457 INFO L853 garLoopResultBuilder]: At program point L1597-2(lines 1572 1599) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,458 INFO L853 garLoopResultBuilder]: At program point L1597-3(lines 1572 1599) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,458 INFO L860 garLoopResultBuilder]: At program point L1597-4(lines 1572 1599) the Hoare annotation is: true [2021-10-13 01:26:25,458 INFO L860 garLoopResultBuilder]: At program point L1597-5(lines 1572 1599) the Hoare annotation is: true [2021-10-13 01:26:25,458 INFO L857 garLoopResultBuilder]: For program point L2391(lines 2391 2395) no Hoare annotation was computed. [2021-10-13 01:26:25,458 INFO L857 garLoopResultBuilder]: For program point L1070(lines 1070 1074) no Hoare annotation was computed. [2021-10-13 01:26:25,459 INFO L853 garLoopResultBuilder]: At program point L1070-2(lines 1 2651) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (not (= ~__ste_email_to0~0 1))) (.cse4 (= ULTIMATE.start_test_~op2~0 0)) (.cse5 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 (= ULTIMATE.start_test_~op1~0 0) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 (= ULTIMATE.start_test_~op1~0 1) .cse3 .cse4 .cse5))) [2021-10-13 01:26:25,459 INFO L853 garLoopResultBuilder]: At program point L1995(lines 1982 2000) the Hoare annotation is: (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,459 INFO L853 garLoopResultBuilder]: At program point L1995-1(lines 1982 2000) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-10-13 01:26:25,459 INFO L853 garLoopResultBuilder]: At program point L1995-2(lines 1982 2000) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,460 INFO L853 garLoopResultBuilder]: At program point L1995-3(lines 1982 2000) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,460 INFO L853 garLoopResultBuilder]: At program point L1995-4(lines 1982 2000) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,460 INFO L853 garLoopResultBuilder]: At program point L1995-5(lines 1982 2000) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,460 INFO L853 garLoopResultBuilder]: At program point L1995-6(lines 1982 2000) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,461 INFO L853 garLoopResultBuilder]: At program point L1995-7(lines 1982 2000) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,461 INFO L853 garLoopResultBuilder]: At program point L1995-8(lines 1982 2000) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,461 INFO L853 garLoopResultBuilder]: At program point L1995-9(lines 1982 2000) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,461 INFO L853 garLoopResultBuilder]: At program point L1995-10(lines 1982 2000) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4))) [2021-10-13 01:26:25,461 INFO L860 garLoopResultBuilder]: At program point L1995-11(lines 1982 2000) the Hoare annotation is: true [2021-10-13 01:26:25,462 INFO L853 garLoopResultBuilder]: At program point L1995-12(lines 1982 2000) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-13 01:26:25,462 INFO L860 garLoopResultBuilder]: At program point L1995-13(lines 1982 2000) the Hoare annotation is: true [2021-10-13 01:26:25,462 INFO L857 garLoopResultBuilder]: For program point L940(lines 940 946) no Hoare annotation was computed. [2021-10-13 01:26:25,462 INFO L857 garLoopResultBuilder]: For program point L940-1(lines 940 946) no Hoare annotation was computed. [2021-10-13 01:26:25,462 INFO L857 garLoopResultBuilder]: For program point L940-2(lines 940 946) no Hoare annotation was computed. [2021-10-13 01:26:25,463 INFO L857 garLoopResultBuilder]: For program point L940-3(lines 940 946) no Hoare annotation was computed. [2021-10-13 01:26:25,463 INFO L853 garLoopResultBuilder]: At program point L2397(lines 2387 2488) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-13 01:26:25,463 INFO L853 garLoopResultBuilder]: At program point L1605(lines 1600 1608) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,463 INFO L853 garLoopResultBuilder]: At program point L1605-1(lines 1600 1608) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,464 INFO L853 garLoopResultBuilder]: At program point L1605-2(lines 1600 1608) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,464 INFO L853 garLoopResultBuilder]: At program point L1605-3(lines 1600 1608) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,464 INFO L853 garLoopResultBuilder]: At program point L1605-4(lines 1600 1608) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,464 INFO L853 garLoopResultBuilder]: At program point L1605-5(lines 1600 1608) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,465 INFO L853 garLoopResultBuilder]: At program point L1605-6(lines 1600 1608) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,465 INFO L853 garLoopResultBuilder]: At program point L1605-7(lines 1600 1608) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,465 INFO L853 garLoopResultBuilder]: At program point L1605-8(lines 1600 1608) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,465 INFO L860 garLoopResultBuilder]: At program point L1605-9(lines 1600 1608) the Hoare annotation is: true [2021-10-13 01:26:25,466 INFO L853 garLoopResultBuilder]: At program point L1605-10(lines 1600 1608) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,466 INFO L860 garLoopResultBuilder]: At program point L1605-11(lines 1600 1608) the Hoare annotation is: true [2021-10-13 01:26:25,466 INFO L857 garLoopResultBuilder]: For program point L1475(lines 1475 1491) no Hoare annotation was computed. [2021-10-13 01:26:25,466 INFO L857 garLoopResultBuilder]: For program point L1475-1(lines 1475 1491) no Hoare annotation was computed. [2021-10-13 01:26:25,466 INFO L857 garLoopResultBuilder]: For program point L1475-2(lines 1475 1491) no Hoare annotation was computed. [2021-10-13 01:26:25,466 INFO L857 garLoopResultBuilder]: For program point L1475-3(lines 1475 1491) no Hoare annotation was computed. [2021-10-13 01:26:25,467 INFO L857 garLoopResultBuilder]: For program point L1475-4(lines 1475 1491) no Hoare annotation was computed. [2021-10-13 01:26:25,467 INFO L857 garLoopResultBuilder]: For program point L1475-5(lines 1475 1491) no Hoare annotation was computed. [2021-10-13 01:26:25,467 INFO L857 garLoopResultBuilder]: For program point L1740(lines 1740 1746) no Hoare annotation was computed. [2021-10-13 01:26:25,467 INFO L853 garLoopResultBuilder]: At program point L1740-1(lines 1732 1749) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,467 INFO L857 garLoopResultBuilder]: For program point L1740-2(lines 1740 1746) no Hoare annotation was computed. [2021-10-13 01:26:25,468 INFO L853 garLoopResultBuilder]: At program point L1740-3(lines 1732 1749) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,468 INFO L857 garLoopResultBuilder]: For program point L1740-4(lines 1740 1746) no Hoare annotation was computed. [2021-10-13 01:26:25,468 INFO L853 garLoopResultBuilder]: At program point L1740-5(lines 1732 1749) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= 2 |ULTIMATE.start_getEmailTo_#res|)) (.cse2 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse3 (= ULTIMATE.start_setClientId_~handle 3)) (.cse4 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse5 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse6 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse7 (= 2 ULTIMATE.start_createEmail_~to)) (.cse8 (= ~bob~0 1)) (.cse9 (= ~rjh~0 2)) (.cse10 (= ULTIMATE.start_outgoing_~size~2 0)) (.cse11 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse12 (= ULTIMATE.start_outgoing_~msg 1)) (.cse13 (= 2 ULTIMATE.start_incoming_~client))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= ULTIMATE.start_setEmailTo_~handle 1) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~__ste_email_to0~0 2) .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13))) [2021-10-13 01:26:25,468 INFO L857 garLoopResultBuilder]: For program point L1740-6(lines 1740 1746) no Hoare annotation was computed. [2021-10-13 01:26:25,468 INFO L853 garLoopResultBuilder]: At program point L1740-7(lines 1732 1749) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,469 INFO L857 garLoopResultBuilder]: For program point L1740-8(lines 1740 1746) no Hoare annotation was computed. [2021-10-13 01:26:25,469 INFO L853 garLoopResultBuilder]: At program point L1740-9(lines 1732 1749) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-13 01:26:25,469 INFO L857 garLoopResultBuilder]: For program point L1740-10(lines 1740 1746) no Hoare annotation was computed. [2021-10-13 01:26:25,469 INFO L853 garLoopResultBuilder]: At program point L1740-11(lines 1732 1749) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-13 01:26:25,470 INFO L857 garLoopResultBuilder]: For program point L2005(lines 2005 2013) no Hoare annotation was computed. [2021-10-13 01:26:25,470 INFO L857 garLoopResultBuilder]: For program point L2005-2(lines 2005 2013) no Hoare annotation was computed. [2021-10-13 01:26:25,470 INFO L857 garLoopResultBuilder]: For program point L2005-4(lines 2005 2013) no Hoare annotation was computed. [2021-10-13 01:26:25,470 INFO L857 garLoopResultBuilder]: For program point L2005-6(lines 2005 2013) no Hoare annotation was computed. [2021-10-13 01:26:25,470 INFO L857 garLoopResultBuilder]: For program point L2005-8(lines 2005 2013) no Hoare annotation was computed. [2021-10-13 01:26:25,470 INFO L857 garLoopResultBuilder]: For program point L2005-10(lines 2005 2013) no Hoare annotation was computed. [2021-10-13 01:26:25,471 INFO L857 garLoopResultBuilder]: For program point L2005-12(lines 2005 2013) no Hoare annotation was computed. [2021-10-13 01:26:25,471 INFO L857 garLoopResultBuilder]: For program point L2005-14(lines 2005 2013) no Hoare annotation was computed. [2021-10-13 01:26:25,471 INFO L857 garLoopResultBuilder]: For program point L2005-16(lines 2005 2013) no Hoare annotation was computed. [2021-10-13 01:26:25,471 INFO L857 garLoopResultBuilder]: For program point L2402(lines 2402 2406) no Hoare annotation was computed. [2021-10-13 01:26:25,471 INFO L857 garLoopResultBuilder]: For program point L2005-18(lines 2005 2013) no Hoare annotation was computed. [2021-10-13 01:26:25,471 INFO L857 garLoopResultBuilder]: For program point L2005-20(lines 2005 2013) no Hoare annotation was computed. [2021-10-13 01:26:25,472 INFO L857 garLoopResultBuilder]: For program point L2005-22(lines 2005 2013) no Hoare annotation was computed. [2021-10-13 01:26:25,472 INFO L857 garLoopResultBuilder]: For program point L2005-24(lines 2005 2013) no Hoare annotation was computed. [2021-10-13 01:26:25,472 INFO L857 garLoopResultBuilder]: For program point L2005-26(lines 2005 2013) no Hoare annotation was computed. [2021-10-13 01:26:25,472 INFO L857 garLoopResultBuilder]: For program point L2005-28(lines 2005 2013) no Hoare annotation was computed. [2021-10-13 01:26:25,472 INFO L857 garLoopResultBuilder]: For program point L2005-30(lines 2005 2013) no Hoare annotation was computed. [2021-10-13 01:26:25,472 INFO L857 garLoopResultBuilder]: For program point L2005-32(lines 2005 2013) no Hoare annotation was computed. [2021-10-13 01:26:25,473 INFO L857 garLoopResultBuilder]: For program point L950(lines 950 971) no Hoare annotation was computed. [2021-10-13 01:26:25,473 INFO L857 garLoopResultBuilder]: For program point L950-1(lines 950 971) no Hoare annotation was computed. [2021-10-13 01:26:25,473 INFO L857 garLoopResultBuilder]: For program point L950-2(lines 950 971) no Hoare annotation was computed. [2021-10-13 01:26:25,473 INFO L857 garLoopResultBuilder]: For program point L950-3(lines 950 971) no Hoare annotation was computed. [2021-10-13 01:26:25,473 INFO L857 garLoopResultBuilder]: For program point L1479(lines 1479 1490) no Hoare annotation was computed. [2021-10-13 01:26:25,474 INFO L857 garLoopResultBuilder]: For program point L1479-1(lines 1479 1490) no Hoare annotation was computed. [2021-10-13 01:26:25,474 INFO L857 garLoopResultBuilder]: For program point L1479-2(lines 1479 1490) no Hoare annotation was computed. [2021-10-13 01:26:25,474 INFO L857 garLoopResultBuilder]: For program point L1479-3(lines 1479 1490) no Hoare annotation was computed. [2021-10-13 01:26:25,474 INFO L857 garLoopResultBuilder]: For program point L1479-4(lines 1479 1490) no Hoare annotation was computed. [2021-10-13 01:26:25,474 INFO L857 garLoopResultBuilder]: For program point L1479-5(lines 1479 1490) no Hoare annotation was computed. [2021-10-13 01:26:25,474 INFO L857 garLoopResultBuilder]: For program point L2008(lines 2008 2012) no Hoare annotation was computed. [2021-10-13 01:26:25,475 INFO L857 garLoopResultBuilder]: For program point L951(lines 951 967) no Hoare annotation was computed. [2021-10-13 01:26:25,475 INFO L853 garLoopResultBuilder]: At program point L2008-2(lines 2001 2016) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,475 INFO L857 garLoopResultBuilder]: For program point L951-1(lines 951 967) no Hoare annotation was computed. [2021-10-13 01:26:25,475 INFO L857 garLoopResultBuilder]: For program point L2008-3(lines 2008 2012) no Hoare annotation was computed. [2021-10-13 01:26:25,475 INFO L857 garLoopResultBuilder]: For program point L951-2(lines 951 967) no Hoare annotation was computed. [2021-10-13 01:26:25,476 INFO L857 garLoopResultBuilder]: For program point L951-3(lines 951 967) no Hoare annotation was computed. [2021-10-13 01:26:25,476 INFO L853 garLoopResultBuilder]: At program point L2008-5(lines 2001 2016) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse1 (= ULTIMATE.start_setClientId_~handle 3)) (.cse2 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse3 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse4 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse5 (= 2 ULTIMATE.start_createEmail_~to)) (.cse6 (= ~bob~0 1)) (.cse7 (= ~rjh~0 2)) (.cse8 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse9 (= ULTIMATE.start_outgoing_~msg 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 .cse3 (= ~__ste_email_to0~0 2) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ULTIMATE.start_setEmailTo_~handle 1) .cse6 .cse7 .cse8 .cse9))) [2021-10-13 01:26:25,476 INFO L857 garLoopResultBuilder]: For program point L2008-6(lines 2008 2012) no Hoare annotation was computed. [2021-10-13 01:26:25,476 INFO L853 garLoopResultBuilder]: At program point L2008-8(lines 2001 2016) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,476 INFO L857 garLoopResultBuilder]: For program point L2008-9(lines 2008 2012) no Hoare annotation was computed. [2021-10-13 01:26:25,477 INFO L853 garLoopResultBuilder]: At program point L2008-11(lines 2001 2016) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,477 INFO L857 garLoopResultBuilder]: For program point L2008-12(lines 2008 2012) no Hoare annotation was computed. [2021-10-13 01:26:25,477 INFO L853 garLoopResultBuilder]: At program point L2008-14(lines 2001 2016) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,477 INFO L857 garLoopResultBuilder]: For program point L2008-15(lines 2008 2012) no Hoare annotation was computed. [2021-10-13 01:26:25,478 INFO L853 garLoopResultBuilder]: At program point L2008-17(lines 2001 2016) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,478 INFO L857 garLoopResultBuilder]: For program point L2008-18(lines 2008 2012) no Hoare annotation was computed. [2021-10-13 01:26:25,478 INFO L853 garLoopResultBuilder]: At program point L2008-20(lines 2001 2016) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,478 INFO L857 garLoopResultBuilder]: For program point L2008-21(lines 2008 2012) no Hoare annotation was computed. [2021-10-13 01:26:25,479 INFO L853 garLoopResultBuilder]: At program point L2008-23(lines 2001 2016) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= 2 |ULTIMATE.start_getEmailTo_#res|)) (.cse2 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse3 (= ULTIMATE.start_setClientId_~handle 3)) (.cse4 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse5 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse6 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse7 (= 2 ULTIMATE.start_createEmail_~to)) (.cse8 (= ~bob~0 1)) (.cse9 (= ~rjh~0 2)) (.cse10 (= ULTIMATE.start_outgoing_~size~2 0)) (.cse11 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse12 (= ULTIMATE.start_outgoing_~msg 1)) (.cse13 (= 2 ULTIMATE.start_incoming_~client))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= ULTIMATE.start_setEmailTo_~handle 1) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~__ste_email_to0~0 2) .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13))) [2021-10-13 01:26:25,479 INFO L857 garLoopResultBuilder]: For program point L2008-24(lines 2008 2012) no Hoare annotation was computed. [2021-10-13 01:26:25,479 INFO L853 garLoopResultBuilder]: At program point L2008-26(lines 2001 2016) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,479 INFO L857 garLoopResultBuilder]: For program point L2008-27(lines 2008 2012) no Hoare annotation was computed. [2021-10-13 01:26:25,479 INFO L853 garLoopResultBuilder]: At program point L2008-29(lines 2001 2016) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,480 INFO L857 garLoopResultBuilder]: For program point L2008-30(lines 2008 2012) no Hoare annotation was computed. [2021-10-13 01:26:25,480 INFO L853 garLoopResultBuilder]: At program point L2008-32(lines 2001 2016) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,480 INFO L857 garLoopResultBuilder]: For program point L2008-33(lines 2008 2012) no Hoare annotation was computed. [2021-10-13 01:26:25,480 INFO L853 garLoopResultBuilder]: At program point L2008-35(lines 2001 2016) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,480 INFO L857 garLoopResultBuilder]: For program point L2008-36(lines 2008 2012) no Hoare annotation was computed. [2021-10-13 01:26:25,481 INFO L853 garLoopResultBuilder]: At program point L2008-38(lines 2001 2016) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,481 INFO L857 garLoopResultBuilder]: For program point L2008-39(lines 2008 2012) no Hoare annotation was computed. [2021-10-13 01:26:25,481 INFO L853 garLoopResultBuilder]: At program point L2008-41(lines 2001 2016) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-13 01:26:25,481 INFO L857 garLoopResultBuilder]: For program point L2008-42(lines 2008 2012) no Hoare annotation was computed. [2021-10-13 01:26:25,481 INFO L853 garLoopResultBuilder]: At program point L2008-44(lines 2001 2016) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,482 INFO L857 garLoopResultBuilder]: For program point L2008-45(lines 2008 2012) no Hoare annotation was computed. [2021-10-13 01:26:25,482 INFO L853 garLoopResultBuilder]: At program point L2008-47(lines 2001 2016) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-13 01:26:25,482 INFO L857 garLoopResultBuilder]: For program point L2008-48(lines 2008 2012) no Hoare annotation was computed. [2021-10-13 01:26:25,482 INFO L853 garLoopResultBuilder]: At program point L2008-50(lines 2001 2016) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,482 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-10-13 01:26:25,483 INFO L857 garLoopResultBuilder]: For program point L1483(lines 1483 1489) no Hoare annotation was computed. [2021-10-13 01:26:25,483 INFO L857 garLoopResultBuilder]: For program point L1483-1(lines 1483 1489) no Hoare annotation was computed. [2021-10-13 01:26:25,483 INFO L853 garLoopResultBuilder]: At program point L2408(lines 2398 2487) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-13 01:26:25,483 INFO L857 garLoopResultBuilder]: For program point L1483-2(lines 1483 1489) no Hoare annotation was computed. [2021-10-13 01:26:25,483 INFO L857 garLoopResultBuilder]: For program point L1483-3(lines 1483 1489) no Hoare annotation was computed. [2021-10-13 01:26:25,484 INFO L857 garLoopResultBuilder]: For program point L1483-4(lines 1483 1489) no Hoare annotation was computed. [2021-10-13 01:26:25,484 INFO L857 garLoopResultBuilder]: For program point L1483-5(lines 1483 1489) no Hoare annotation was computed. [2021-10-13 01:26:25,484 INFO L857 garLoopResultBuilder]: For program point L955(lines 955 966) no Hoare annotation was computed. [2021-10-13 01:26:25,484 INFO L857 garLoopResultBuilder]: For program point L955-1(lines 955 966) no Hoare annotation was computed. [2021-10-13 01:26:25,484 INFO L857 garLoopResultBuilder]: For program point L955-2(lines 955 966) no Hoare annotation was computed. [2021-10-13 01:26:25,484 INFO L857 garLoopResultBuilder]: For program point L955-3(lines 955 966) no Hoare annotation was computed. [2021-10-13 01:26:25,485 INFO L857 garLoopResultBuilder]: For program point L959(lines 959 965) no Hoare annotation was computed. [2021-10-13 01:26:25,485 INFO L857 garLoopResultBuilder]: For program point L959-1(lines 959 965) no Hoare annotation was computed. [2021-10-13 01:26:25,485 INFO L857 garLoopResultBuilder]: For program point L959-2(lines 959 965) no Hoare annotation was computed. [2021-10-13 01:26:25,485 INFO L857 garLoopResultBuilder]: For program point L959-3(lines 959 965) no Hoare annotation was computed. [2021-10-13 01:26:25,485 INFO L853 garLoopResultBuilder]: At program point L1488(lines 1471 1494) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,486 INFO L853 garLoopResultBuilder]: At program point L1488-1(lines 1471 1494) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,486 INFO L853 garLoopResultBuilder]: At program point L1488-2(lines 1471 1494) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_outgoing_~size~2 0)) (.cse10 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse11 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse8 .cse9 .cse10 .cse11 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-13 01:26:25,486 INFO L853 garLoopResultBuilder]: At program point L1488-3(lines 1471 1494) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,486 INFO L857 garLoopResultBuilder]: For program point L2413(lines 2413 2420) no Hoare annotation was computed. [2021-10-13 01:26:25,487 INFO L853 garLoopResultBuilder]: At program point L1488-4(lines 1471 1494) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) .cse2) (and .cse0 (not (= ~rjh~0 1)) .cse1 (not (= ULTIMATE.start_createEmail_~to 1)) .cse2 (= |ULTIMATE.start_getClientForwardReceiver_#res| 0)))) [2021-10-13 01:26:25,487 INFO L853 garLoopResultBuilder]: At program point L1488-5(lines 1471 1494) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (not (= ~rjh~0 1))) (.cse2 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse3 (not (= ULTIMATE.start_createEmail_~to 1))) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= |ULTIMATE.start_getClientForwardReceiver_#res| 0)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= 2 ULTIMATE.start_createEmail_~to) .cse3 (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-13 01:26:25,487 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 478) no Hoare annotation was computed. [2021-10-13 01:26:25,487 INFO L857 garLoopResultBuilder]: For program point L2552(lines 2552 2560) no Hoare annotation was computed. [2021-10-13 01:26:25,487 INFO L857 garLoopResultBuilder]: For program point L1760(lines 1760 1767) no Hoare annotation was computed. [2021-10-13 01:26:25,488 INFO L853 garLoopResultBuilder]: At program point L1760-1(lines 1663 1674) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,488 INFO L857 garLoopResultBuilder]: For program point L1760-2(lines 1760 1767) no Hoare annotation was computed. [2021-10-13 01:26:25,488 INFO L857 garLoopResultBuilder]: For program point L1760-4(lines 1760 1767) no Hoare annotation was computed. [2021-10-13 01:26:25,488 INFO L853 garLoopResultBuilder]: At program point L1760-5(lines 1786 1798) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,489 INFO L857 garLoopResultBuilder]: For program point L1760-6(lines 1760 1767) no Hoare annotation was computed. [2021-10-13 01:26:25,489 INFO L853 garLoopResultBuilder]: At program point L1760-7(lines 1663 1674) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,489 INFO L857 garLoopResultBuilder]: For program point L1760-8(lines 1760 1767) no Hoare annotation was computed. [2021-10-13 01:26:25,489 INFO L857 garLoopResultBuilder]: For program point L1760-10(lines 1760 1767) no Hoare annotation was computed. [2021-10-13 01:26:25,489 INFO L857 garLoopResultBuilder]: For program point L2289(lines 2289 2295) no Hoare annotation was computed. [2021-10-13 01:26:25,489 INFO L857 garLoopResultBuilder]: For program point L2289-2(lines 2289 2295) no Hoare annotation was computed. [2021-10-13 01:26:25,490 INFO L857 garLoopResultBuilder]: For program point L2289-4(lines 2289 2295) no Hoare annotation was computed. [2021-10-13 01:26:25,490 INFO L857 garLoopResultBuilder]: For program point L2289-6(lines 2289 2295) no Hoare annotation was computed. [2021-10-13 01:26:25,490 INFO L857 garLoopResultBuilder]: For program point L2289-8(lines 2289 2295) no Hoare annotation was computed. [2021-10-13 01:26:25,490 INFO L857 garLoopResultBuilder]: For program point L2289-10(lines 2289 2295) no Hoare annotation was computed. [2021-10-13 01:26:25,490 INFO L853 garLoopResultBuilder]: At program point L1629(lines 1618 1632) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,491 INFO L853 garLoopResultBuilder]: At program point L2422(lines 2409 2486) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-13 01:26:25,491 INFO L853 garLoopResultBuilder]: At program point L970(lines 908 976) the Hoare annotation is: (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,491 INFO L853 garLoopResultBuilder]: At program point L970-1(lines 908 976) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,491 INFO L853 garLoopResultBuilder]: At program point L970-2(lines 908 976) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,492 INFO L853 garLoopResultBuilder]: At program point L970-3(lines 908 976) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,492 INFO L857 garLoopResultBuilder]: For program point L1499(lines 1499 1511) no Hoare annotation was computed. [2021-10-13 01:26:25,492 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION(line 478) no Hoare annotation was computed. [2021-10-13 01:26:25,492 INFO L857 garLoopResultBuilder]: For program point L1502(lines 1502 1510) no Hoare annotation was computed. [2021-10-13 01:26:25,492 INFO L857 garLoopResultBuilder]: For program point L2427(lines 2427 2431) no Hoare annotation was computed. [2021-10-13 01:26:25,493 INFO L857 garLoopResultBuilder]: For program point L1505(lines 1505 1509) no Hoare annotation was computed. [2021-10-13 01:26:25,493 INFO L853 garLoopResultBuilder]: At program point L1505-2(lines 1 2651) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-13 01:26:25,493 INFO L857 garLoopResultBuilder]: For program point L847(lines 847 895) no Hoare annotation was computed. [2021-10-13 01:26:25,493 INFO L853 garLoopResultBuilder]: At program point L2433(lines 2423 2485) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-13 01:26:25,494 INFO L857 garLoopResultBuilder]: For program point L848(lines 848 860) no Hoare annotation was computed. [2021-10-13 01:26:25,494 INFO L857 garLoopResultBuilder]: For program point L981(lines 981 1029) no Hoare annotation was computed. [2021-10-13 01:26:25,494 INFO L857 garLoopResultBuilder]: For program point L981-1(lines 981 1029) no Hoare annotation was computed. [2021-10-13 01:26:25,494 INFO L857 garLoopResultBuilder]: For program point L982(lines 982 994) no Hoare annotation was computed. [2021-10-13 01:26:25,494 INFO L857 garLoopResultBuilder]: For program point L982-2(lines 982 994) no Hoare annotation was computed. [2021-10-13 01:26:25,495 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-10-13 01:26:25,495 INFO L857 garLoopResultBuilder]: For program point L851(lines 851 859) no Hoare annotation was computed. [2021-10-13 01:26:25,495 INFO L857 garLoopResultBuilder]: For program point L2438(lines 2438 2445) no Hoare annotation was computed. [2021-10-13 01:26:25,495 INFO L857 garLoopResultBuilder]: For program point L985(lines 985 993) no Hoare annotation was computed. [2021-10-13 01:26:25,495 INFO L857 garLoopResultBuilder]: For program point L985-2(lines 985 993) no Hoare annotation was computed. [2021-10-13 01:26:25,495 INFO L857 garLoopResultBuilder]: For program point L854(lines 854 858) no Hoare annotation was computed. [2021-10-13 01:26:25,496 INFO L857 garLoopResultBuilder]: For program point L1912(lines 1912 1923) no Hoare annotation was computed. [2021-10-13 01:26:25,496 INFO L857 garLoopResultBuilder]: For program point L1912-1(lines 1912 1923) no Hoare annotation was computed. [2021-10-13 01:26:25,496 INFO L857 garLoopResultBuilder]: For program point L1912-2(lines 1912 1923) no Hoare annotation was computed. [2021-10-13 01:26:25,496 INFO L857 garLoopResultBuilder]: For program point L1912-3(lines 1912 1923) no Hoare annotation was computed. [2021-10-13 01:26:25,496 INFO L857 garLoopResultBuilder]: For program point L1912-4(lines 1912 1923) no Hoare annotation was computed. [2021-10-13 01:26:25,496 INFO L857 garLoopResultBuilder]: For program point L1912-5(lines 1912 1923) no Hoare annotation was computed. [2021-10-13 01:26:25,497 INFO L857 garLoopResultBuilder]: For program point L988(lines 988 992) no Hoare annotation was computed. [2021-10-13 01:26:25,497 INFO L857 garLoopResultBuilder]: For program point L988-3(lines 988 992) no Hoare annotation was computed. [2021-10-13 01:26:25,497 INFO L857 garLoopResultBuilder]: For program point L1916(lines 1916 1922) no Hoare annotation was computed. [2021-10-13 01:26:25,497 INFO L857 garLoopResultBuilder]: For program point L1916-1(lines 1916 1922) no Hoare annotation was computed. [2021-10-13 01:26:25,497 INFO L857 garLoopResultBuilder]: For program point L1916-2(lines 1916 1922) no Hoare annotation was computed. [2021-10-13 01:26:25,498 INFO L857 garLoopResultBuilder]: For program point L1916-3(lines 1916 1922) no Hoare annotation was computed. [2021-10-13 01:26:25,498 INFO L857 garLoopResultBuilder]: For program point L1916-4(lines 1916 1922) no Hoare annotation was computed. [2021-10-13 01:26:25,498 INFO L857 garLoopResultBuilder]: For program point L1916-5(lines 1916 1922) no Hoare annotation was computed. [2021-10-13 01:26:25,498 INFO L857 garLoopResultBuilder]: For program point L1522(lines 1522 1538) no Hoare annotation was computed. [2021-10-13 01:26:25,498 INFO L857 garLoopResultBuilder]: For program point L1522-1(lines 1522 1538) no Hoare annotation was computed. [2021-10-13 01:26:25,498 INFO L857 garLoopResultBuilder]: For program point L1522-2(lines 1522 1538) no Hoare annotation was computed. [2021-10-13 01:26:25,499 INFO L857 garLoopResultBuilder]: For program point L1522-3(lines 1522 1538) no Hoare annotation was computed. [2021-10-13 01:26:25,499 INFO L853 garLoopResultBuilder]: At program point L2447(lines 2434 2484) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-13 01:26:25,499 INFO L857 garLoopResultBuilder]: For program point L1522-4(lines 1522 1538) no Hoare annotation was computed. [2021-10-13 01:26:25,499 INFO L857 garLoopResultBuilder]: For program point L1522-5(lines 1522 1538) no Hoare annotation was computed. [2021-10-13 01:26:25,499 INFO L857 garLoopResultBuilder]: For program point L862(lines 862 894) no Hoare annotation was computed. [2021-10-13 01:26:25,500 INFO L857 garLoopResultBuilder]: For program point L863(lines 863 875) no Hoare annotation was computed. [2021-10-13 01:26:25,500 INFO L857 garLoopResultBuilder]: For program point L996(lines 996 1028) no Hoare annotation was computed. [2021-10-13 01:26:25,500 INFO L857 garLoopResultBuilder]: For program point L996-1(lines 996 1028) no Hoare annotation was computed. [2021-10-13 01:26:25,500 INFO L853 garLoopResultBuilder]: At program point L1921(lines 1908 1926) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,500 INFO L853 garLoopResultBuilder]: At program point L1921-1(lines 1908 1926) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,501 INFO L853 garLoopResultBuilder]: At program point L1921-2(lines 1908 1926) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,501 INFO L853 garLoopResultBuilder]: At program point L1921-3(lines 1908 1926) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,501 INFO L860 garLoopResultBuilder]: At program point L1921-4(lines 1908 1926) the Hoare annotation is: true [2021-10-13 01:26:25,501 INFO L860 garLoopResultBuilder]: At program point L1921-5(lines 1908 1926) the Hoare annotation is: true [2021-10-13 01:26:25,502 INFO L857 garLoopResultBuilder]: For program point L997(lines 997 1009) no Hoare annotation was computed. [2021-10-13 01:26:25,502 INFO L857 garLoopResultBuilder]: For program point L997-2(lines 997 1009) no Hoare annotation was computed. [2021-10-13 01:26:25,502 INFO L857 garLoopResultBuilder]: For program point L1526(lines 1526 1537) no Hoare annotation was computed. [2021-10-13 01:26:25,502 INFO L857 garLoopResultBuilder]: For program point L1526-1(lines 1526 1537) no Hoare annotation was computed. [2021-10-13 01:26:25,502 INFO L857 garLoopResultBuilder]: For program point L1526-2(lines 1526 1537) no Hoare annotation was computed. [2021-10-13 01:26:25,502 INFO L857 garLoopResultBuilder]: For program point L1526-3(lines 1526 1537) no Hoare annotation was computed. [2021-10-13 01:26:25,503 INFO L857 garLoopResultBuilder]: For program point L1526-4(lines 1526 1537) no Hoare annotation was computed. [2021-10-13 01:26:25,503 INFO L857 garLoopResultBuilder]: For program point L1526-5(lines 1526 1537) no Hoare annotation was computed. [2021-10-13 01:26:25,503 INFO L857 garLoopResultBuilder]: For program point L866(lines 866 874) no Hoare annotation was computed. [2021-10-13 01:26:25,503 INFO L857 garLoopResultBuilder]: For program point L2452(lines 2452 2456) no Hoare annotation was computed. [2021-10-13 01:26:25,503 INFO L857 garLoopResultBuilder]: For program point L1000(lines 1000 1008) no Hoare annotation was computed. [2021-10-13 01:26:25,503 INFO L857 garLoopResultBuilder]: For program point L1000-2(lines 1000 1008) no Hoare annotation was computed. [2021-10-13 01:26:25,504 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 478) no Hoare annotation was computed. [2021-10-13 01:26:25,504 INFO L857 garLoopResultBuilder]: For program point L869(lines 869 873) no Hoare annotation was computed. [2021-10-13 01:26:25,504 INFO L857 garLoopResultBuilder]: For program point L1530(lines 1530 1536) no Hoare annotation was computed. [2021-10-13 01:26:25,504 INFO L857 garLoopResultBuilder]: For program point L1530-1(lines 1530 1536) no Hoare annotation was computed. [2021-10-13 01:26:25,504 INFO L857 garLoopResultBuilder]: For program point L1530-2(lines 1530 1536) no Hoare annotation was computed. [2021-10-13 01:26:25,505 INFO L857 garLoopResultBuilder]: For program point L1530-3(lines 1530 1536) no Hoare annotation was computed. [2021-10-13 01:26:25,505 INFO L857 garLoopResultBuilder]: For program point L1530-4(lines 1530 1536) no Hoare annotation was computed. [2021-10-13 01:26:25,505 INFO L857 garLoopResultBuilder]: For program point L1530-5(lines 1530 1536) no Hoare annotation was computed. [2021-10-13 01:26:25,505 INFO L853 garLoopResultBuilder]: At program point L77(lines 1 2651) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (not (= ~rjh~0 1)) (= ~__ste_client_forwardReceiver1~0 0) (not (= ~__ste_email_to0~0 1))) [2021-10-13 01:26:25,505 INFO L857 garLoopResultBuilder]: For program point L1003(lines 1003 1007) no Hoare annotation was computed. [2021-10-13 01:26:25,506 INFO L857 garLoopResultBuilder]: For program point L1003-3(lines 1003 1007) no Hoare annotation was computed. [2021-10-13 01:26:25,506 INFO L853 garLoopResultBuilder]: At program point L2458(lines 2448 2483) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-13 01:26:25,506 INFO L853 garLoopResultBuilder]: At program point L1535(lines 1518 1541) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-10-13 01:26:25,506 INFO L857 garLoopResultBuilder]: For program point L478(line 478) no Hoare annotation was computed. [2021-10-13 01:26:25,507 INFO L853 garLoopResultBuilder]: At program point L1535-1(lines 1518 1541) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,507 INFO L857 garLoopResultBuilder]: For program point L478-1(line 478) no Hoare annotation was computed. [2021-10-13 01:26:25,507 INFO L853 garLoopResultBuilder]: At program point L1535-2(lines 1518 1541) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,507 INFO L857 garLoopResultBuilder]: For program point L478-2(line 478) no Hoare annotation was computed. [2021-10-13 01:26:25,507 INFO L853 garLoopResultBuilder]: At program point L1535-3(lines 1518 1541) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,508 INFO L857 garLoopResultBuilder]: For program point L478-3(line 478) no Hoare annotation was computed. [2021-10-13 01:26:25,508 INFO L853 garLoopResultBuilder]: At program point L1535-4(lines 1518 1541) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,508 INFO L857 garLoopResultBuilder]: For program point L478-4(line 478) no Hoare annotation was computed. [2021-10-13 01:26:25,508 INFO L853 garLoopResultBuilder]: At program point L1535-5(lines 1518 1541) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-13 01:26:25,508 INFO L857 garLoopResultBuilder]: For program point L478-5(line 478) no Hoare annotation was computed. [2021-10-13 01:26:25,509 INFO L853 garLoopResultBuilder]: At program point L479(lines 2281 2298) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,509 INFO L853 garLoopResultBuilder]: At program point L479-1(lines 2281 2298) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,509 INFO L853 garLoopResultBuilder]: At program point L479-2(lines 2281 2298) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,509 INFO L853 garLoopResultBuilder]: At program point L479-3(lines 2281 2298) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-13 01:26:25,510 INFO L860 garLoopResultBuilder]: At program point L479-4(lines 2281 2298) the Hoare annotation is: true [2021-10-13 01:26:25,510 INFO L860 garLoopResultBuilder]: At program point L479-5(lines 2281 2298) the Hoare annotation is: true [2021-10-13 01:26:25,510 INFO L857 garLoopResultBuilder]: For program point L877(lines 877 893) no Hoare annotation was computed. [2021-10-13 01:26:25,510 INFO L853 garLoopResultBuilder]: At program point L877-1(lines 843 898) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-13 01:26:25,511 INFO L853 garLoopResultBuilder]: At program point L2595(lines 2575 2597) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle 3) (= ~__ste_ClientAddressBook_size0~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1))) [2021-10-13 01:26:25,511 INFO L857 garLoopResultBuilder]: For program point L2463(lines 2463 2467) no Hoare annotation was computed. [2021-10-13 01:26:25,511 INFO L853 garLoopResultBuilder]: At program point L85(lines 80 88) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (not (= ~rjh~0 1)) (= ~__ste_client_forwardReceiver1~0 0) (not (= ~__ste_email_to0~0 1))) [2021-10-13 01:26:25,511 INFO L857 garLoopResultBuilder]: For program point L878(lines 878 890) no Hoare annotation was computed. [2021-10-13 01:26:25,511 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-10-13 01:26:25,511 INFO L857 garLoopResultBuilder]: For program point L1011(lines 1011 1027) no Hoare annotation was computed. [2021-10-13 01:26:25,512 INFO L853 garLoopResultBuilder]: At program point L1011-1(lines 977 1032) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-13 01:26:25,512 INFO L857 garLoopResultBuilder]: For program point L1011-2(lines 1011 1027) no Hoare annotation was computed. [2021-10-13 01:26:25,512 INFO L853 garLoopResultBuilder]: At program point L1011-3(lines 1 2651) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-13 01:26:25,512 INFO L857 garLoopResultBuilder]: For program point L1012(lines 1012 1024) no Hoare annotation was computed. [2021-10-13 01:26:25,513 INFO L857 garLoopResultBuilder]: For program point L1012-2(lines 1012 1024) no Hoare annotation was computed. [2021-10-13 01:26:25,513 INFO L857 garLoopResultBuilder]: For program point L881(lines 881 889) no Hoare annotation was computed. [2021-10-13 01:26:25,513 INFO L857 garLoopResultBuilder]: For program point L1015(lines 1015 1023) no Hoare annotation was computed. [2021-10-13 01:26:25,513 INFO L857 garLoopResultBuilder]: For program point L1015-2(lines 1015 1023) no Hoare annotation was computed. [2021-10-13 01:26:25,513 INFO L853 garLoopResultBuilder]: At program point L2469(lines 2459 2482) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-13 01:26:25,514 INFO L857 garLoopResultBuilder]: For program point L884(lines 884 888) no Hoare annotation was computed. [2021-10-13 01:26:25,514 INFO L857 garLoopResultBuilder]: For program point L1546(lines 1546 1558) no Hoare annotation was computed. [2021-10-13 01:26:25,514 INFO L857 garLoopResultBuilder]: For program point L1546-2(lines 1546 1558) no Hoare annotation was computed. [2021-10-13 01:26:25,514 INFO L857 garLoopResultBuilder]: For program point L1546-4(lines 1546 1558) no Hoare annotation was computed. [2021-10-13 01:26:25,514 INFO L857 garLoopResultBuilder]: For program point L1018(lines 1018 1022) no Hoare annotation was computed. [2021-10-13 01:26:25,514 INFO L857 garLoopResultBuilder]: For program point L1018-3(lines 1018 1022) no Hoare annotation was computed. [2021-10-13 01:26:25,515 INFO L857 garLoopResultBuilder]: For program point L1549(lines 1549 1557) no Hoare annotation was computed. [2021-10-13 01:26:25,515 INFO L857 garLoopResultBuilder]: For program point L1549-2(lines 1549 1557) no Hoare annotation was computed. [2021-10-13 01:26:25,515 INFO L857 garLoopResultBuilder]: For program point L2474(lines 2474 2478) no Hoare annotation was computed. [2021-10-13 01:26:25,515 INFO L857 garLoopResultBuilder]: For program point L1549-4(lines 1549 1557) no Hoare annotation was computed. [2021-10-13 01:26:25,515 INFO L853 garLoopResultBuilder]: At program point L2474-1(lines 2343 2492) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-13 01:26:25,516 INFO L853 garLoopResultBuilder]: At program point L1814(lines 1809 1817) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-13 01:26:25,516 INFO L857 garLoopResultBuilder]: For program point L2608(lines 2608 2615) no Hoare annotation was computed. [2021-10-13 01:26:25,516 INFO L860 garLoopResultBuilder]: At program point L2608-1(lines 2608 2615) the Hoare annotation is: true [2021-10-13 01:26:25,516 INFO L857 garLoopResultBuilder]: For program point L2344(lines 2343 2492) no Hoare annotation was computed. [2021-10-13 01:26:25,516 INFO L857 garLoopResultBuilder]: For program point L1552(lines 1552 1556) no Hoare annotation was computed. [2021-10-13 01:26:25,517 INFO L853 garLoopResultBuilder]: At program point L1552-2(lines 1 2651) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (not (= ~rjh~0 1)) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (not (= ~__ste_email_to0~0 1))) [2021-10-13 01:26:25,517 INFO L857 garLoopResultBuilder]: For program point L1552-3(lines 1552 1556) no Hoare annotation was computed. [2021-10-13 01:26:25,517 INFO L853 garLoopResultBuilder]: At program point L1552-5(lines 1 2651) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1)) (= ULTIMATE.start_setClientId_~handle 2)) [2021-10-13 01:26:25,517 INFO L857 garLoopResultBuilder]: For program point L1552-6(lines 1552 1556) no Hoare annotation was computed. [2021-10-13 01:26:25,517 INFO L853 garLoopResultBuilder]: At program point L1552-8(lines 1 2651) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle 3) (= ~__ste_ClientAddressBook_size0~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1))) [2021-10-13 01:26:25,518 INFO L857 garLoopResultBuilder]: For program point L2345(lines 2345 2349) no Hoare annotation was computed. [2021-10-13 01:26:25,518 INFO L857 garLoopResultBuilder]: For program point L1949(lines 1949 1960) no Hoare annotation was computed. [2021-10-13 01:26:25,518 INFO L857 garLoopResultBuilder]: For program point L1949-1(lines 1949 1960) no Hoare annotation was computed. [2021-10-13 01:26:25,518 INFO L857 garLoopResultBuilder]: For program point L1949-2(lines 1949 1960) no Hoare annotation was computed. [2021-10-13 01:26:25,518 INFO L857 garLoopResultBuilder]: For program point L1949-3(lines 1949 1960) no Hoare annotation was computed. [2021-10-13 01:26:25,519 INFO L857 garLoopResultBuilder]: For program point L1949-4(lines 1949 1960) no Hoare annotation was computed. [2021-10-13 01:26:25,519 INFO L857 garLoopResultBuilder]: For program point L1949-5(lines 1949 1960) no Hoare annotation was computed. [2021-10-13 01:26:25,519 INFO L857 garLoopResultBuilder]: For program point L1949-6(lines 1949 1960) no Hoare annotation was computed. [2021-10-13 01:26:25,519 INFO L857 garLoopResultBuilder]: For program point L1949-7(lines 1949 1960) no Hoare annotation was computed. [2021-10-13 01:26:25,519 INFO L857 garLoopResultBuilder]: For program point L1949-8(lines 1949 1960) no Hoare annotation was computed. [2021-10-13 01:26:25,519 INFO L857 garLoopResultBuilder]: For program point L1949-9(lines 1949 1960) no Hoare annotation was computed. [2021-10-13 01:26:25,520 INFO L857 garLoopResultBuilder]: For program point L1949-10(lines 1949 1960) no Hoare annotation was computed. [2021-10-13 01:26:25,520 INFO L857 garLoopResultBuilder]: For program point L1949-11(lines 1949 1960) no Hoare annotation was computed. [2021-10-13 01:26:25,526 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-10-13 01:26:25,647 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.10 01:26:25 BoogieIcfgContainer [2021-10-13 01:26:25,647 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-10-13 01:26:25,647 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-10-13 01:26:25,649 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-10-13 01:26:25,649 INFO L275 PluginConnector]: Witness Printer initialized [2021-10-13 01:26:25,650 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.10 01:24:44" (3/4) ... [2021-10-13 01:26:25,656 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-10-13 01:26:25,721 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 208 nodes and edges [2021-10-13 01:26:25,729 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 114 nodes and edges [2021-10-13 01:26:25,736 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-10-13 01:26:25,742 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2021-10-13 01:26:25,749 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-10-13 01:26:25,755 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-10-13 01:26:25,801 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,803 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,804 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,804 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-13 01:26:25,804 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,805 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-13 01:26:25,805 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,806 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-13 01:26:25,807 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || ((((((((((sender == 1 && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-13 01:26:25,807 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-13 01:26:25,807 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client [2021-10-13 01:26:25,808 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-13 01:26:25,808 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client [2021-10-13 01:26:25,808 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) [2021-10-13 01:26:25,809 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) || (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && 2 == handle) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) [2021-10-13 01:26:25,809 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-13 01:26:25,810 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,810 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client [2021-10-13 01:26:25,810 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-13 01:26:25,811 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,811 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) [2021-10-13 01:26:25,811 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-13 01:26:25,812 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,812 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) [2021-10-13 01:26:25,812 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-13 01:26:25,813 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,813 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,813 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,814 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,814 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,814 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) [2021-10-13 01:26:25,815 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,815 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,815 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,815 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,816 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,816 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,817 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,817 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,817 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,818 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-10-13 01:26:25,818 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,818 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,818 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,819 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-10-13 01:26:25,819 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,819 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,820 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,820 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-13 01:26:25,821 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,821 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,821 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,821 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,822 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,822 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,822 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,822 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) || ((((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) [2021-10-13 01:26:25,823 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,823 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,823 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-13 01:26:25,824 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,824 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,824 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-13 01:26:25,825 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,825 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) || (((((((((sender == 1 && handle == 3) && !(rjh == 1)) && \result == 1) && 2 == to) && !(to == 1)) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-13 01:26:25,825 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,825 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,826 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,826 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-13 01:26:25,826 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,827 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-10-13 01:26:25,827 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,827 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,828 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-13 01:26:25,828 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,828 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,829 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,829 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-10-13 01:26:25,829 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-13 01:26:25,829 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,829 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,830 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,830 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,830 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,831 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,831 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,831 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,832 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,832 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,832 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,833 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,833 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,833 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,834 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,834 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,834 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,835 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) [2021-10-13 01:26:25,835 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,835 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,835 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,836 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-13 01:26:25,836 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,836 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-13 01:26:25,836 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-13 01:26:25,837 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,837 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) [2021-10-13 01:26:25,837 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-13 01:26:25,837 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-13 01:26:25,838 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:25,838 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-13 01:26:25,838 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-13 01:26:26,056 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/witness.graphml [2021-10-13 01:26:26,057 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-10-13 01:26:26,059 INFO L168 Benchmark]: Toolchain (without parser) took 105494.94 ms. Allocated memory was 102.8 MB in the beginning and 1.4 GB in the end (delta: 1.3 GB). Free memory was 60.8 MB in the beginning and 1.1 GB in the end (delta: -1.1 GB). Peak memory consumption was 260.5 MB. Max. memory is 16.1 GB. [2021-10-13 01:26:26,059 INFO L168 Benchmark]: CDTParser took 0.31 ms. Allocated memory is still 102.8 MB. Free memory is still 79.3 MB. There was no memory consumed. Max. memory is 16.1 GB. [2021-10-13 01:26:26,060 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1107.16 ms. Allocated memory is still 102.8 MB. Free memory was 60.6 MB in the beginning and 54.0 MB in the end (delta: 6.5 MB). Peak memory consumption was 12.9 MB. Max. memory is 16.1 GB. [2021-10-13 01:26:26,060 INFO L168 Benchmark]: Boogie Procedure Inliner took 203.21 ms. Allocated memory is still 102.8 MB. Free memory was 54.0 MB in the beginning and 43.2 MB in the end (delta: 10.9 MB). Peak memory consumption was 10.5 MB. Max. memory is 16.1 GB. [2021-10-13 01:26:26,061 INFO L168 Benchmark]: Boogie Preprocessor took 224.59 ms. Allocated memory was 102.8 MB in the beginning and 142.6 MB in the end (delta: 39.8 MB). Free memory was 43.2 MB in the beginning and 109.3 MB in the end (delta: -66.1 MB). Peak memory consumption was 14.3 MB. Max. memory is 16.1 GB. [2021-10-13 01:26:26,061 INFO L168 Benchmark]: RCFGBuilder took 2501.55 ms. Allocated memory is still 142.6 MB. Free memory was 109.3 MB in the beginning and 86.7 MB in the end (delta: 22.6 MB). Peak memory consumption was 56.0 MB. Max. memory is 16.1 GB. [2021-10-13 01:26:26,062 INFO L168 Benchmark]: TraceAbstraction took 101040.31 ms. Allocated memory was 142.6 MB in the beginning and 1.4 GB in the end (delta: 1.3 GB). Free memory was 86.7 MB in the beginning and 1.2 GB in the end (delta: -1.1 GB). Peak memory consumption was 890.2 MB. Max. memory is 16.1 GB. [2021-10-13 01:26:26,062 INFO L168 Benchmark]: Witness Printer took 409.28 ms. Allocated memory is still 1.4 GB. Free memory was 1.2 GB in the beginning and 1.1 GB in the end (delta: 47.2 MB). Peak memory consumption was 48.2 MB. Max. memory is 16.1 GB. [2021-10-13 01:26:26,065 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31 ms. Allocated memory is still 102.8 MB. Free memory is still 79.3 MB. There was no memory consumed. Max. memory is 16.1 GB. * CACSL2BoogieTranslator took 1107.16 ms. Allocated memory is still 102.8 MB. Free memory was 60.6 MB in the beginning and 54.0 MB in the end (delta: 6.5 MB). Peak memory consumption was 12.9 MB. Max. memory is 16.1 GB. * Boogie Procedure Inliner took 203.21 ms. Allocated memory is still 102.8 MB. Free memory was 54.0 MB in the beginning and 43.2 MB in the end (delta: 10.9 MB). Peak memory consumption was 10.5 MB. Max. memory is 16.1 GB. * Boogie Preprocessor took 224.59 ms. Allocated memory was 102.8 MB in the beginning and 142.6 MB in the end (delta: 39.8 MB). Free memory was 43.2 MB in the beginning and 109.3 MB in the end (delta: -66.1 MB). Peak memory consumption was 14.3 MB. Max. memory is 16.1 GB. * RCFGBuilder took 2501.55 ms. Allocated memory is still 142.6 MB. Free memory was 109.3 MB in the beginning and 86.7 MB in the end (delta: 22.6 MB). Peak memory consumption was 56.0 MB. Max. memory is 16.1 GB. * TraceAbstraction took 101040.31 ms. Allocated memory was 142.6 MB in the beginning and 1.4 GB in the end (delta: 1.3 GB). Free memory was 86.7 MB in the beginning and 1.2 GB in the end (delta: -1.1 GB). Peak memory consumption was 890.2 MB. Max. memory is 16.1 GB. * Witness Printer took 409.28 ms. Allocated memory is still 1.4 GB. Free memory was 1.2 GB in the beginning and 1.1 GB in the end (delta: 47.2 MB). Peak memory consumption was 48.2 MB. Max. memory is 16.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0ms ErrorAutomatonConstructionTimeTotal, 0.0ms FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0ms ErrorAutomatonConstructionTimeAvg, 0.0ms ErrorAutomatonDifferenceTimeAvg, 0.0ms ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 478]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 478]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 478]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 478]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 478]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 478]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 477 locations, 6 error locations. Started 1 CEGAR loops. OverallTime: 100835.2ms, OverallIterations: 21, TraceHistogramMax: 3, EmptinessCheckTime: 122.5ms, AutomataDifference: 14705.4ms, DeadEndRemovalTime: 0.0ms, HoareAnnotationTime: 77501.2ms, InitialAbstractionConstructionTime: 24.5ms, PartialOrderReductionTime: 0.0ms, HoareTripleCheckerStatistics: 22811 SDtfs, 35759 SDslu, 46310 SDs, 0 SdLazy, 3484 SolverSat, 381 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 4507.0ms Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 236 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 146 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 628 ImplicationChecksByTransitivity, 1448.9ms Time, 0.0ms BasicInterpolantAutomatonTime, BiggestAbstraction: size=10744occurred in iteration=20, InterpolantAutomatonStates: 155, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0ms DumpTime, AutomataMinimizationStatistics: 4438.9ms AutomataMinimizationTime, 21 MinimizatonAttempts, 17689 StatesRemovedByMinimization, 19 NontrivialMinimizations, HoareAnnotationStatistics: 0.0ms HoareAnnotationTime, 151 LocationsWithAnnotation, 151 PreInvPairs, 3090 NumberOfFragments, 5966 HoareAnnotationTreeSize, 151 FomulaSimplifications, 6277953389 FormulaSimplificationTreeSizeReduction, 25143.8ms HoareSimplificationTime, 151 FomulaSimplificationsInter, 10700861 FormulaSimplificationTreeSizeReductionInter, 52258.4ms HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 274.9ms SsaConstructionTime, 824.5ms SatisfiabilityAnalysisTime, 1977.2ms InterpolantComputationTime, 1260 NumberOfCodeBlocks, 1260 NumberOfCodeBlocksAsserted, 22 NumberOfCheckSat, 1238 ConstructedInterpolants, 0 QuantifiedInterpolants, 2082 SizeOfPredicates, 0 NumberOfNonLiveVariables, 802 ConjunctsInSsa, 3 ConjunctsInUnsatCore, 22 InterpolantComputations, 20 PerfectInterpolantSequences, 129/133 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 6 specifications checked. All of them hold - InvariantResult [Line: 1827]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1964]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2343]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1518]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2342]: Loop Invariant Derived loop invariant: ((handle == 3 && bob == 1) && rjh == 2) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1518]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) - InvariantResult [Line: 1851]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && __ste_email_to0 == 2) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1809]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2281]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1518]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1732]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 1036]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1036]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 651]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client - InvariantResult [Line: 2387]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 2281]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1663]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 80]: Loop Invariant Derived loop invariant: ((__ste_ClientAddressBook_size0 == 0 && !(rjh == 1)) && __ste_client_forwardReceiver1 == 0) && !(__ste_email_to0 == 1) - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((__ste_ClientAddressBook_size0 == 0 && !(rjh == 1)) && bob == 1) && __ste_client_forwardReceiver1 == 0) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1818]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1964]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 2598]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1908]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1572]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2398]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1471]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) || (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && 2 == handle) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1471]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1518]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1964]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 1036]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 2409]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2459]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 2448]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((__ste_ClientAddressBook_size0 == 0 && bob == 1) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && !(__ste_email_to0 == 1)) && handle == 2 - InvariantResult [Line: 2281]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2281]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1572]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1786]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2575]: Loop Invariant Derived loop invariant: ((((handle == 3 && __ste_ClientAddressBook_size0 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && !(__ste_email_to0 == 1) - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1036]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1471]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((__ste_ClientAddressBook_size0 == 0 && !(rjh == 1)) && __ste_client_forwardReceiver1 == 0) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1518]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 2423]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1572]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1732]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0) && !(handle == 1)) || ((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) && !(handle == 1)) - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || ((((((((((sender == 1 && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1732]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1572]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 1663]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1036]: Loop Invariant Derived loop invariant: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1572]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1732]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 2281]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 2434]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1908]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((handle == 3 && __ste_ClientAddressBook_size0 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && !(__ste_email_to0 == 1) - InvariantResult [Line: 627]: Loop Invariant Derived loop invariant: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2351]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1732]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1964]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1600]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 2362]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 2376]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1908]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1964]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 627]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1572]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 1732]: Loop Invariant Derived loop invariant: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1471]: Loop Invariant Derived loop invariant: (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) || (((((((((sender == 1 && handle == 3) && !(rjh == 1)) && \result == 1) && 2 == to) && !(to == 1)) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1908]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2608]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1471]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2001]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 1471]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2281]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1945]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1908]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 1618]: Loop Invariant Derived loop invariant: ((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1851]: Loop Invariant Derived loop invariant: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1036]: Loop Invariant Derived loop invariant: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client - InvariantResult [Line: 1908]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1964]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 843]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1518]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1982]: Loop Invariant Derived loop invariant: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1964]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && 2 == to) && bob == 1) && rjh == 2) && !(__ste_email_to0 == 1)) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) || ((((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) RESULT: Ultimate proved your program to be correct! [2021-10-13 01:26:26,183 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ea2d383c-825c-4eaa-8ef2-94dfd5b689f1/bin/uautomizer-WNIpwEf4Nt/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...