./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e943c265 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 331c48a04a8caddf27498f6f02cdac644ba512a5bbe373bec7a9be0d5f3b8263 ..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.2.1-dev-e943c26 [2021-10-21 20:30:08,118 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-10-21 20:30:08,120 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-10-21 20:30:08,174 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-10-21 20:30:08,175 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-10-21 20:30:08,179 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-10-21 20:30:08,181 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-10-21 20:30:08,185 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-10-21 20:30:08,188 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-10-21 20:30:08,194 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-10-21 20:30:08,195 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-10-21 20:30:08,197 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-10-21 20:30:08,198 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-10-21 20:30:08,201 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-10-21 20:30:08,203 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-10-21 20:30:08,211 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-10-21 20:30:08,213 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-10-21 20:30:08,215 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-10-21 20:30:08,217 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-10-21 20:30:08,226 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-10-21 20:30:08,228 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-10-21 20:30:08,229 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-10-21 20:30:08,233 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-10-21 20:30:08,234 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-10-21 20:30:08,241 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-10-21 20:30:08,242 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-10-21 20:30:08,242 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-10-21 20:30:08,245 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-10-21 20:30:08,246 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-10-21 20:30:08,247 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-10-21 20:30:08,248 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-10-21 20:30:08,250 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-10-21 20:30:08,252 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-10-21 20:30:08,253 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-10-21 20:30:08,255 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-10-21 20:30:08,256 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-10-21 20:30:08,256 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-10-21 20:30:08,257 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-10-21 20:30:08,257 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-10-21 20:30:08,258 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-10-21 20:30:08,259 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-10-21 20:30:08,260 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-10-21 20:30:08,303 INFO L113 SettingsManager]: Loading preferences was successful [2021-10-21 20:30:08,308 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-10-21 20:30:08,309 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-10-21 20:30:08,309 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-10-21 20:30:08,311 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-10-21 20:30:08,312 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-10-21 20:30:08,312 INFO L138 SettingsManager]: * Use SBE=true [2021-10-21 20:30:08,312 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-10-21 20:30:08,312 INFO L138 SettingsManager]: * sizeof long=4 [2021-10-21 20:30:08,313 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-10-21 20:30:08,314 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-10-21 20:30:08,314 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-10-21 20:30:08,314 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-10-21 20:30:08,314 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-10-21 20:30:08,315 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-10-21 20:30:08,315 INFO L138 SettingsManager]: * sizeof long double=12 [2021-10-21 20:30:08,315 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-10-21 20:30:08,315 INFO L138 SettingsManager]: * Use constant arrays=true [2021-10-21 20:30:08,316 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-10-21 20:30:08,316 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-10-21 20:30:08,316 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-10-21 20:30:08,316 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-10-21 20:30:08,317 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-10-21 20:30:08,317 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-10-21 20:30:08,317 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-10-21 20:30:08,317 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-10-21 20:30:08,317 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-10-21 20:30:08,318 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-10-21 20:30:08,318 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-10-21 20:30:08,318 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-10-21 20:30:08,318 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-10-21 20:30:08,319 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-10-21 20:30:08,319 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 331c48a04a8caddf27498f6f02cdac644ba512a5bbe373bec7a9be0d5f3b8263 [2021-10-21 20:30:08,619 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-10-21 20:30:08,649 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-10-21 20:30:08,652 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-10-21 20:30:08,654 INFO L271 PluginConnector]: Initializing CDTParser... [2021-10-21 20:30:08,655 INFO L275 PluginConnector]: CDTParser initialized [2021-10-21 20:30:08,656 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c [2021-10-21 20:30:08,749 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/data/4c2ae044a/c30c9509110541be8305af9e54d77449/FLAG219a960d2 [2021-10-21 20:30:09,460 INFO L306 CDTParser]: Found 1 translation units. [2021-10-21 20:30:09,460 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c [2021-10-21 20:30:09,483 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/data/4c2ae044a/c30c9509110541be8305af9e54d77449/FLAG219a960d2 [2021-10-21 20:30:09,661 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/data/4c2ae044a/c30c9509110541be8305af9e54d77449 [2021-10-21 20:30:09,663 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-10-21 20:30:09,665 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-10-21 20:30:09,666 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-10-21 20:30:09,667 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-10-21 20:30:09,670 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-10-21 20:30:09,671 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.10 08:30:09" (1/1) ... [2021-10-21 20:30:09,672 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2429516b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:30:09, skipping insertion in model container [2021-10-21 20:30:09,672 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.10 08:30:09" (1/1) ... [2021-10-21 20:30:09,682 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-10-21 20:30:09,750 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-10-21 20:30:10,033 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c[12529,12542] [2021-10-21 20:30:10,345 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-21 20:30:10,357 INFO L203 MainTranslator]: Completed pre-run [2021-10-21 20:30:10,398 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c[12529,12542] [2021-10-21 20:30:10,504 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-21 20:30:10,542 INFO L208 MainTranslator]: Completed translation [2021-10-21 20:30:10,543 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:30:10 WrapperNode [2021-10-21 20:30:10,543 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-10-21 20:30:10,544 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-10-21 20:30:10,545 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-10-21 20:30:10,545 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-10-21 20:30:10,553 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:30:10" (1/1) ... [2021-10-21 20:30:10,591 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:30:10" (1/1) ... [2021-10-21 20:30:10,721 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-10-21 20:30:10,721 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-10-21 20:30:10,722 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-10-21 20:30:10,722 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-10-21 20:30:10,730 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:30:10" (1/1) ... [2021-10-21 20:30:10,730 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:30:10" (1/1) ... [2021-10-21 20:30:10,746 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:30:10" (1/1) ... [2021-10-21 20:30:10,746 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:30:10" (1/1) ... [2021-10-21 20:30:10,804 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:30:10" (1/1) ... [2021-10-21 20:30:10,841 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:30:10" (1/1) ... [2021-10-21 20:30:10,848 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:30:10" (1/1) ... [2021-10-21 20:30:10,907 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-10-21 20:30:10,910 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-10-21 20:30:10,910 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-10-21 20:30:10,912 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-10-21 20:30:10,913 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:30:10" (1/1) ... [2021-10-21 20:30:10,922 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-10-21 20:30:10,934 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:30:10,954 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-10-21 20:30:10,984 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-10-21 20:30:11,005 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2021-10-21 20:30:11,006 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-10-21 20:30:11,006 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-10-21 20:30:11,006 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-10-21 20:30:11,007 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-10-21 20:30:13,022 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-10-21 20:30:13,022 INFO L299 CfgBuilder]: Removed 405 assume(true) statements. [2021-10-21 20:30:13,026 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.10 08:30:13 BoogieIcfgContainer [2021-10-21 20:30:13,026 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-10-21 20:30:13,029 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-10-21 20:30:13,029 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-10-21 20:30:13,033 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-10-21 20:30:13,034 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.10 08:30:09" (1/3) ... [2021-10-21 20:30:13,035 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@54c60188 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.10 08:30:13, skipping insertion in model container [2021-10-21 20:30:13,035 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.10 08:30:10" (2/3) ... [2021-10-21 20:30:13,036 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@54c60188 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.10 08:30:13, skipping insertion in model container [2021-10-21 20:30:13,036 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.10 08:30:13" (3/3) ... [2021-10-21 20:30:13,038 INFO L111 eAbstractionObserver]: Analyzing ICFG email_spec0_product36.cil.c [2021-10-21 20:30:13,045 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-10-21 20:30:13,046 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 6 error locations. [2021-10-21 20:30:13,111 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-10-21 20:30:13,116 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-10-21 20:30:13,116 INFO L340 AbstractCegarLoop]: Starting to check reachability of 6 error locations. [2021-10-21 20:30:13,143 INFO L276 IsEmpty]: Start isEmpty. Operand has 477 states, 470 states have (on average 1.695744680851064) internal successors, (797), 476 states have internal predecessors, (797), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:13,154 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-10-21 20:30:13,154 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:13,155 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:13,156 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:13,161 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:13,162 INFO L82 PathProgramCache]: Analyzing trace with hash 727264019, now seen corresponding path program 1 times [2021-10-21 20:30:13,171 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:13,171 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [768430757] [2021-10-21 20:30:13,172 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:13,173 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:13,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:13,476 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-21 20:30:13,477 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:13,477 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [768430757] [2021-10-21 20:30:13,478 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [768430757] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:13,478 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:13,479 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-10-21 20:30:13,481 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1559280032] [2021-10-21 20:30:13,486 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-10-21 20:30:13,487 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:13,500 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-10-21 20:30:13,501 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-10-21 20:30:13,505 INFO L87 Difference]: Start difference. First operand has 477 states, 470 states have (on average 1.695744680851064) internal successors, (797), 476 states have internal predecessors, (797), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 20.5) internal successors, (41), 2 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:13,603 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:13,603 INFO L93 Difference]: Finished difference Result 860 states and 1420 transitions. [2021-10-21 20:30:13,604 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-10-21 20:30:13,605 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 20.5) internal successors, (41), 2 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2021-10-21 20:30:13,605 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:13,623 INFO L225 Difference]: With dead ends: 860 [2021-10-21 20:30:13,623 INFO L226 Difference]: Without dead ends: 449 [2021-10-21 20:30:13,629 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0ms TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-10-21 20:30:13,649 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 449 states. [2021-10-21 20:30:13,699 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 449 to 449. [2021-10-21 20:30:13,702 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 449 states, 443 states have (on average 1.6794582392776525) internal successors, (744), 448 states have internal predecessors, (744), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:13,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 449 states to 449 states and 744 transitions. [2021-10-21 20:30:13,707 INFO L78 Accepts]: Start accepts. Automaton has 449 states and 744 transitions. Word has length 41 [2021-10-21 20:30:13,707 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:13,708 INFO L470 AbstractCegarLoop]: Abstraction has 449 states and 744 transitions. [2021-10-21 20:30:13,708 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 20.5) internal successors, (41), 2 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:13,708 INFO L276 IsEmpty]: Start isEmpty. Operand 449 states and 744 transitions. [2021-10-21 20:30:13,711 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2021-10-21 20:30:13,711 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:13,712 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:13,712 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-10-21 20:30:13,713 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:13,714 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:13,714 INFO L82 PathProgramCache]: Analyzing trace with hash 1990434142, now seen corresponding path program 1 times [2021-10-21 20:30:13,714 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:13,715 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [571297778] [2021-10-21 20:30:13,715 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:13,715 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:13,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:13,850 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-21 20:30:13,850 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:13,851 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [571297778] [2021-10-21 20:30:13,851 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [571297778] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:13,851 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:13,852 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-21 20:30:13,852 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [283639712] [2021-10-21 20:30:13,854 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-21 20:30:13,854 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:13,855 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-21 20:30:13,855 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:30:13,856 INFO L87 Difference]: Start difference. First operand 449 states and 744 transitions. Second operand has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:13,939 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:13,939 INFO L93 Difference]: Finished difference Result 1320 states and 2190 transitions. [2021-10-21 20:30:13,940 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-21 20:30:13,940 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2021-10-21 20:30:13,941 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:13,949 INFO L225 Difference]: With dead ends: 1320 [2021-10-21 20:30:13,950 INFO L226 Difference]: Without dead ends: 882 [2021-10-21 20:30:13,953 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 4.7ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:30:13,955 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 882 states. [2021-10-21 20:30:13,984 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 882 to 448. [2021-10-21 20:30:13,986 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 448 states, 442 states have (on average 1.6742081447963801) internal successors, (740), 447 states have internal predecessors, (740), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:13,989 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 740 transitions. [2021-10-21 20:30:13,990 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 740 transitions. Word has length 42 [2021-10-21 20:30:13,990 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:13,990 INFO L470 AbstractCegarLoop]: Abstraction has 448 states and 740 transitions. [2021-10-21 20:30:13,990 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:13,991 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 740 transitions. [2021-10-21 20:30:13,994 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2021-10-21 20:30:13,994 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:13,994 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:13,995 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-10-21 20:30:13,995 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:13,996 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:13,996 INFO L82 PathProgramCache]: Analyzing trace with hash -1205522101, now seen corresponding path program 1 times [2021-10-21 20:30:13,996 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:13,997 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1969376820] [2021-10-21 20:30:13,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:13,997 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:14,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:14,084 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-21 20:30:14,085 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:14,085 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1969376820] [2021-10-21 20:30:14,086 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1969376820] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:14,086 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:14,086 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-21 20:30:14,086 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1894907398] [2021-10-21 20:30:14,087 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-21 20:30:14,087 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:14,088 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-21 20:30:14,089 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:30:14,089 INFO L87 Difference]: Start difference. First operand 448 states and 740 transitions. Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:14,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:14,132 INFO L93 Difference]: Finished difference Result 882 states and 1460 transitions. [2021-10-21 20:30:14,132 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-21 20:30:14,132 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2021-10-21 20:30:14,133 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:14,136 INFO L225 Difference]: With dead ends: 882 [2021-10-21 20:30:14,136 INFO L226 Difference]: Without dead ends: 449 [2021-10-21 20:30:14,138 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.4ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:30:14,139 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 449 states. [2021-10-21 20:30:14,153 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 449 to 448. [2021-10-21 20:30:14,155 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 448 states, 442 states have (on average 1.667420814479638) internal successors, (737), 447 states have internal predecessors, (737), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:14,158 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 737 transitions. [2021-10-21 20:30:14,158 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 737 transitions. Word has length 43 [2021-10-21 20:30:14,159 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:14,175 INFO L470 AbstractCegarLoop]: Abstraction has 448 states and 737 transitions. [2021-10-21 20:30:14,176 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:14,176 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 737 transitions. [2021-10-21 20:30:14,179 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2021-10-21 20:30:14,179 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:14,179 INFO L512 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:14,179 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-10-21 20:30:14,180 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:14,181 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:14,181 INFO L82 PathProgramCache]: Analyzing trace with hash 945994064, now seen corresponding path program 1 times [2021-10-21 20:30:14,181 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:14,182 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2123219538] [2021-10-21 20:30:14,182 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:14,182 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:14,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:14,265 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-21 20:30:14,266 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:14,266 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2123219538] [2021-10-21 20:30:14,266 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2123219538] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:14,267 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:14,267 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-21 20:30:14,267 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [937812039] [2021-10-21 20:30:14,268 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-21 20:30:14,268 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:14,269 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-21 20:30:14,270 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:30:14,270 INFO L87 Difference]: Start difference. First operand 448 states and 737 transitions. Second operand has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:14,296 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:14,296 INFO L93 Difference]: Finished difference Result 806 states and 1314 transitions. [2021-10-21 20:30:14,296 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-21 20:30:14,297 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2021-10-21 20:30:14,297 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:14,300 INFO L225 Difference]: With dead ends: 806 [2021-10-21 20:30:14,301 INFO L226 Difference]: Without dead ends: 451 [2021-10-21 20:30:14,302 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.4ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:30:14,303 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 451 states. [2021-10-21 20:30:14,317 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 451 to 450. [2021-10-21 20:30:14,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 450 states, 444 states have (on average 1.6644144144144144) internal successors, (739), 449 states have internal predecessors, (739), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:14,321 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 450 states to 450 states and 739 transitions. [2021-10-21 20:30:14,322 INFO L78 Accepts]: Start accepts. Automaton has 450 states and 739 transitions. Word has length 45 [2021-10-21 20:30:14,322 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:14,322 INFO L470 AbstractCegarLoop]: Abstraction has 450 states and 739 transitions. [2021-10-21 20:30:14,323 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:14,323 INFO L276 IsEmpty]: Start isEmpty. Operand 450 states and 739 transitions. [2021-10-21 20:30:14,325 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2021-10-21 20:30:14,325 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:14,325 INFO L512 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:14,326 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-10-21 20:30:14,326 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:14,327 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:14,327 INFO L82 PathProgramCache]: Analyzing trace with hash -1740183871, now seen corresponding path program 1 times [2021-10-21 20:30:14,327 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:14,328 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [60126338] [2021-10-21 20:30:14,328 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:14,328 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:14,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:14,409 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-21 20:30:14,409 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:14,409 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [60126338] [2021-10-21 20:30:14,410 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [60126338] provided 0 perfect and 1 imperfect interpolant sequences [2021-10-21 20:30:14,410 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [118915408] [2021-10-21 20:30:14,410 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:14,411 INFO L170 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-10-21 20:30:14,411 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/z3 [2021-10-21 20:30:14,413 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-10-21 20:30:14,440 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-10-21 20:30:14,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:14,725 INFO L263 TraceCheckSpWp]: Trace formula consists of 802 conjuncts, 3 conjunts are in the unsatisfiable core [2021-10-21 20:30:14,734 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-10-21 20:30:14,959 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-21 20:30:14,960 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [118915408] provided 0 perfect and 1 imperfect interpolant sequences [2021-10-21 20:30:14,960 INFO L186 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2021-10-21 20:30:14,960 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4] total 5 [2021-10-21 20:30:14,960 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1125690782] [2021-10-21 20:30:14,962 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-21 20:30:14,962 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:14,963 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-21 20:30:14,963 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2021-10-21 20:30:14,964 INFO L87 Difference]: Start difference. First operand 450 states and 739 transitions. Second operand has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:15,040 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:15,041 INFO L93 Difference]: Finished difference Result 1237 states and 2030 transitions. [2021-10-21 20:30:15,041 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-10-21 20:30:15,041 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2021-10-21 20:30:15,042 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:15,053 INFO L225 Difference]: With dead ends: 1237 [2021-10-21 20:30:15,053 INFO L226 Difference]: Without dead ends: 882 [2021-10-21 20:30:15,054 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 10.4ms TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2021-10-21 20:30:15,059 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 882 states. [2021-10-21 20:30:15,090 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 882 to 526. [2021-10-21 20:30:15,091 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 526 states, 520 states have (on average 1.6961538461538461) internal successors, (882), 525 states have internal predecessors, (882), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:15,095 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 526 states to 526 states and 882 transitions. [2021-10-21 20:30:15,096 INFO L78 Accepts]: Start accepts. Automaton has 526 states and 882 transitions. Word has length 50 [2021-10-21 20:30:15,098 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:15,098 INFO L470 AbstractCegarLoop]: Abstraction has 526 states and 882 transitions. [2021-10-21 20:30:15,098 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:15,099 INFO L276 IsEmpty]: Start isEmpty. Operand 526 states and 882 transitions. [2021-10-21 20:30:15,101 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-10-21 20:30:15,101 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:15,102 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:15,144 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-10-21 20:30:15,320 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-10-21 20:30:15,321 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:15,321 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:15,322 INFO L82 PathProgramCache]: Analyzing trace with hash 298481648, now seen corresponding path program 2 times [2021-10-21 20:30:15,322 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:15,322 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1391507681] [2021-10-21 20:30:15,322 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:15,323 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:15,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:15,417 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-21 20:30:15,417 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:15,417 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1391507681] [2021-10-21 20:30:15,418 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1391507681] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:15,426 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:15,426 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-21 20:30:15,426 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2036347102] [2021-10-21 20:30:15,427 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-21 20:30:15,427 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:15,429 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-21 20:30:15,429 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:30:15,432 INFO L87 Difference]: Start difference. First operand 526 states and 882 transitions. Second operand has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:15,484 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:15,484 INFO L93 Difference]: Finished difference Result 1389 states and 2316 transitions. [2021-10-21 20:30:15,485 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-21 20:30:15,485 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2021-10-21 20:30:15,485 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:15,491 INFO L225 Difference]: With dead ends: 1389 [2021-10-21 20:30:15,492 INFO L226 Difference]: Without dead ends: 958 [2021-10-21 20:30:15,493 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.3ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:30:15,495 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 958 states. [2021-10-21 20:30:15,519 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 958 to 603. [2021-10-21 20:30:15,521 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 603 states, 597 states have (on average 1.7169179229480738) internal successors, (1025), 602 states have internal predecessors, (1025), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:15,524 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 603 states to 603 states and 1025 transitions. [2021-10-21 20:30:15,524 INFO L78 Accepts]: Start accepts. Automaton has 603 states and 1025 transitions. Word has length 55 [2021-10-21 20:30:15,525 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:15,525 INFO L470 AbstractCegarLoop]: Abstraction has 603 states and 1025 transitions. [2021-10-21 20:30:15,525 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:15,526 INFO L276 IsEmpty]: Start isEmpty. Operand 603 states and 1025 transitions. [2021-10-21 20:30:15,527 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-10-21 20:30:15,527 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:15,527 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:15,527 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-10-21 20:30:15,528 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:15,528 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:15,528 INFO L82 PathProgramCache]: Analyzing trace with hash -226823759, now seen corresponding path program 1 times [2021-10-21 20:30:15,529 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:15,529 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1772455187] [2021-10-21 20:30:15,530 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:15,530 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:15,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:15,638 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-10-21 20:30:15,639 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:15,640 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1772455187] [2021-10-21 20:30:15,640 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1772455187] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:15,640 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:15,640 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-21 20:30:15,641 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [329023025] [2021-10-21 20:30:15,642 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-21 20:30:15,643 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:15,643 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-21 20:30:15,643 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:30:15,644 INFO L87 Difference]: Start difference. First operand 603 states and 1025 transitions. Second operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:15,710 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:15,710 INFO L93 Difference]: Finished difference Result 1537 states and 2594 transitions. [2021-10-21 20:30:15,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-21 20:30:15,711 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2021-10-21 20:30:15,712 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:15,718 INFO L225 Difference]: With dead ends: 1537 [2021-10-21 20:30:15,719 INFO L226 Difference]: Without dead ends: 958 [2021-10-21 20:30:15,720 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.4ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:30:15,722 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 958 states. [2021-10-21 20:30:15,757 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 958 to 603. [2021-10-21 20:30:15,760 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 603 states, 597 states have (on average 1.7135678391959799) internal successors, (1023), 602 states have internal predecessors, (1023), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:15,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 603 states to 603 states and 1023 transitions. [2021-10-21 20:30:15,763 INFO L78 Accepts]: Start accepts. Automaton has 603 states and 1023 transitions. Word has length 57 [2021-10-21 20:30:15,764 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:15,764 INFO L470 AbstractCegarLoop]: Abstraction has 603 states and 1023 transitions. [2021-10-21 20:30:15,764 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:15,764 INFO L276 IsEmpty]: Start isEmpty. Operand 603 states and 1023 transitions. [2021-10-21 20:30:15,766 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-10-21 20:30:15,766 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:15,767 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:15,767 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-10-21 20:30:15,769 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:15,769 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:15,770 INFO L82 PathProgramCache]: Analyzing trace with hash -1735157297, now seen corresponding path program 2 times [2021-10-21 20:30:15,770 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:15,771 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [369894894] [2021-10-21 20:30:15,771 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:15,771 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:15,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:15,874 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-21 20:30:15,875 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:15,875 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [369894894] [2021-10-21 20:30:15,875 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [369894894] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:15,875 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:15,877 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-21 20:30:15,877 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1378242374] [2021-10-21 20:30:15,877 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-21 20:30:15,878 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:15,878 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-21 20:30:15,879 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:30:15,879 INFO L87 Difference]: Start difference. First operand 603 states and 1023 transitions. Second operand has 3 states, 3 states have (on average 18.0) internal successors, (54), 3 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:15,939 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:15,940 INFO L93 Difference]: Finished difference Result 1674 states and 2848 transitions. [2021-10-21 20:30:15,940 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-21 20:30:15,940 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.0) internal successors, (54), 3 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2021-10-21 20:30:15,941 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:15,949 INFO L225 Difference]: With dead ends: 1674 [2021-10-21 20:30:15,949 INFO L226 Difference]: Without dead ends: 1101 [2021-10-21 20:30:15,951 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.2ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:30:15,953 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1101 states. [2021-10-21 20:30:15,988 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1101 to 746. [2021-10-21 20:30:15,990 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 746 states, 740 states have (on average 1.7405405405405405) internal successors, (1288), 745 states have internal predecessors, (1288), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:15,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 746 states to 746 states and 1288 transitions. [2021-10-21 20:30:15,994 INFO L78 Accepts]: Start accepts. Automaton has 746 states and 1288 transitions. Word has length 57 [2021-10-21 20:30:15,996 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:15,997 INFO L470 AbstractCegarLoop]: Abstraction has 746 states and 1288 transitions. [2021-10-21 20:30:15,997 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.0) internal successors, (54), 3 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:15,997 INFO L276 IsEmpty]: Start isEmpty. Operand 746 states and 1288 transitions. [2021-10-21 20:30:15,999 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-10-21 20:30:15,999 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:15,999 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:15,999 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-10-21 20:30:16,000 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:16,002 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:16,003 INFO L82 PathProgramCache]: Analyzing trace with hash 1243815331, now seen corresponding path program 1 times [2021-10-21 20:30:16,003 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:16,003 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [422557996] [2021-10-21 20:30:16,003 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:16,004 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:16,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:16,121 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-21 20:30:16,122 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:16,122 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [422557996] [2021-10-21 20:30:16,122 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [422557996] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:16,122 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:16,122 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-21 20:30:16,123 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1980195056] [2021-10-21 20:30:16,123 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-21 20:30:16,123 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:16,124 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-21 20:30:16,124 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-21 20:30:16,124 INFO L87 Difference]: Start difference. First operand 746 states and 1288 transitions. Second operand has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:16,546 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:16,546 INFO L93 Difference]: Finished difference Result 1894 states and 3253 transitions. [2021-10-21 20:30:16,547 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-21 20:30:16,547 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2021-10-21 20:30:16,547 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:16,555 INFO L225 Difference]: With dead ends: 1894 [2021-10-21 20:30:16,555 INFO L226 Difference]: Without dead ends: 1244 [2021-10-21 20:30:16,557 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 23.2ms TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-10-21 20:30:16,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1244 states. [2021-10-21 20:30:16,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1244 to 746. [2021-10-21 20:30:16,598 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 746 states, 740 states have (on average 1.7364864864864864) internal successors, (1285), 745 states have internal predecessors, (1285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:16,603 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 746 states to 746 states and 1285 transitions. [2021-10-21 20:30:16,603 INFO L78 Accepts]: Start accepts. Automaton has 746 states and 1285 transitions. Word has length 58 [2021-10-21 20:30:16,603 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:16,603 INFO L470 AbstractCegarLoop]: Abstraction has 746 states and 1285 transitions. [2021-10-21 20:30:16,604 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:16,604 INFO L276 IsEmpty]: Start isEmpty. Operand 746 states and 1285 transitions. [2021-10-21 20:30:16,605 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-10-21 20:30:16,605 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:16,605 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:16,606 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-10-21 20:30:16,606 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:16,606 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:16,606 INFO L82 PathProgramCache]: Analyzing trace with hash -462083701, now seen corresponding path program 1 times [2021-10-21 20:30:16,607 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:16,607 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [691172400] [2021-10-21 20:30:16,607 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:16,607 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:16,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:16,740 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-21 20:30:16,740 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:16,741 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [691172400] [2021-10-21 20:30:16,741 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [691172400] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:16,741 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:16,741 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-10-21 20:30:16,741 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [367653562] [2021-10-21 20:30:16,742 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-10-21 20:30:16,742 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:16,742 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-10-21 20:30:16,743 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2021-10-21 20:30:16,743 INFO L87 Difference]: Start difference. First operand 746 states and 1285 transitions. Second operand has 10 states, 10 states have (on average 5.4) internal successors, (54), 10 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:19,019 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:19,019 INFO L93 Difference]: Finished difference Result 3388 states and 5518 transitions. [2021-10-21 20:30:19,019 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-10-21 20:30:19,019 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 10 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2021-10-21 20:30:19,020 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:19,040 INFO L225 Difference]: With dead ends: 3388 [2021-10-21 20:30:19,040 INFO L226 Difference]: Without dead ends: 3094 [2021-10-21 20:30:19,042 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 208 ImplicationChecksByTransitivity, 386.0ms TimeCoverageRelationStatistics Valid=290, Invalid=766, Unknown=0, NotChecked=0, Total=1056 [2021-10-21 20:30:19,046 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3094 states. [2021-10-21 20:30:19,130 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3094 to 1013. [2021-10-21 20:30:19,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1013 states, 1007 states have (on average 1.6971201588877856) internal successors, (1709), 1012 states have internal predecessors, (1709), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:19,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1013 states to 1013 states and 1709 transitions. [2021-10-21 20:30:19,138 INFO L78 Accepts]: Start accepts. Automaton has 1013 states and 1709 transitions. Word has length 58 [2021-10-21 20:30:19,138 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:19,138 INFO L470 AbstractCegarLoop]: Abstraction has 1013 states and 1709 transitions. [2021-10-21 20:30:19,138 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 10 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:19,139 INFO L276 IsEmpty]: Start isEmpty. Operand 1013 states and 1709 transitions. [2021-10-21 20:30:19,140 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-10-21 20:30:19,140 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:19,141 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:19,141 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-10-21 20:30:19,141 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:19,141 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:19,142 INFO L82 PathProgramCache]: Analyzing trace with hash -1190675934, now seen corresponding path program 1 times [2021-10-21 20:30:19,142 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:19,142 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [147446466] [2021-10-21 20:30:19,142 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:19,142 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:19,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:19,270 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-21 20:30:19,270 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:19,271 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [147446466] [2021-10-21 20:30:19,271 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [147446466] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:19,271 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:19,271 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-10-21 20:30:19,271 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1248672277] [2021-10-21 20:30:19,272 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-10-21 20:30:19,272 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:19,272 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-10-21 20:30:19,272 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2021-10-21 20:30:19,273 INFO L87 Difference]: Start difference. First operand 1013 states and 1709 transitions. Second operand has 10 states, 10 states have (on average 5.5) internal successors, (55), 10 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:21,316 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:21,316 INFO L93 Difference]: Finished difference Result 3650 states and 5919 transitions. [2021-10-21 20:30:21,316 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-10-21 20:30:21,316 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.5) internal successors, (55), 10 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2021-10-21 20:30:21,318 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:21,337 INFO L225 Difference]: With dead ends: 3650 [2021-10-21 20:30:21,337 INFO L226 Difference]: Without dead ends: 3154 [2021-10-21 20:30:21,339 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 205 ImplicationChecksByTransitivity, 324.4ms TimeCoverageRelationStatistics Valid=290, Invalid=766, Unknown=0, NotChecked=0, Total=1056 [2021-10-21 20:30:21,344 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3154 states. [2021-10-21 20:30:21,443 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3154 to 1124. [2021-10-21 20:30:21,446 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1124 states, 1118 states have (on average 1.684257602862254) internal successors, (1883), 1123 states have internal predecessors, (1883), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:21,450 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1124 states to 1124 states and 1883 transitions. [2021-10-21 20:30:21,450 INFO L78 Accepts]: Start accepts. Automaton has 1124 states and 1883 transitions. Word has length 59 [2021-10-21 20:30:21,451 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:21,451 INFO L470 AbstractCegarLoop]: Abstraction has 1124 states and 1883 transitions. [2021-10-21 20:30:21,451 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.5) internal successors, (55), 10 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:21,451 INFO L276 IsEmpty]: Start isEmpty. Operand 1124 states and 1883 transitions. [2021-10-21 20:30:21,453 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-10-21 20:30:21,453 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:21,453 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:21,453 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-10-21 20:30:21,454 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:21,454 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:21,454 INFO L82 PathProgramCache]: Analyzing trace with hash -1608706913, now seen corresponding path program 1 times [2021-10-21 20:30:21,454 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:21,455 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1711450213] [2021-10-21 20:30:21,455 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:21,456 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:21,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:21,555 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-21 20:30:21,555 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:21,555 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1711450213] [2021-10-21 20:30:21,555 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1711450213] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:21,555 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:21,556 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-10-21 20:30:21,557 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [822645258] [2021-10-21 20:30:21,557 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-10-21 20:30:21,557 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:21,557 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-10-21 20:30:21,559 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-10-21 20:30:21,559 INFO L87 Difference]: Start difference. First operand 1124 states and 1883 transitions. Second operand has 7 states, 7 states have (on average 7.857142857142857) internal successors, (55), 7 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:21,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:21,888 INFO L93 Difference]: Finished difference Result 2109 states and 3448 transitions. [2021-10-21 20:30:21,889 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-10-21 20:30:21,889 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.857142857142857) internal successors, (55), 7 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2021-10-21 20:30:21,889 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:21,897 INFO L225 Difference]: With dead ends: 2109 [2021-10-21 20:30:21,897 INFO L226 Difference]: Without dead ends: 1399 [2021-10-21 20:30:21,899 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 83.2ms TimeCoverageRelationStatistics Valid=74, Invalid=136, Unknown=0, NotChecked=0, Total=210 [2021-10-21 20:30:21,901 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1399 states. [2021-10-21 20:30:21,986 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1399 to 1046. [2021-10-21 20:30:21,989 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1046 states, 1040 states have (on average 1.6836538461538462) internal successors, (1751), 1045 states have internal predecessors, (1751), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:21,993 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1046 states to 1046 states and 1751 transitions. [2021-10-21 20:30:21,993 INFO L78 Accepts]: Start accepts. Automaton has 1046 states and 1751 transitions. Word has length 59 [2021-10-21 20:30:21,994 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:21,994 INFO L470 AbstractCegarLoop]: Abstraction has 1046 states and 1751 transitions. [2021-10-21 20:30:21,994 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.857142857142857) internal successors, (55), 7 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:21,994 INFO L276 IsEmpty]: Start isEmpty. Operand 1046 states and 1751 transitions. [2021-10-21 20:30:22,001 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-10-21 20:30:22,001 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:22,002 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:22,002 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-10-21 20:30:22,002 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:22,002 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:22,003 INFO L82 PathProgramCache]: Analyzing trace with hash 1160689309, now seen corresponding path program 1 times [2021-10-21 20:30:22,003 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:22,003 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1468414381] [2021-10-21 20:30:22,003 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:22,003 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:22,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:22,102 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-21 20:30:22,102 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:22,103 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1468414381] [2021-10-21 20:30:22,103 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1468414381] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:22,103 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:22,103 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-21 20:30:22,103 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [930093249] [2021-10-21 20:30:22,103 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-21 20:30:22,104 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:22,104 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-21 20:30:22,104 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-21 20:30:22,104 INFO L87 Difference]: Start difference. First operand 1046 states and 1751 transitions. Second operand has 5 states, 5 states have (on average 11.2) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:22,537 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:22,537 INFO L93 Difference]: Finished difference Result 3655 states and 6060 transitions. [2021-10-21 20:30:22,538 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-10-21 20:30:22,538 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.2) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 60 [2021-10-21 20:30:22,538 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:22,561 INFO L225 Difference]: With dead ends: 3655 [2021-10-21 20:30:22,561 INFO L226 Difference]: Without dead ends: 3116 [2021-10-21 20:30:22,563 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 26.8ms TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-10-21 20:30:22,570 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3116 states. [2021-10-21 20:30:22,767 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3116 to 2000. [2021-10-21 20:30:22,772 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2000 states, 1994 states have (on average 1.6745235707121364) internal successors, (3339), 1999 states have internal predecessors, (3339), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:22,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2000 states to 2000 states and 3339 transitions. [2021-10-21 20:30:22,779 INFO L78 Accepts]: Start accepts. Automaton has 2000 states and 3339 transitions. Word has length 60 [2021-10-21 20:30:22,780 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:22,780 INFO L470 AbstractCegarLoop]: Abstraction has 2000 states and 3339 transitions. [2021-10-21 20:30:22,780 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.2) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:22,780 INFO L276 IsEmpty]: Start isEmpty. Operand 2000 states and 3339 transitions. [2021-10-21 20:30:22,783 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-10-21 20:30:22,783 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:22,783 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:22,783 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-10-21 20:30:22,783 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:22,784 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:22,784 INFO L82 PathProgramCache]: Analyzing trace with hash 1162684893, now seen corresponding path program 1 times [2021-10-21 20:30:22,784 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:22,784 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1544929867] [2021-10-21 20:30:22,784 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:22,785 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:22,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:22,889 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-21 20:30:22,889 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:22,890 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1544929867] [2021-10-21 20:30:22,890 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1544929867] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:22,890 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:22,890 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-10-21 20:30:22,890 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1599706549] [2021-10-21 20:30:22,891 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-10-21 20:30:22,891 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:22,891 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-10-21 20:30:22,891 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2021-10-21 20:30:22,892 INFO L87 Difference]: Start difference. First operand 2000 states and 3339 transitions. Second operand has 9 states, 9 states have (on average 6.333333333333333) internal successors, (57), 9 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:24,626 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:24,626 INFO L93 Difference]: Finished difference Result 6190 states and 9970 transitions. [2021-10-21 20:30:24,626 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-10-21 20:30:24,627 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 6.333333333333333) internal successors, (57), 9 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 61 [2021-10-21 20:30:24,627 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:24,656 INFO L225 Difference]: With dead ends: 6190 [2021-10-21 20:30:24,656 INFO L226 Difference]: Without dead ends: 5030 [2021-10-21 20:30:24,659 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 186 ImplicationChecksByTransitivity, 271.0ms TimeCoverageRelationStatistics Valid=268, Invalid=662, Unknown=0, NotChecked=0, Total=930 [2021-10-21 20:30:24,665 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5030 states. [2021-10-21 20:30:24,935 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5030 to 2639. [2021-10-21 20:30:24,940 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2639 states, 2633 states have (on average 1.645271553361185) internal successors, (4332), 2638 states have internal predecessors, (4332), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:24,949 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2639 states to 2639 states and 4332 transitions. [2021-10-21 20:30:24,949 INFO L78 Accepts]: Start accepts. Automaton has 2639 states and 4332 transitions. Word has length 61 [2021-10-21 20:30:24,949 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:24,949 INFO L470 AbstractCegarLoop]: Abstraction has 2639 states and 4332 transitions. [2021-10-21 20:30:24,949 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 6.333333333333333) internal successors, (57), 9 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:24,950 INFO L276 IsEmpty]: Start isEmpty. Operand 2639 states and 4332 transitions. [2021-10-21 20:30:24,952 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2021-10-21 20:30:24,952 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:24,952 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:24,953 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2021-10-21 20:30:24,953 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:24,953 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:24,953 INFO L82 PathProgramCache]: Analyzing trace with hash 1212942047, now seen corresponding path program 1 times [2021-10-21 20:30:24,954 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:24,954 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [539633669] [2021-10-21 20:30:24,954 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:24,954 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:24,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:25,014 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-21 20:30:25,014 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:25,014 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [539633669] [2021-10-21 20:30:25,015 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [539633669] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:25,015 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:25,015 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-21 20:30:25,015 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [432199584] [2021-10-21 20:30:25,018 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-10-21 20:30:25,019 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:25,019 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-21 20:30:25,019 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-21 20:30:25,020 INFO L87 Difference]: Start difference. First operand 2639 states and 4332 transitions. Second operand has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:25,371 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:25,371 INFO L93 Difference]: Finished difference Result 3927 states and 6332 transitions. [2021-10-21 20:30:25,371 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-10-21 20:30:25,372 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 62 [2021-10-21 20:30:25,372 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:25,379 INFO L225 Difference]: With dead ends: 3927 [2021-10-21 20:30:25,379 INFO L226 Difference]: Without dead ends: 2623 [2021-10-21 20:30:25,381 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 8.2ms TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-10-21 20:30:25,385 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2623 states. [2021-10-21 20:30:25,552 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2623 to 1982. [2021-10-21 20:30:25,556 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1982 states, 1976 states have (on average 1.6634615384615385) internal successors, (3287), 1981 states have internal predecessors, (3287), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:25,562 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1982 states to 1982 states and 3287 transitions. [2021-10-21 20:30:25,562 INFO L78 Accepts]: Start accepts. Automaton has 1982 states and 3287 transitions. Word has length 62 [2021-10-21 20:30:25,562 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:25,563 INFO L470 AbstractCegarLoop]: Abstraction has 1982 states and 3287 transitions. [2021-10-21 20:30:25,563 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:25,563 INFO L276 IsEmpty]: Start isEmpty. Operand 1982 states and 3287 transitions. [2021-10-21 20:30:25,565 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-10-21 20:30:25,566 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:25,566 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:25,566 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2021-10-21 20:30:25,566 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:25,567 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:25,567 INFO L82 PathProgramCache]: Analyzing trace with hash 737410204, now seen corresponding path program 1 times [2021-10-21 20:30:25,567 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:25,567 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1872677550] [2021-10-21 20:30:25,568 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:25,568 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:25,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:25,630 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-21 20:30:25,631 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:25,631 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1872677550] [2021-10-21 20:30:25,631 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1872677550] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:25,631 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:25,631 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-21 20:30:25,632 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2125196867] [2021-10-21 20:30:25,632 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-21 20:30:25,632 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:25,633 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-21 20:30:25,633 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-21 20:30:25,633 INFO L87 Difference]: Start difference. First operand 1982 states and 3287 transitions. Second operand has 5 states, 5 states have (on average 12.4) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:26,145 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:26,145 INFO L93 Difference]: Finished difference Result 5624 states and 9108 transitions. [2021-10-21 20:30:26,146 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-10-21 20:30:26,146 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 66 [2021-10-21 20:30:26,146 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:26,157 INFO L225 Difference]: With dead ends: 5624 [2021-10-21 20:30:26,157 INFO L226 Difference]: Without dead ends: 4452 [2021-10-21 20:30:26,161 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 25.5ms TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-10-21 20:30:26,166 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4452 states. [2021-10-21 20:30:26,466 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4452 to 3216. [2021-10-21 20:30:26,473 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3216 states, 3210 states have (on average 1.6763239875389409) internal successors, (5381), 3215 states have internal predecessors, (5381), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:26,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3216 states to 3216 states and 5381 transitions. [2021-10-21 20:30:26,483 INFO L78 Accepts]: Start accepts. Automaton has 3216 states and 5381 transitions. Word has length 66 [2021-10-21 20:30:26,483 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:26,483 INFO L470 AbstractCegarLoop]: Abstraction has 3216 states and 5381 transitions. [2021-10-21 20:30:26,483 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:26,484 INFO L276 IsEmpty]: Start isEmpty. Operand 3216 states and 5381 transitions. [2021-10-21 20:30:26,487 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-10-21 20:30:26,487 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:26,488 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:26,488 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2021-10-21 20:30:26,488 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:26,488 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:26,489 INFO L82 PathProgramCache]: Analyzing trace with hash -2115831750, now seen corresponding path program 1 times [2021-10-21 20:30:26,489 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:26,489 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [6440096] [2021-10-21 20:30:26,489 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:26,489 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:26,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:26,538 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-21 20:30:26,538 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:26,539 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [6440096] [2021-10-21 20:30:26,539 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [6440096] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:26,539 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:26,539 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-21 20:30:26,539 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [76113737] [2021-10-21 20:30:26,540 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-21 20:30:26,540 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:26,540 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-21 20:30:26,540 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:30:26,541 INFO L87 Difference]: Start difference. First operand 3216 states and 5381 transitions. Second operand has 3 states, 3 states have (on average 21.0) internal successors, (63), 3 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:27,055 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:27,055 INFO L93 Difference]: Finished difference Result 9456 states and 15823 transitions. [2021-10-21 20:30:27,055 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-21 20:30:27,055 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.0) internal successors, (63), 3 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 66 [2021-10-21 20:30:27,056 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:27,070 INFO L225 Difference]: With dead ends: 9456 [2021-10-21 20:30:27,071 INFO L226 Difference]: Without dead ends: 6274 [2021-10-21 20:30:27,076 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 1.6ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:30:27,084 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6274 states. [2021-10-21 20:30:27,429 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6274 to 4370. [2021-10-21 20:30:27,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4370 states, 4364 states have (on average 1.722731439046746) internal successors, (7518), 4369 states have internal predecessors, (7518), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:27,463 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4370 states to 4370 states and 7518 transitions. [2021-10-21 20:30:27,463 INFO L78 Accepts]: Start accepts. Automaton has 4370 states and 7518 transitions. Word has length 66 [2021-10-21 20:30:27,463 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:27,463 INFO L470 AbstractCegarLoop]: Abstraction has 4370 states and 7518 transitions. [2021-10-21 20:30:27,464 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.0) internal successors, (63), 3 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:27,464 INFO L276 IsEmpty]: Start isEmpty. Operand 4370 states and 7518 transitions. [2021-10-21 20:30:27,472 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-10-21 20:30:27,472 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:27,472 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:27,473 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2021-10-21 20:30:27,473 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:27,473 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:27,473 INFO L82 PathProgramCache]: Analyzing trace with hash -245114945, now seen corresponding path program 1 times [2021-10-21 20:30:27,473 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:27,474 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [547536982] [2021-10-21 20:30:27,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:27,474 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:27,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:27,538 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-21 20:30:27,539 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:27,539 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [547536982] [2021-10-21 20:30:27,539 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [547536982] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:27,539 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:27,539 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-21 20:30:27,539 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [235412011] [2021-10-21 20:30:27,541 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-21 20:30:27,542 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:27,542 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-21 20:30:27,542 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-21 20:30:27,542 INFO L87 Difference]: Start difference. First operand 4370 states and 7518 transitions. Second operand has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:28,160 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:28,161 INFO L93 Difference]: Finished difference Result 6478 states and 10803 transitions. [2021-10-21 20:30:28,161 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-21 20:30:28,161 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 67 [2021-10-21 20:30:28,161 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:28,172 INFO L225 Difference]: With dead ends: 6478 [2021-10-21 20:30:28,172 INFO L226 Difference]: Without dead ends: 4606 [2021-10-21 20:30:28,176 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 18.6ms TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-10-21 20:30:28,182 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4606 states. [2021-10-21 20:30:28,489 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4606 to 3908. [2021-10-21 20:30:28,494 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3908 states, 3902 states have (on average 1.7391081496668375) internal successors, (6786), 3907 states have internal predecessors, (6786), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:28,503 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3908 states to 3908 states and 6786 transitions. [2021-10-21 20:30:28,503 INFO L78 Accepts]: Start accepts. Automaton has 3908 states and 6786 transitions. Word has length 67 [2021-10-21 20:30:28,504 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:28,504 INFO L470 AbstractCegarLoop]: Abstraction has 3908 states and 6786 transitions. [2021-10-21 20:30:28,504 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:28,504 INFO L276 IsEmpty]: Start isEmpty. Operand 3908 states and 6786 transitions. [2021-10-21 20:30:28,510 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-10-21 20:30:28,510 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:28,510 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:28,511 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2021-10-21 20:30:28,511 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:28,511 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:28,512 INFO L82 PathProgramCache]: Analyzing trace with hash 167071917, now seen corresponding path program 1 times [2021-10-21 20:30:28,512 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:28,512 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [272568625] [2021-10-21 20:30:28,512 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:28,512 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:28,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:28,561 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-21 20:30:28,561 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:28,561 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [272568625] [2021-10-21 20:30:28,562 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [272568625] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:28,562 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:28,562 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-21 20:30:28,562 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [695335302] [2021-10-21 20:30:28,563 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-21 20:30:28,563 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:28,564 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-21 20:30:28,564 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:30:28,564 INFO L87 Difference]: Start difference. First operand 3908 states and 6786 transitions. Second operand has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:29,047 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:29,047 INFO L93 Difference]: Finished difference Result 11510 states and 20000 transitions. [2021-10-21 20:30:29,048 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-21 20:30:29,048 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 67 [2021-10-21 20:30:29,048 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:29,070 INFO L225 Difference]: With dead ends: 11510 [2021-10-21 20:30:29,070 INFO L226 Difference]: Without dead ends: 7640 [2021-10-21 20:30:29,076 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 1.9ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:30:29,086 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7640 states. [2021-10-21 20:30:29,439 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7640 to 6198. [2021-10-21 20:30:29,448 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6198 states, 6192 states have (on average 1.7782622739018088) internal successors, (11011), 6197 states have internal predecessors, (11011), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:29,463 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6198 states to 6198 states and 11011 transitions. [2021-10-21 20:30:29,463 INFO L78 Accepts]: Start accepts. Automaton has 6198 states and 11011 transitions. Word has length 67 [2021-10-21 20:30:29,463 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:29,464 INFO L470 AbstractCegarLoop]: Abstraction has 6198 states and 11011 transitions. [2021-10-21 20:30:29,464 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:29,464 INFO L276 IsEmpty]: Start isEmpty. Operand 6198 states and 11011 transitions. [2021-10-21 20:30:29,473 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2021-10-21 20:30:29,474 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:29,474 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:29,474 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2021-10-21 20:30:29,474 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:29,475 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:29,475 INFO L82 PathProgramCache]: Analyzing trace with hash -268562696, now seen corresponding path program 1 times [2021-10-21 20:30:29,475 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:29,476 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1277194695] [2021-10-21 20:30:29,476 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:29,476 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:29,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:29,522 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-21 20:30:29,522 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:29,522 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1277194695] [2021-10-21 20:30:29,523 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1277194695] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:29,523 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:29,523 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-21 20:30:29,523 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [966160625] [2021-10-21 20:30:29,523 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-21 20:30:29,524 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:29,524 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-21 20:30:29,524 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:30:29,525 INFO L87 Difference]: Start difference. First operand 6198 states and 11011 transitions. Second operand has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:30,166 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:30,166 INFO L93 Difference]: Finished difference Result 18342 states and 32605 transitions. [2021-10-21 20:30:30,167 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-21 20:30:30,167 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2021-10-21 20:30:30,167 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:30,243 INFO L225 Difference]: With dead ends: 18342 [2021-10-21 20:30:30,244 INFO L226 Difference]: Without dead ends: 12186 [2021-10-21 20:30:30,254 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 1.7ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-21 20:30:30,269 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12186 states. [2021-10-21 20:30:30,888 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12186 to 10744. [2021-10-21 20:30:30,902 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10744 states, 10738 states have (on average 1.8033153287390575) internal successors, (19364), 10743 states have internal predecessors, (19364), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:30,934 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10744 states to 10744 states and 19364 transitions. [2021-10-21 20:30:30,934 INFO L78 Accepts]: Start accepts. Automaton has 10744 states and 19364 transitions. Word has length 68 [2021-10-21 20:30:30,935 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:30,935 INFO L470 AbstractCegarLoop]: Abstraction has 10744 states and 19364 transitions. [2021-10-21 20:30:30,935 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:30,935 INFO L276 IsEmpty]: Start isEmpty. Operand 10744 states and 19364 transitions. [2021-10-21 20:30:30,950 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-10-21 20:30:30,950 INFO L504 BasicCegarLoop]: Found error trace [2021-10-21 20:30:30,951 INFO L512 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-21 20:30:30,951 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2021-10-21 20:30:30,951 INFO L402 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-21 20:30:30,952 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-21 20:30:30,952 INFO L82 PathProgramCache]: Analyzing trace with hash -552890897, now seen corresponding path program 1 times [2021-10-21 20:30:30,952 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-21 20:30:30,953 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1276458291] [2021-10-21 20:30:30,953 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-21 20:30:30,953 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-21 20:30:30,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-21 20:30:31,049 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-21 20:30:31,049 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-21 20:30:31,050 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1276458291] [2021-10-21 20:30:31,050 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1276458291] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-21 20:30:31,050 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-21 20:30:31,050 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-21 20:30:31,050 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [978742677] [2021-10-21 20:30:31,051 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-10-21 20:30:31,051 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-21 20:30:31,051 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-21 20:30:31,052 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-21 20:30:31,052 INFO L87 Difference]: Start difference. First operand 10744 states and 19364 transitions. Second operand has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:31,656 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-21 20:30:31,657 INFO L93 Difference]: Finished difference Result 11460 states and 20513 transitions. [2021-10-21 20:30:31,657 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-10-21 20:30:31,657 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 69 [2021-10-21 20:30:31,658 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-21 20:30:31,658 INFO L225 Difference]: With dead ends: 11460 [2021-10-21 20:30:31,658 INFO L226 Difference]: Without dead ends: 0 [2021-10-21 20:30:31,669 INFO L781 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 16.5ms TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-10-21 20:30:31,669 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-10-21 20:30:31,670 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-10-21 20:30:31,670 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:31,670 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-10-21 20:30:31,670 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 69 [2021-10-21 20:30:31,670 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-21 20:30:31,671 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-21 20:30:31,671 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-21 20:30:31,671 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-10-21 20:30:31,671 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-10-21 20:30:31,674 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION [2021-10-21 20:30:31,674 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION [2021-10-21 20:30:31,675 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION [2021-10-21 20:30:31,675 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION [2021-10-21 20:30:31,675 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION [2021-10-21 20:30:31,675 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION [2021-10-21 20:30:31,676 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2021-10-21 20:30:31,678 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-10-21 20:30:31,688 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:31,831 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:32,084 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:32,111 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:32,113 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:32,895 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:32,978 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:33,598 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:33,637 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:34,049 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:34,394 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:34,822 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:34,983 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:35,078 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:35,137 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:35,138 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:35,324 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:35,382 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:35,427 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:35,469 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:35,928 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:36,040 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:36,418 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:36,419 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:36,492 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:36,699 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:36,821 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:37,007 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:37,181 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:37,306 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:37,389 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:37,443 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:37,601 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:37,762 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:38,027 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:38,095 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:38,178 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:38,249 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:38,271 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:38,344 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:38,623 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:38,624 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:38,720 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:38,722 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:38,783 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:39,208 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:39,293 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:39,416 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:39,416 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:39,417 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:39,611 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:39,647 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:40,013 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:40,014 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:40,031 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:40,071 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:40,457 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:40,552 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:40,658 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:40,778 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:40,892 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:40,927 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:41,033 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:41,033 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:41,075 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:41,180 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:41,181 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:41,400 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:41,736 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:41,855 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:41,959 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:42,384 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:42,431 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:42,741 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:42,742 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:43,223 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:43,277 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:43,278 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:43,341 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:43,701 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:43,716 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:43,737 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:43,981 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:44,087 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:44,311 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:44,393 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:44,644 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:44,707 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:44,849 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:44,962 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:45,006 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:45,040 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:45,124 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:45,136 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:45,606 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:45,785 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:45,786 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:46,049 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:46,119 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:46,119 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:46,120 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:46,141 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:46,165 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:46,377 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:46,591 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:46,645 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:46,746 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:46,788 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:46,789 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:46,791 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:47,029 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:47,029 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:47,078 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:47,141 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:47,204 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:47,306 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:47,683 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:47,738 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:47,833 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:47,882 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:47,986 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:48,108 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:48,350 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:48,590 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:49,058 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:49,161 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:49,228 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:49,428 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:49,429 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:49,480 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:49,538 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:49,568 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:49,736 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:49,823 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:49,895 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:49,929 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:50,031 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:50,032 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:50,096 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:50,136 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:50,264 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:50,367 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:50,409 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:50,757 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:50,791 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:50,896 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:51,077 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:51,101 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:51,203 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:51,408 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:30:51,588 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-21 20:31:33,457 INFO L857 garLoopResultBuilder]: For program point L1026-3(lines 1026 1030) no Hoare annotation was computed. [2021-10-21 20:31:33,457 INFO L857 garLoopResultBuilder]: For program point L1557(lines 1557 1565) no Hoare annotation was computed. [2021-10-21 20:31:33,457 INFO L857 garLoopResultBuilder]: For program point L1557-2(lines 1557 1565) no Hoare annotation was computed. [2021-10-21 20:31:33,458 INFO L857 garLoopResultBuilder]: For program point L2482(lines 2482 2486) no Hoare annotation was computed. [2021-10-21 20:31:33,458 INFO L857 garLoopResultBuilder]: For program point L1557-4(lines 1557 1565) no Hoare annotation was computed. [2021-10-21 20:31:33,458 INFO L853 garLoopResultBuilder]: At program point L2482-1(lines 2351 2500) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-21 20:31:33,458 INFO L853 garLoopResultBuilder]: At program point L1822(lines 1817 1825) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,459 INFO L857 garLoopResultBuilder]: For program point L2616(lines 2616 2623) no Hoare annotation was computed. [2021-10-21 20:31:33,459 INFO L860 garLoopResultBuilder]: At program point L2616-1(lines 2616 2623) the Hoare annotation is: true [2021-10-21 20:31:33,459 INFO L857 garLoopResultBuilder]: For program point L2352(lines 2351 2500) no Hoare annotation was computed. [2021-10-21 20:31:33,459 INFO L857 garLoopResultBuilder]: For program point L1560(lines 1560 1564) no Hoare annotation was computed. [2021-10-21 20:31:33,459 INFO L853 garLoopResultBuilder]: At program point L1560-2(lines 1 2659) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (not (= ~rjh~0 1)) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (not (= ~__ste_email_to0~0 1))) [2021-10-21 20:31:33,459 INFO L857 garLoopResultBuilder]: For program point L1560-3(lines 1560 1564) no Hoare annotation was computed. [2021-10-21 20:31:33,460 INFO L853 garLoopResultBuilder]: At program point L1560-5(lines 1 2659) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1)) (= ULTIMATE.start_setClientId_~handle 2)) [2021-10-21 20:31:33,460 INFO L857 garLoopResultBuilder]: For program point L1560-6(lines 1560 1564) no Hoare annotation was computed. [2021-10-21 20:31:33,460 INFO L853 garLoopResultBuilder]: At program point L1560-8(lines 1 2659) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle 3) (= ~__ste_ClientAddressBook_size0~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1))) [2021-10-21 20:31:33,460 INFO L857 garLoopResultBuilder]: For program point L2353(lines 2353 2357) no Hoare annotation was computed. [2021-10-21 20:31:33,460 INFO L857 garLoopResultBuilder]: For program point L1957(lines 1957 1968) no Hoare annotation was computed. [2021-10-21 20:31:33,460 INFO L857 garLoopResultBuilder]: For program point L1957-1(lines 1957 1968) no Hoare annotation was computed. [2021-10-21 20:31:33,461 INFO L857 garLoopResultBuilder]: For program point L1957-2(lines 1957 1968) no Hoare annotation was computed. [2021-10-21 20:31:33,461 INFO L857 garLoopResultBuilder]: For program point L1957-3(lines 1957 1968) no Hoare annotation was computed. [2021-10-21 20:31:33,461 INFO L857 garLoopResultBuilder]: For program point L1957-4(lines 1957 1968) no Hoare annotation was computed. [2021-10-21 20:31:33,461 INFO L857 garLoopResultBuilder]: For program point L1957-5(lines 1957 1968) no Hoare annotation was computed. [2021-10-21 20:31:33,461 INFO L857 garLoopResultBuilder]: For program point L1957-6(lines 1957 1968) no Hoare annotation was computed. [2021-10-21 20:31:33,461 INFO L857 garLoopResultBuilder]: For program point L1957-7(lines 1957 1968) no Hoare annotation was computed. [2021-10-21 20:31:33,462 INFO L857 garLoopResultBuilder]: For program point L1957-8(lines 1957 1968) no Hoare annotation was computed. [2021-10-21 20:31:33,462 INFO L857 garLoopResultBuilder]: For program point L1957-9(lines 1957 1968) no Hoare annotation was computed. [2021-10-21 20:31:33,462 INFO L857 garLoopResultBuilder]: For program point L1957-10(lines 1957 1968) no Hoare annotation was computed. [2021-10-21 20:31:33,462 INFO L857 garLoopResultBuilder]: For program point L1957-11(lines 1957 1968) no Hoare annotation was computed. [2021-10-21 20:31:33,462 INFO L857 garLoopResultBuilder]: For program point L639(lines 639 655) no Hoare annotation was computed. [2021-10-21 20:31:33,462 INFO L857 garLoopResultBuilder]: For program point L639-1(lines 639 655) no Hoare annotation was computed. [2021-10-21 20:31:33,462 INFO L857 garLoopResultBuilder]: For program point L1961(lines 1961 1967) no Hoare annotation was computed. [2021-10-21 20:31:33,463 INFO L857 garLoopResultBuilder]: For program point L1961-1(lines 1961 1967) no Hoare annotation was computed. [2021-10-21 20:31:33,463 INFO L857 garLoopResultBuilder]: For program point L1961-2(lines 1961 1967) no Hoare annotation was computed. [2021-10-21 20:31:33,463 INFO L857 garLoopResultBuilder]: For program point L1961-3(lines 1961 1967) no Hoare annotation was computed. [2021-10-21 20:31:33,463 INFO L857 garLoopResultBuilder]: For program point L1961-4(lines 1961 1967) no Hoare annotation was computed. [2021-10-21 20:31:33,463 INFO L857 garLoopResultBuilder]: For program point L1961-5(lines 1961 1967) no Hoare annotation was computed. [2021-10-21 20:31:33,463 INFO L857 garLoopResultBuilder]: For program point L1961-6(lines 1961 1967) no Hoare annotation was computed. [2021-10-21 20:31:33,463 INFO L857 garLoopResultBuilder]: For program point L1961-7(lines 1961 1967) no Hoare annotation was computed. [2021-10-21 20:31:33,464 INFO L857 garLoopResultBuilder]: For program point L1697(lines 1697 1716) no Hoare annotation was computed. [2021-10-21 20:31:33,464 INFO L857 garLoopResultBuilder]: For program point L1961-8(lines 1961 1967) no Hoare annotation was computed. [2021-10-21 20:31:33,464 INFO L857 garLoopResultBuilder]: For program point L1697-1(lines 1697 1716) no Hoare annotation was computed. [2021-10-21 20:31:33,464 INFO L857 garLoopResultBuilder]: For program point L1961-9(lines 1961 1967) no Hoare annotation was computed. [2021-10-21 20:31:33,464 INFO L857 garLoopResultBuilder]: For program point L1961-10(lines 1961 1967) no Hoare annotation was computed. [2021-10-21 20:31:33,464 INFO L857 garLoopResultBuilder]: For program point L1961-11(lines 1961 1967) no Hoare annotation was computed. [2021-10-21 20:31:33,465 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2021-10-21 20:31:33,465 INFO L857 garLoopResultBuilder]: For program point L2359(lines 2359 2499) no Hoare annotation was computed. [2021-10-21 20:31:33,465 INFO L853 garLoopResultBuilder]: At program point L1831(lines 1826 1834) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,465 INFO L860 garLoopResultBuilder]: At program point L2624(lines 2606 2626) the Hoare annotation is: true [2021-10-21 20:31:33,465 INFO L857 garLoopResultBuilder]: For program point L643(lines 643 654) no Hoare annotation was computed. [2021-10-21 20:31:33,466 INFO L857 garLoopResultBuilder]: For program point L643-1(lines 643 654) no Hoare annotation was computed. [2021-10-21 20:31:33,466 INFO L853 garLoopResultBuilder]: At program point L1966(lines 1953 1971) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10) (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-21 20:31:33,466 INFO L853 garLoopResultBuilder]: At program point L1966-1(lines 1953 1971) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,466 INFO L853 garLoopResultBuilder]: At program point L1966-2(lines 1953 1971) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,467 INFO L853 garLoopResultBuilder]: At program point L1966-3(lines 1953 1971) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,467 INFO L853 garLoopResultBuilder]: At program point L1966-4(lines 1953 1971) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= 2 ULTIMATE.start_incoming_~client)) [2021-10-21 20:31:33,467 INFO L853 garLoopResultBuilder]: At program point L1966-5(lines 1953 1971) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,467 INFO L853 garLoopResultBuilder]: At program point L1966-6(lines 1953 1971) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,468 INFO L853 garLoopResultBuilder]: At program point L1966-7(lines 1953 1971) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,468 INFO L853 garLoopResultBuilder]: At program point L1966-8(lines 1953 1971) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-21 20:31:33,468 INFO L860 garLoopResultBuilder]: At program point L1966-9(lines 1953 1971) the Hoare annotation is: true [2021-10-21 20:31:33,468 INFO L853 garLoopResultBuilder]: At program point L1966-10(lines 1953 1971) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-21 20:31:33,468 INFO L860 garLoopResultBuilder]: At program point L1966-11(lines 1953 1971) the Hoare annotation is: true [2021-10-21 20:31:33,469 INFO L857 garLoopResultBuilder]: For program point L2363(lines 2363 2367) no Hoare annotation was computed. [2021-10-21 20:31:33,469 INFO L857 garLoopResultBuilder]: For program point L647(lines 647 653) no Hoare annotation was computed. [2021-10-21 20:31:33,469 INFO L857 garLoopResultBuilder]: For program point L647-1(lines 647 653) no Hoare annotation was computed. [2021-10-21 20:31:33,469 INFO L853 garLoopResultBuilder]: At program point L1840(lines 1835 1843) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,469 INFO L853 garLoopResultBuilder]: At program point L2501(lines 2350 2502) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle 3) (= ~bob~0 1) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1))) [2021-10-21 20:31:33,470 INFO L853 garLoopResultBuilder]: At program point L2369(lines 2359 2499) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-21 20:31:33,470 INFO L857 garLoopResultBuilder]: For program point L1048(lines 1048 1064) no Hoare annotation was computed. [2021-10-21 20:31:33,470 INFO L857 garLoopResultBuilder]: For program point L1048-1(lines 1048 1064) no Hoare annotation was computed. [2021-10-21 20:31:33,470 INFO L857 garLoopResultBuilder]: For program point L1048-2(lines 1048 1064) no Hoare annotation was computed. [2021-10-21 20:31:33,470 INFO L857 garLoopResultBuilder]: For program point L1048-3(lines 1048 1064) no Hoare annotation was computed. [2021-10-21 20:31:33,470 INFO L857 garLoopResultBuilder]: For program point L1048-4(lines 1048 1064) no Hoare annotation was computed. [2021-10-21 20:31:33,470 INFO L857 garLoopResultBuilder]: For program point L1048-5(lines 1048 1064) no Hoare annotation was computed. [2021-10-21 20:31:33,471 INFO L853 garLoopResultBuilder]: At program point L652(lines 635 658) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,471 INFO L853 garLoopResultBuilder]: At program point L652-1(lines 635 658) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,471 INFO L857 garLoopResultBuilder]: For program point L1976(lines 1976 1984) no Hoare annotation was computed. [2021-10-21 20:31:33,471 INFO L857 garLoopResultBuilder]: For program point L1976-2(lines 1976 1984) no Hoare annotation was computed. [2021-10-21 20:31:33,471 INFO L857 garLoopResultBuilder]: For program point L1976-4(lines 1976 1984) no Hoare annotation was computed. [2021-10-21 20:31:33,471 INFO L857 garLoopResultBuilder]: For program point L1976-6(lines 1976 1984) no Hoare annotation was computed. [2021-10-21 20:31:33,472 INFO L857 garLoopResultBuilder]: For program point L1976-8(lines 1976 1984) no Hoare annotation was computed. [2021-10-21 20:31:33,472 INFO L857 garLoopResultBuilder]: For program point L1976-10(lines 1976 1984) no Hoare annotation was computed. [2021-10-21 20:31:33,472 INFO L857 garLoopResultBuilder]: For program point L1976-12(lines 1976 1984) no Hoare annotation was computed. [2021-10-21 20:31:33,472 INFO L857 garLoopResultBuilder]: For program point L1052(lines 1052 1063) no Hoare annotation was computed. [2021-10-21 20:31:33,472 INFO L857 garLoopResultBuilder]: For program point L1052-1(lines 1052 1063) no Hoare annotation was computed. [2021-10-21 20:31:33,472 INFO L857 garLoopResultBuilder]: For program point L1052-2(lines 1052 1063) no Hoare annotation was computed. [2021-10-21 20:31:33,473 INFO L857 garLoopResultBuilder]: For program point L1052-3(lines 1052 1063) no Hoare annotation was computed. [2021-10-21 20:31:33,473 INFO L857 garLoopResultBuilder]: For program point L920(lines 920 981) no Hoare annotation was computed. [2021-10-21 20:31:33,473 INFO L857 garLoopResultBuilder]: For program point L1052-4(lines 1052 1063) no Hoare annotation was computed. [2021-10-21 20:31:33,473 INFO L857 garLoopResultBuilder]: For program point L920-1(lines 920 981) no Hoare annotation was computed. [2021-10-21 20:31:33,473 INFO L857 garLoopResultBuilder]: For program point L1052-5(lines 1052 1063) no Hoare annotation was computed. [2021-10-21 20:31:33,473 INFO L857 garLoopResultBuilder]: For program point L920-2(lines 920 981) no Hoare annotation was computed. [2021-10-21 20:31:33,473 INFO L857 garLoopResultBuilder]: For program point L920-3(lines 920 981) no Hoare annotation was computed. [2021-10-21 20:31:33,474 INFO L857 garLoopResultBuilder]: For program point L2374(lines 2374 2381) no Hoare annotation was computed. [2021-10-21 20:31:33,474 INFO L857 garLoopResultBuilder]: For program point L921(lines 921 937) no Hoare annotation was computed. [2021-10-21 20:31:33,474 INFO L857 garLoopResultBuilder]: For program point L921-1(lines 921 937) no Hoare annotation was computed. [2021-10-21 20:31:33,474 INFO L857 garLoopResultBuilder]: For program point L921-2(lines 921 937) no Hoare annotation was computed. [2021-10-21 20:31:33,474 INFO L857 garLoopResultBuilder]: For program point L921-3(lines 921 937) no Hoare annotation was computed. [2021-10-21 20:31:33,474 INFO L857 garLoopResultBuilder]: For program point L1979(lines 1979 1983) no Hoare annotation was computed. [2021-10-21 20:31:33,475 INFO L853 garLoopResultBuilder]: At program point L1979-2(lines 1972 1987) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1)) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,475 INFO L857 garLoopResultBuilder]: For program point L1979-3(lines 1979 1983) no Hoare annotation was computed. [2021-10-21 20:31:33,475 INFO L853 garLoopResultBuilder]: At program point L1979-5(lines 1972 1987) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-10-21 20:31:33,475 INFO L857 garLoopResultBuilder]: For program point L1979-6(lines 1979 1983) no Hoare annotation was computed. [2021-10-21 20:31:33,475 INFO L853 garLoopResultBuilder]: At program point L1979-8(lines 1972 1987) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,476 INFO L857 garLoopResultBuilder]: For program point L1979-9(lines 1979 1983) no Hoare annotation was computed. [2021-10-21 20:31:33,476 INFO L853 garLoopResultBuilder]: At program point L1979-11(lines 1972 1987) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,476 INFO L857 garLoopResultBuilder]: For program point L1979-12(lines 1979 1983) no Hoare annotation was computed. [2021-10-21 20:31:33,476 INFO L853 garLoopResultBuilder]: At program point L1979-14(lines 1972 1987) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,476 INFO L857 garLoopResultBuilder]: For program point L1979-15(lines 1979 1983) no Hoare annotation was computed. [2021-10-21 20:31:33,477 INFO L853 garLoopResultBuilder]: At program point L1979-17(lines 1972 1987) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,477 INFO L857 garLoopResultBuilder]: For program point L1979-18(lines 1979 1983) no Hoare annotation was computed. [2021-10-21 20:31:33,477 INFO L853 garLoopResultBuilder]: At program point L1979-20(lines 1972 1987) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,477 INFO L857 garLoopResultBuilder]: For program point L1056(lines 1056 1062) no Hoare annotation was computed. [2021-10-21 20:31:33,477 INFO L857 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-10-21 20:31:33,477 INFO L857 garLoopResultBuilder]: For program point L1056-1(lines 1056 1062) no Hoare annotation was computed. [2021-10-21 20:31:33,478 INFO L857 garLoopResultBuilder]: For program point L1056-2(lines 1056 1062) no Hoare annotation was computed. [2021-10-21 20:31:33,478 INFO L857 garLoopResultBuilder]: For program point L1056-3(lines 1056 1062) no Hoare annotation was computed. [2021-10-21 20:31:33,478 INFO L857 garLoopResultBuilder]: For program point L1056-4(lines 1056 1062) no Hoare annotation was computed. [2021-10-21 20:31:33,478 INFO L857 garLoopResultBuilder]: For program point L1056-5(lines 1056 1062) no Hoare annotation was computed. [2021-10-21 20:31:33,478 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2021-10-21 20:31:33,478 INFO L857 garLoopResultBuilder]: For program point L925(lines 925 936) no Hoare annotation was computed. [2021-10-21 20:31:33,479 INFO L857 garLoopResultBuilder]: For program point L925-1(lines 925 936) no Hoare annotation was computed. [2021-10-21 20:31:33,479 INFO L857 garLoopResultBuilder]: For program point L925-2(lines 925 936) no Hoare annotation was computed. [2021-10-21 20:31:33,479 INFO L857 garLoopResultBuilder]: For program point L925-3(lines 925 936) no Hoare annotation was computed. [2021-10-21 20:31:33,479 INFO L857 garLoopResultBuilder]: For program point L663(lines 663 675) no Hoare annotation was computed. [2021-10-21 20:31:33,479 INFO L853 garLoopResultBuilder]: At program point L1061(lines 1044 1067) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10) (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-21 20:31:33,480 INFO L853 garLoopResultBuilder]: At program point L1061-1(lines 1044 1067) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,480 INFO L853 garLoopResultBuilder]: At program point L1061-2(lines 1044 1067) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= 2 ULTIMATE.start_incoming_~client)) [2021-10-21 20:31:33,480 INFO L853 garLoopResultBuilder]: At program point L1061-3(lines 1044 1067) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,480 INFO L857 garLoopResultBuilder]: For program point L929(lines 929 935) no Hoare annotation was computed. [2021-10-21 20:31:33,480 INFO L853 garLoopResultBuilder]: At program point L1061-4(lines 1044 1067) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-21 20:31:33,481 INFO L857 garLoopResultBuilder]: For program point L929-1(lines 929 935) no Hoare annotation was computed. [2021-10-21 20:31:33,481 INFO L853 garLoopResultBuilder]: At program point L1061-5(lines 1044 1067) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-21 20:31:33,481 INFO L857 garLoopResultBuilder]: For program point L929-2(lines 929 935) no Hoare annotation was computed. [2021-10-21 20:31:33,481 INFO L857 garLoopResultBuilder]: For program point L929-3(lines 929 935) no Hoare annotation was computed. [2021-10-21 20:31:33,481 INFO L853 garLoopResultBuilder]: At program point L2383(lines 2370 2498) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-21 20:31:33,482 INFO L857 garLoopResultBuilder]: For program point L666(lines 666 674) no Hoare annotation was computed. [2021-10-21 20:31:33,482 INFO L857 garLoopResultBuilder]: For program point L669(lines 669 673) no Hoare annotation was computed. [2021-10-21 20:31:33,482 INFO L853 garLoopResultBuilder]: At program point L669-2(lines 659 678) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-21 20:31:33,482 INFO L853 garLoopResultBuilder]: At program point L1727(lines 1 2659) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (= 2 ULTIMATE.start_incoming_~client)) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-10-21 20:31:33,482 INFO L853 garLoopResultBuilder]: At program point L1727-1(lines 1 2659) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,483 INFO L853 garLoopResultBuilder]: At program point L1727-2(lines 1 2659) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= 2 ULTIMATE.start_incoming_~client)) [2021-10-21 20:31:33,483 INFO L853 garLoopResultBuilder]: At program point L1727-3(lines 1 2659) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,483 INFO L853 garLoopResultBuilder]: At program point L1727-4(lines 1 2659) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-21 20:31:33,483 INFO L853 garLoopResultBuilder]: At program point L1727-5(lines 1 2659) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-21 20:31:33,483 INFO L857 garLoopResultBuilder]: For program point L2388(lines 2388 2392) no Hoare annotation was computed. [2021-10-21 20:31:33,484 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2021-10-21 20:31:33,484 INFO L857 garLoopResultBuilder]: For program point L1994(lines 1994 2005) no Hoare annotation was computed. [2021-10-21 20:31:33,484 INFO L857 garLoopResultBuilder]: For program point L1994-1(lines 1994 2005) no Hoare annotation was computed. [2021-10-21 20:31:33,484 INFO L857 garLoopResultBuilder]: For program point L1994-2(lines 1994 2005) no Hoare annotation was computed. [2021-10-21 20:31:33,484 INFO L857 garLoopResultBuilder]: For program point L1994-3(lines 1994 2005) no Hoare annotation was computed. [2021-10-21 20:31:33,485 INFO L857 garLoopResultBuilder]: For program point L1994-4(lines 1994 2005) no Hoare annotation was computed. [2021-10-21 20:31:33,485 INFO L857 garLoopResultBuilder]: For program point L1994-5(lines 1994 2005) no Hoare annotation was computed. [2021-10-21 20:31:33,485 INFO L857 garLoopResultBuilder]: For program point L1994-6(lines 1994 2005) no Hoare annotation was computed. [2021-10-21 20:31:33,485 INFO L857 garLoopResultBuilder]: For program point L1994-7(lines 1994 2005) no Hoare annotation was computed. [2021-10-21 20:31:33,485 INFO L857 garLoopResultBuilder]: For program point L1994-8(lines 1994 2005) no Hoare annotation was computed. [2021-10-21 20:31:33,485 INFO L857 garLoopResultBuilder]: For program point L1994-9(lines 1994 2005) no Hoare annotation was computed. [2021-10-21 20:31:33,485 INFO L857 garLoopResultBuilder]: For program point L1994-10(lines 1994 2005) no Hoare annotation was computed. [2021-10-21 20:31:33,486 INFO L857 garLoopResultBuilder]: For program point L1994-11(lines 1994 2005) no Hoare annotation was computed. [2021-10-21 20:31:33,486 INFO L857 garLoopResultBuilder]: For program point L1994-12(lines 1994 2005) no Hoare annotation was computed. [2021-10-21 20:31:33,486 INFO L857 garLoopResultBuilder]: For program point L1994-13(lines 1994 2005) no Hoare annotation was computed. [2021-10-21 20:31:33,486 INFO L853 garLoopResultBuilder]: At program point L1863(lines 1859 1865) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,486 INFO L853 garLoopResultBuilder]: At program point L1863-1(lines 1859 1865) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,487 INFO L857 garLoopResultBuilder]: For program point L939(lines 939 980) no Hoare annotation was computed. [2021-10-21 20:31:33,487 INFO L857 garLoopResultBuilder]: For program point L939-1(lines 939 980) no Hoare annotation was computed. [2021-10-21 20:31:33,487 INFO L857 garLoopResultBuilder]: For program point L939-2(lines 939 980) no Hoare annotation was computed. [2021-10-21 20:31:33,487 INFO L857 garLoopResultBuilder]: For program point L939-3(lines 939 980) no Hoare annotation was computed. [2021-10-21 20:31:33,487 INFO L857 garLoopResultBuilder]: For program point L1072(lines 1072 1084) no Hoare annotation was computed. [2021-10-21 20:31:33,487 INFO L857 garLoopResultBuilder]: For program point L940(lines 940 956) no Hoare annotation was computed. [2021-10-21 20:31:33,487 INFO L857 garLoopResultBuilder]: For program point L940-1(lines 940 956) no Hoare annotation was computed. [2021-10-21 20:31:33,488 INFO L857 garLoopResultBuilder]: For program point L940-2(lines 940 956) no Hoare annotation was computed. [2021-10-21 20:31:33,488 INFO L857 garLoopResultBuilder]: For program point L940-3(lines 940 956) no Hoare annotation was computed. [2021-10-21 20:31:33,488 INFO L853 garLoopResultBuilder]: At program point L2394(lines 2384 2497) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-21 20:31:33,488 INFO L857 garLoopResultBuilder]: For program point L1998(lines 1998 2004) no Hoare annotation was computed. [2021-10-21 20:31:33,488 INFO L857 garLoopResultBuilder]: For program point L1998-1(lines 1998 2004) no Hoare annotation was computed. [2021-10-21 20:31:33,488 INFO L857 garLoopResultBuilder]: For program point L1998-2(lines 1998 2004) no Hoare annotation was computed. [2021-10-21 20:31:33,489 INFO L857 garLoopResultBuilder]: For program point L1998-3(lines 1998 2004) no Hoare annotation was computed. [2021-10-21 20:31:33,489 INFO L857 garLoopResultBuilder]: For program point L1998-4(lines 1998 2004) no Hoare annotation was computed. [2021-10-21 20:31:33,489 INFO L857 garLoopResultBuilder]: For program point L1998-5(lines 1998 2004) no Hoare annotation was computed. [2021-10-21 20:31:33,489 INFO L857 garLoopResultBuilder]: For program point L1998-6(lines 1998 2004) no Hoare annotation was computed. [2021-10-21 20:31:33,489 INFO L857 garLoopResultBuilder]: For program point L1998-7(lines 1998 2004) no Hoare annotation was computed. [2021-10-21 20:31:33,489 INFO L857 garLoopResultBuilder]: For program point L1998-8(lines 1998 2004) no Hoare annotation was computed. [2021-10-21 20:31:33,490 INFO L857 garLoopResultBuilder]: For program point L1998-9(lines 1998 2004) no Hoare annotation was computed. [2021-10-21 20:31:33,490 INFO L857 garLoopResultBuilder]: For program point L1998-10(lines 1998 2004) no Hoare annotation was computed. [2021-10-21 20:31:33,490 INFO L857 garLoopResultBuilder]: For program point L1998-11(lines 1998 2004) no Hoare annotation was computed. [2021-10-21 20:31:33,490 INFO L857 garLoopResultBuilder]: For program point L1998-12(lines 1998 2004) no Hoare annotation was computed. [2021-10-21 20:31:33,490 INFO L857 garLoopResultBuilder]: For program point L1998-13(lines 1998 2004) no Hoare annotation was computed. [2021-10-21 20:31:33,490 INFO L857 garLoopResultBuilder]: For program point L1075(lines 1075 1083) no Hoare annotation was computed. [2021-10-21 20:31:33,491 INFO L857 garLoopResultBuilder]: For program point L944(lines 944 955) no Hoare annotation was computed. [2021-10-21 20:31:33,491 INFO L857 garLoopResultBuilder]: For program point L944-1(lines 944 955) no Hoare annotation was computed. [2021-10-21 20:31:33,491 INFO L857 garLoopResultBuilder]: For program point L944-2(lines 944 955) no Hoare annotation was computed. [2021-10-21 20:31:33,491 INFO L857 garLoopResultBuilder]: For program point L944-3(lines 944 955) no Hoare annotation was computed. [2021-10-21 20:31:33,491 INFO L853 garLoopResultBuilder]: At program point L1605(lines 1580 1607) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,491 INFO L853 garLoopResultBuilder]: At program point L1605-1(lines 1580 1607) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,492 INFO L853 garLoopResultBuilder]: At program point L1605-2(lines 1580 1607) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,492 INFO L853 garLoopResultBuilder]: At program point L1605-3(lines 1580 1607) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,492 INFO L860 garLoopResultBuilder]: At program point L1605-4(lines 1580 1607) the Hoare annotation is: true [2021-10-21 20:31:33,492 INFO L860 garLoopResultBuilder]: At program point L1605-5(lines 1580 1607) the Hoare annotation is: true [2021-10-21 20:31:33,492 INFO L857 garLoopResultBuilder]: For program point L2399(lines 2399 2403) no Hoare annotation was computed. [2021-10-21 20:31:33,493 INFO L857 garLoopResultBuilder]: For program point L1078(lines 1078 1082) no Hoare annotation was computed. [2021-10-21 20:31:33,493 INFO L853 garLoopResultBuilder]: At program point L1078-2(lines 1 2659) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (not (= ~__ste_email_to0~0 1))) (.cse4 (= ULTIMATE.start_test_~op2~0 0)) (.cse5 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 (= ULTIMATE.start_test_~op1~0 0) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 (= ULTIMATE.start_test_~op1~0 1) .cse3 .cse4 .cse5))) [2021-10-21 20:31:33,493 INFO L853 garLoopResultBuilder]: At program point L2003(lines 1990 2008) the Hoare annotation is: (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,493 INFO L853 garLoopResultBuilder]: At program point L2003-1(lines 1990 2008) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-10-21 20:31:33,493 INFO L853 garLoopResultBuilder]: At program point L2003-2(lines 1990 2008) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,494 INFO L853 garLoopResultBuilder]: At program point L2003-3(lines 1990 2008) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,494 INFO L853 garLoopResultBuilder]: At program point L2003-4(lines 1990 2008) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,494 INFO L853 garLoopResultBuilder]: At program point L2003-5(lines 1990 2008) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,494 INFO L853 garLoopResultBuilder]: At program point L2003-6(lines 1990 2008) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,495 INFO L853 garLoopResultBuilder]: At program point L2003-7(lines 1990 2008) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,495 INFO L853 garLoopResultBuilder]: At program point L2003-8(lines 1990 2008) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,495 INFO L853 garLoopResultBuilder]: At program point L2003-9(lines 1990 2008) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,495 INFO L853 garLoopResultBuilder]: At program point L2003-10(lines 1990 2008) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4))) [2021-10-21 20:31:33,495 INFO L860 garLoopResultBuilder]: At program point L2003-11(lines 1990 2008) the Hoare annotation is: true [2021-10-21 20:31:33,496 INFO L853 garLoopResultBuilder]: At program point L2003-12(lines 1990 2008) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-21 20:31:33,496 INFO L860 garLoopResultBuilder]: At program point L2003-13(lines 1990 2008) the Hoare annotation is: true [2021-10-21 20:31:33,496 INFO L857 garLoopResultBuilder]: For program point L948(lines 948 954) no Hoare annotation was computed. [2021-10-21 20:31:33,496 INFO L857 garLoopResultBuilder]: For program point L948-1(lines 948 954) no Hoare annotation was computed. [2021-10-21 20:31:33,496 INFO L857 garLoopResultBuilder]: For program point L948-2(lines 948 954) no Hoare annotation was computed. [2021-10-21 20:31:33,496 INFO L857 garLoopResultBuilder]: For program point L948-3(lines 948 954) no Hoare annotation was computed. [2021-10-21 20:31:33,497 INFO L853 garLoopResultBuilder]: At program point L2405(lines 2395 2496) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-21 20:31:33,497 INFO L853 garLoopResultBuilder]: At program point L1613(lines 1608 1616) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,497 INFO L853 garLoopResultBuilder]: At program point L1613-1(lines 1608 1616) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,497 INFO L853 garLoopResultBuilder]: At program point L1613-2(lines 1608 1616) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,497 INFO L853 garLoopResultBuilder]: At program point L1613-3(lines 1608 1616) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,498 INFO L853 garLoopResultBuilder]: At program point L1613-4(lines 1608 1616) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,498 INFO L853 garLoopResultBuilder]: At program point L1613-5(lines 1608 1616) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,498 INFO L853 garLoopResultBuilder]: At program point L1613-6(lines 1608 1616) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,498 INFO L853 garLoopResultBuilder]: At program point L1613-7(lines 1608 1616) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,499 INFO L853 garLoopResultBuilder]: At program point L1613-8(lines 1608 1616) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,499 INFO L860 garLoopResultBuilder]: At program point L1613-9(lines 1608 1616) the Hoare annotation is: true [2021-10-21 20:31:33,499 INFO L853 garLoopResultBuilder]: At program point L1613-10(lines 1608 1616) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,499 INFO L860 garLoopResultBuilder]: At program point L1613-11(lines 1608 1616) the Hoare annotation is: true [2021-10-21 20:31:33,499 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-10-21 20:31:33,499 INFO L857 garLoopResultBuilder]: For program point L1483(lines 1483 1499) no Hoare annotation was computed. [2021-10-21 20:31:33,500 INFO L857 garLoopResultBuilder]: For program point L1483-1(lines 1483 1499) no Hoare annotation was computed. [2021-10-21 20:31:33,500 INFO L857 garLoopResultBuilder]: For program point L1483-2(lines 1483 1499) no Hoare annotation was computed. [2021-10-21 20:31:33,500 INFO L857 garLoopResultBuilder]: For program point L1483-3(lines 1483 1499) no Hoare annotation was computed. [2021-10-21 20:31:33,500 INFO L857 garLoopResultBuilder]: For program point L1483-4(lines 1483 1499) no Hoare annotation was computed. [2021-10-21 20:31:33,500 INFO L857 garLoopResultBuilder]: For program point L1483-5(lines 1483 1499) no Hoare annotation was computed. [2021-10-21 20:31:33,500 INFO L857 garLoopResultBuilder]: For program point L1748(lines 1748 1754) no Hoare annotation was computed. [2021-10-21 20:31:33,501 INFO L853 garLoopResultBuilder]: At program point L1748-1(lines 1740 1757) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,501 INFO L857 garLoopResultBuilder]: For program point L1748-2(lines 1748 1754) no Hoare annotation was computed. [2021-10-21 20:31:33,501 INFO L853 garLoopResultBuilder]: At program point L1748-3(lines 1740 1757) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,501 INFO L857 garLoopResultBuilder]: For program point L1748-4(lines 1748 1754) no Hoare annotation was computed. [2021-10-21 20:31:33,501 INFO L853 garLoopResultBuilder]: At program point L1748-5(lines 1740 1757) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= 2 |ULTIMATE.start_getEmailTo_#res|)) (.cse2 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse3 (= ULTIMATE.start_setClientId_~handle 3)) (.cse4 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse5 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse6 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse7 (= 2 ULTIMATE.start_createEmail_~to)) (.cse8 (= ~bob~0 1)) (.cse9 (= ~rjh~0 2)) (.cse10 (= ULTIMATE.start_outgoing_~size~2 0)) (.cse11 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse12 (= ULTIMATE.start_outgoing_~msg 1)) (.cse13 (= 2 ULTIMATE.start_incoming_~client))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= ULTIMATE.start_setEmailTo_~handle 1) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~__ste_email_to0~0 2) .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13))) [2021-10-21 20:31:33,502 INFO L857 garLoopResultBuilder]: For program point L1748-6(lines 1748 1754) no Hoare annotation was computed. [2021-10-21 20:31:33,502 INFO L853 garLoopResultBuilder]: At program point L1748-7(lines 1740 1757) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,502 INFO L857 garLoopResultBuilder]: For program point L1748-8(lines 1748 1754) no Hoare annotation was computed. [2021-10-21 20:31:33,502 INFO L853 garLoopResultBuilder]: At program point L1748-9(lines 1740 1757) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-21 20:31:33,502 INFO L857 garLoopResultBuilder]: For program point L1748-10(lines 1748 1754) no Hoare annotation was computed. [2021-10-21 20:31:33,503 INFO L853 garLoopResultBuilder]: At program point L1748-11(lines 1740 1757) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-21 20:31:33,503 INFO L857 garLoopResultBuilder]: For program point L2013(lines 2013 2021) no Hoare annotation was computed. [2021-10-21 20:31:33,503 INFO L857 garLoopResultBuilder]: For program point L2013-2(lines 2013 2021) no Hoare annotation was computed. [2021-10-21 20:31:33,503 INFO L857 garLoopResultBuilder]: For program point L2013-4(lines 2013 2021) no Hoare annotation was computed. [2021-10-21 20:31:33,503 INFO L857 garLoopResultBuilder]: For program point L2013-6(lines 2013 2021) no Hoare annotation was computed. [2021-10-21 20:31:33,503 INFO L857 garLoopResultBuilder]: For program point L2013-8(lines 2013 2021) no Hoare annotation was computed. [2021-10-21 20:31:33,503 INFO L857 garLoopResultBuilder]: For program point L2013-10(lines 2013 2021) no Hoare annotation was computed. [2021-10-21 20:31:33,504 INFO L857 garLoopResultBuilder]: For program point L2013-12(lines 2013 2021) no Hoare annotation was computed. [2021-10-21 20:31:33,504 INFO L857 garLoopResultBuilder]: For program point L2013-14(lines 2013 2021) no Hoare annotation was computed. [2021-10-21 20:31:33,504 INFO L857 garLoopResultBuilder]: For program point L2013-16(lines 2013 2021) no Hoare annotation was computed. [2021-10-21 20:31:33,504 INFO L857 garLoopResultBuilder]: For program point L2410(lines 2410 2414) no Hoare annotation was computed. [2021-10-21 20:31:33,504 INFO L857 garLoopResultBuilder]: For program point L2013-18(lines 2013 2021) no Hoare annotation was computed. [2021-10-21 20:31:33,504 INFO L857 garLoopResultBuilder]: For program point L2013-20(lines 2013 2021) no Hoare annotation was computed. [2021-10-21 20:31:33,505 INFO L857 garLoopResultBuilder]: For program point L2013-22(lines 2013 2021) no Hoare annotation was computed. [2021-10-21 20:31:33,505 INFO L857 garLoopResultBuilder]: For program point L2013-24(lines 2013 2021) no Hoare annotation was computed. [2021-10-21 20:31:33,505 INFO L857 garLoopResultBuilder]: For program point L2013-26(lines 2013 2021) no Hoare annotation was computed. [2021-10-21 20:31:33,505 INFO L857 garLoopResultBuilder]: For program point L2013-28(lines 2013 2021) no Hoare annotation was computed. [2021-10-21 20:31:33,505 INFO L857 garLoopResultBuilder]: For program point L2013-30(lines 2013 2021) no Hoare annotation was computed. [2021-10-21 20:31:33,505 INFO L857 garLoopResultBuilder]: For program point L2013-32(lines 2013 2021) no Hoare annotation was computed. [2021-10-21 20:31:33,506 INFO L857 garLoopResultBuilder]: For program point L958(lines 958 979) no Hoare annotation was computed. [2021-10-21 20:31:33,506 INFO L857 garLoopResultBuilder]: For program point L958-1(lines 958 979) no Hoare annotation was computed. [2021-10-21 20:31:33,506 INFO L857 garLoopResultBuilder]: For program point L958-2(lines 958 979) no Hoare annotation was computed. [2021-10-21 20:31:33,506 INFO L857 garLoopResultBuilder]: For program point L958-3(lines 958 979) no Hoare annotation was computed. [2021-10-21 20:31:33,506 INFO L857 garLoopResultBuilder]: For program point L1487(lines 1487 1498) no Hoare annotation was computed. [2021-10-21 20:31:33,506 INFO L857 garLoopResultBuilder]: For program point L1487-1(lines 1487 1498) no Hoare annotation was computed. [2021-10-21 20:31:33,507 INFO L857 garLoopResultBuilder]: For program point L1487-2(lines 1487 1498) no Hoare annotation was computed. [2021-10-21 20:31:33,507 INFO L857 garLoopResultBuilder]: For program point L1487-3(lines 1487 1498) no Hoare annotation was computed. [2021-10-21 20:31:33,507 INFO L857 garLoopResultBuilder]: For program point L1487-4(lines 1487 1498) no Hoare annotation was computed. [2021-10-21 20:31:33,507 INFO L857 garLoopResultBuilder]: For program point L1487-5(lines 1487 1498) no Hoare annotation was computed. [2021-10-21 20:31:33,507 INFO L857 garLoopResultBuilder]: For program point L2016(lines 2016 2020) no Hoare annotation was computed. [2021-10-21 20:31:33,507 INFO L857 garLoopResultBuilder]: For program point L959(lines 959 975) no Hoare annotation was computed. [2021-10-21 20:31:33,508 INFO L853 garLoopResultBuilder]: At program point L2016-2(lines 2009 2024) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,508 INFO L857 garLoopResultBuilder]: For program point L959-1(lines 959 975) no Hoare annotation was computed. [2021-10-21 20:31:33,508 INFO L857 garLoopResultBuilder]: For program point L2016-3(lines 2016 2020) no Hoare annotation was computed. [2021-10-21 20:31:33,508 INFO L857 garLoopResultBuilder]: For program point L959-2(lines 959 975) no Hoare annotation was computed. [2021-10-21 20:31:33,508 INFO L857 garLoopResultBuilder]: For program point L959-3(lines 959 975) no Hoare annotation was computed. [2021-10-21 20:31:33,508 INFO L853 garLoopResultBuilder]: At program point L2016-5(lines 2009 2024) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse1 (= ULTIMATE.start_setClientId_~handle 3)) (.cse2 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse3 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse4 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse5 (= 2 ULTIMATE.start_createEmail_~to)) (.cse6 (= ~bob~0 1)) (.cse7 (= ~rjh~0 2)) (.cse8 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse9 (= ULTIMATE.start_outgoing_~msg 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 .cse3 (= ~__ste_email_to0~0 2) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ULTIMATE.start_setEmailTo_~handle 1) .cse6 .cse7 .cse8 .cse9))) [2021-10-21 20:31:33,509 INFO L857 garLoopResultBuilder]: For program point L2016-6(lines 2016 2020) no Hoare annotation was computed. [2021-10-21 20:31:33,509 INFO L853 garLoopResultBuilder]: At program point L2016-8(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,509 INFO L857 garLoopResultBuilder]: For program point L2016-9(lines 2016 2020) no Hoare annotation was computed. [2021-10-21 20:31:33,509 INFO L853 garLoopResultBuilder]: At program point L2016-11(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,509 INFO L857 garLoopResultBuilder]: For program point L2016-12(lines 2016 2020) no Hoare annotation was computed. [2021-10-21 20:31:33,510 INFO L853 garLoopResultBuilder]: At program point L2016-14(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,510 INFO L857 garLoopResultBuilder]: For program point L2016-15(lines 2016 2020) no Hoare annotation was computed. [2021-10-21 20:31:33,510 INFO L853 garLoopResultBuilder]: At program point L2016-17(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,510 INFO L857 garLoopResultBuilder]: For program point L2016-18(lines 2016 2020) no Hoare annotation was computed. [2021-10-21 20:31:33,510 INFO L853 garLoopResultBuilder]: At program point L2016-20(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,511 INFO L857 garLoopResultBuilder]: For program point L2016-21(lines 2016 2020) no Hoare annotation was computed. [2021-10-21 20:31:33,511 INFO L853 garLoopResultBuilder]: At program point L2016-23(lines 2009 2024) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= 2 |ULTIMATE.start_getEmailTo_#res|)) (.cse2 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse3 (= ULTIMATE.start_setClientId_~handle 3)) (.cse4 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse5 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse6 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse7 (= 2 ULTIMATE.start_createEmail_~to)) (.cse8 (= ~bob~0 1)) (.cse9 (= ~rjh~0 2)) (.cse10 (= ULTIMATE.start_outgoing_~size~2 0)) (.cse11 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse12 (= ULTIMATE.start_outgoing_~msg 1)) (.cse13 (= 2 ULTIMATE.start_incoming_~client))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= ULTIMATE.start_setEmailTo_~handle 1) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~__ste_email_to0~0 2) .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13))) [2021-10-21 20:31:33,511 INFO L857 garLoopResultBuilder]: For program point L2016-24(lines 2016 2020) no Hoare annotation was computed. [2021-10-21 20:31:33,511 INFO L853 garLoopResultBuilder]: At program point L2016-26(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,511 INFO L857 garLoopResultBuilder]: For program point L2016-27(lines 2016 2020) no Hoare annotation was computed. [2021-10-21 20:31:33,512 INFO L853 garLoopResultBuilder]: At program point L2016-29(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,512 INFO L857 garLoopResultBuilder]: For program point L2016-30(lines 2016 2020) no Hoare annotation was computed. [2021-10-21 20:31:33,512 INFO L853 garLoopResultBuilder]: At program point L2016-32(lines 2009 2024) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,512 INFO L857 garLoopResultBuilder]: For program point L2016-33(lines 2016 2020) no Hoare annotation was computed. [2021-10-21 20:31:33,512 INFO L853 garLoopResultBuilder]: At program point L2016-35(lines 2009 2024) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,512 INFO L857 garLoopResultBuilder]: For program point L2016-36(lines 2016 2020) no Hoare annotation was computed. [2021-10-21 20:31:33,513 INFO L853 garLoopResultBuilder]: At program point L2016-38(lines 2009 2024) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,513 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2021-10-21 20:31:33,513 INFO L857 garLoopResultBuilder]: For program point L2016-39(lines 2016 2020) no Hoare annotation was computed. [2021-10-21 20:31:33,513 INFO L853 garLoopResultBuilder]: At program point L2016-41(lines 2009 2024) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-21 20:31:33,513 INFO L857 garLoopResultBuilder]: For program point L2016-42(lines 2016 2020) no Hoare annotation was computed. [2021-10-21 20:31:33,514 INFO L853 garLoopResultBuilder]: At program point L2016-44(lines 2009 2024) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,514 INFO L857 garLoopResultBuilder]: For program point L2016-45(lines 2016 2020) no Hoare annotation was computed. [2021-10-21 20:31:33,514 INFO L853 garLoopResultBuilder]: At program point L2016-47(lines 2009 2024) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-21 20:31:33,514 INFO L857 garLoopResultBuilder]: For program point L2016-48(lines 2016 2020) no Hoare annotation was computed. [2021-10-21 20:31:33,514 INFO L853 garLoopResultBuilder]: At program point L2016-50(lines 2009 2024) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,515 INFO L857 garLoopResultBuilder]: For program point L1491(lines 1491 1497) no Hoare annotation was computed. [2021-10-21 20:31:33,515 INFO L857 garLoopResultBuilder]: For program point L1491-1(lines 1491 1497) no Hoare annotation was computed. [2021-10-21 20:31:33,515 INFO L853 garLoopResultBuilder]: At program point L2416(lines 2406 2495) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-21 20:31:33,515 INFO L857 garLoopResultBuilder]: For program point L1491-2(lines 1491 1497) no Hoare annotation was computed. [2021-10-21 20:31:33,515 INFO L857 garLoopResultBuilder]: For program point L1491-3(lines 1491 1497) no Hoare annotation was computed. [2021-10-21 20:31:33,515 INFO L857 garLoopResultBuilder]: For program point L1491-4(lines 1491 1497) no Hoare annotation was computed. [2021-10-21 20:31:33,516 INFO L857 garLoopResultBuilder]: For program point L1491-5(lines 1491 1497) no Hoare annotation was computed. [2021-10-21 20:31:33,516 INFO L857 garLoopResultBuilder]: For program point L963(lines 963 974) no Hoare annotation was computed. [2021-10-21 20:31:33,516 INFO L857 garLoopResultBuilder]: For program point L963-1(lines 963 974) no Hoare annotation was computed. [2021-10-21 20:31:33,516 INFO L857 garLoopResultBuilder]: For program point L963-2(lines 963 974) no Hoare annotation was computed. [2021-10-21 20:31:33,516 INFO L857 garLoopResultBuilder]: For program point L963-3(lines 963 974) no Hoare annotation was computed. [2021-10-21 20:31:33,516 INFO L857 garLoopResultBuilder]: For program point L967(lines 967 973) no Hoare annotation was computed. [2021-10-21 20:31:33,517 INFO L857 garLoopResultBuilder]: For program point L967-1(lines 967 973) no Hoare annotation was computed. [2021-10-21 20:31:33,517 INFO L857 garLoopResultBuilder]: For program point L967-2(lines 967 973) no Hoare annotation was computed. [2021-10-21 20:31:33,517 INFO L857 garLoopResultBuilder]: For program point L967-3(lines 967 973) no Hoare annotation was computed. [2021-10-21 20:31:33,517 INFO L853 garLoopResultBuilder]: At program point L1496(lines 1479 1502) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,517 INFO L853 garLoopResultBuilder]: At program point L1496-1(lines 1479 1502) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,518 INFO L853 garLoopResultBuilder]: At program point L1496-2(lines 1479 1502) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_outgoing_~size~2 0)) (.cse10 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse11 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse8 .cse9 .cse10 .cse11 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-21 20:31:33,518 INFO L853 garLoopResultBuilder]: At program point L1496-3(lines 1479 1502) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,518 INFO L857 garLoopResultBuilder]: For program point L2421(lines 2421 2428) no Hoare annotation was computed. [2021-10-21 20:31:33,518 INFO L853 garLoopResultBuilder]: At program point L1496-4(lines 1479 1502) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) .cse2) (and .cse0 (not (= ~rjh~0 1)) .cse1 (not (= ULTIMATE.start_createEmail_~to 1)) .cse2 (= |ULTIMATE.start_getClientForwardReceiver_#res| 0)))) [2021-10-21 20:31:33,518 INFO L853 garLoopResultBuilder]: At program point L1496-5(lines 1479 1502) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (not (= ~rjh~0 1))) (.cse2 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse3 (not (= ULTIMATE.start_createEmail_~to 1))) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= |ULTIMATE.start_getClientForwardReceiver_#res| 0)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= 2 ULTIMATE.start_createEmail_~to) .cse3 (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-21 20:31:33,519 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2021-10-21 20:31:33,519 INFO L857 garLoopResultBuilder]: For program point L2560(lines 2560 2568) no Hoare annotation was computed. [2021-10-21 20:31:33,519 INFO L857 garLoopResultBuilder]: For program point L1768(lines 1768 1775) no Hoare annotation was computed. [2021-10-21 20:31:33,519 INFO L853 garLoopResultBuilder]: At program point L1768-1(lines 1671 1682) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,519 INFO L857 garLoopResultBuilder]: For program point L1768-2(lines 1768 1775) no Hoare annotation was computed. [2021-10-21 20:31:33,520 INFO L857 garLoopResultBuilder]: For program point L1768-4(lines 1768 1775) no Hoare annotation was computed. [2021-10-21 20:31:33,520 INFO L853 garLoopResultBuilder]: At program point L1768-5(lines 1794 1806) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,520 INFO L857 garLoopResultBuilder]: For program point L1768-6(lines 1768 1775) no Hoare annotation was computed. [2021-10-21 20:31:33,520 INFO L853 garLoopResultBuilder]: At program point L1768-7(lines 1671 1682) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,520 INFO L857 garLoopResultBuilder]: For program point L1768-8(lines 1768 1775) no Hoare annotation was computed. [2021-10-21 20:31:33,520 INFO L857 garLoopResultBuilder]: For program point L1768-10(lines 1768 1775) no Hoare annotation was computed. [2021-10-21 20:31:33,521 INFO L857 garLoopResultBuilder]: For program point L2297(lines 2297 2303) no Hoare annotation was computed. [2021-10-21 20:31:33,521 INFO L857 garLoopResultBuilder]: For program point L2297-2(lines 2297 2303) no Hoare annotation was computed. [2021-10-21 20:31:33,521 INFO L857 garLoopResultBuilder]: For program point L2297-4(lines 2297 2303) no Hoare annotation was computed. [2021-10-21 20:31:33,521 INFO L857 garLoopResultBuilder]: For program point L2297-6(lines 2297 2303) no Hoare annotation was computed. [2021-10-21 20:31:33,521 INFO L857 garLoopResultBuilder]: For program point L2297-8(lines 2297 2303) no Hoare annotation was computed. [2021-10-21 20:31:33,521 INFO L857 garLoopResultBuilder]: For program point L2297-10(lines 2297 2303) no Hoare annotation was computed. [2021-10-21 20:31:33,522 INFO L853 garLoopResultBuilder]: At program point L1637(lines 1626 1640) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,522 INFO L853 garLoopResultBuilder]: At program point L2430(lines 2417 2494) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-21 20:31:33,522 INFO L853 garLoopResultBuilder]: At program point L978(lines 916 984) the Hoare annotation is: (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,522 INFO L853 garLoopResultBuilder]: At program point L978-1(lines 916 984) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,523 INFO L853 garLoopResultBuilder]: At program point L978-2(lines 916 984) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,523 INFO L853 garLoopResultBuilder]: At program point L978-3(lines 916 984) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,523 INFO L857 garLoopResultBuilder]: For program point L1507(lines 1507 1519) no Hoare annotation was computed. [2021-10-21 20:31:33,523 INFO L857 garLoopResultBuilder]: For program point L1510(lines 1510 1518) no Hoare annotation was computed. [2021-10-21 20:31:33,523 INFO L857 garLoopResultBuilder]: For program point L2435(lines 2435 2439) no Hoare annotation was computed. [2021-10-21 20:31:33,523 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-10-21 20:31:33,524 INFO L857 garLoopResultBuilder]: For program point L1513(lines 1513 1517) no Hoare annotation was computed. [2021-10-21 20:31:33,524 INFO L853 garLoopResultBuilder]: At program point L1513-2(lines 1 2659) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-21 20:31:33,524 INFO L857 garLoopResultBuilder]: For program point L855(lines 855 903) no Hoare annotation was computed. [2021-10-21 20:31:33,524 INFO L853 garLoopResultBuilder]: At program point L2441(lines 2431 2493) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-21 20:31:33,524 INFO L857 garLoopResultBuilder]: For program point L856(lines 856 868) no Hoare annotation was computed. [2021-10-21 20:31:33,525 INFO L857 garLoopResultBuilder]: For program point L989(lines 989 1037) no Hoare annotation was computed. [2021-10-21 20:31:33,525 INFO L857 garLoopResultBuilder]: For program point L989-1(lines 989 1037) no Hoare annotation was computed. [2021-10-21 20:31:33,525 INFO L857 garLoopResultBuilder]: For program point L990(lines 990 1002) no Hoare annotation was computed. [2021-10-21 20:31:33,525 INFO L857 garLoopResultBuilder]: For program point L990-2(lines 990 1002) no Hoare annotation was computed. [2021-10-21 20:31:33,525 INFO L857 garLoopResultBuilder]: For program point L859(lines 859 867) no Hoare annotation was computed. [2021-10-21 20:31:33,525 INFO L857 garLoopResultBuilder]: For program point L2446(lines 2446 2453) no Hoare annotation was computed. [2021-10-21 20:31:33,526 INFO L857 garLoopResultBuilder]: For program point L993(lines 993 1001) no Hoare annotation was computed. [2021-10-21 20:31:33,526 INFO L857 garLoopResultBuilder]: For program point L993-2(lines 993 1001) no Hoare annotation was computed. [2021-10-21 20:31:33,526 INFO L857 garLoopResultBuilder]: For program point L862(lines 862 866) no Hoare annotation was computed. [2021-10-21 20:31:33,526 INFO L857 garLoopResultBuilder]: For program point L1920(lines 1920 1931) no Hoare annotation was computed. [2021-10-21 20:31:33,526 INFO L857 garLoopResultBuilder]: For program point L1920-1(lines 1920 1931) no Hoare annotation was computed. [2021-10-21 20:31:33,526 INFO L857 garLoopResultBuilder]: For program point L1920-2(lines 1920 1931) no Hoare annotation was computed. [2021-10-21 20:31:33,526 INFO L857 garLoopResultBuilder]: For program point L1920-3(lines 1920 1931) no Hoare annotation was computed. [2021-10-21 20:31:33,527 INFO L857 garLoopResultBuilder]: For program point L1920-4(lines 1920 1931) no Hoare annotation was computed. [2021-10-21 20:31:33,527 INFO L857 garLoopResultBuilder]: For program point L1920-5(lines 1920 1931) no Hoare annotation was computed. [2021-10-21 20:31:33,527 INFO L857 garLoopResultBuilder]: For program point L996(lines 996 1000) no Hoare annotation was computed. [2021-10-21 20:31:33,527 INFO L857 garLoopResultBuilder]: For program point L996-3(lines 996 1000) no Hoare annotation was computed. [2021-10-21 20:31:33,527 INFO L857 garLoopResultBuilder]: For program point L1924(lines 1924 1930) no Hoare annotation was computed. [2021-10-21 20:31:33,527 INFO L857 garLoopResultBuilder]: For program point L1924-1(lines 1924 1930) no Hoare annotation was computed. [2021-10-21 20:31:33,528 INFO L857 garLoopResultBuilder]: For program point L1924-2(lines 1924 1930) no Hoare annotation was computed. [2021-10-21 20:31:33,528 INFO L857 garLoopResultBuilder]: For program point L1924-3(lines 1924 1930) no Hoare annotation was computed. [2021-10-21 20:31:33,528 INFO L857 garLoopResultBuilder]: For program point L1924-4(lines 1924 1930) no Hoare annotation was computed. [2021-10-21 20:31:33,528 INFO L857 garLoopResultBuilder]: For program point L1924-5(lines 1924 1930) no Hoare annotation was computed. [2021-10-21 20:31:33,528 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2021-10-21 20:31:33,528 INFO L857 garLoopResultBuilder]: For program point L1530(lines 1530 1546) no Hoare annotation was computed. [2021-10-21 20:31:33,529 INFO L857 garLoopResultBuilder]: For program point L1530-1(lines 1530 1546) no Hoare annotation was computed. [2021-10-21 20:31:33,529 INFO L857 garLoopResultBuilder]: For program point L1530-2(lines 1530 1546) no Hoare annotation was computed. [2021-10-21 20:31:33,529 INFO L857 garLoopResultBuilder]: For program point L1530-3(lines 1530 1546) no Hoare annotation was computed. [2021-10-21 20:31:33,529 INFO L853 garLoopResultBuilder]: At program point L2455(lines 2442 2492) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-21 20:31:33,529 INFO L857 garLoopResultBuilder]: For program point L1530-4(lines 1530 1546) no Hoare annotation was computed. [2021-10-21 20:31:33,529 INFO L857 garLoopResultBuilder]: For program point L1530-5(lines 1530 1546) no Hoare annotation was computed. [2021-10-21 20:31:33,530 INFO L857 garLoopResultBuilder]: For program point L870(lines 870 902) no Hoare annotation was computed. [2021-10-21 20:31:33,530 INFO L857 garLoopResultBuilder]: For program point L871(lines 871 883) no Hoare annotation was computed. [2021-10-21 20:31:33,530 INFO L857 garLoopResultBuilder]: For program point L1004(lines 1004 1036) no Hoare annotation was computed. [2021-10-21 20:31:33,530 INFO L857 garLoopResultBuilder]: For program point L1004-1(lines 1004 1036) no Hoare annotation was computed. [2021-10-21 20:31:33,530 INFO L853 garLoopResultBuilder]: At program point L1929(lines 1916 1934) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,531 INFO L853 garLoopResultBuilder]: At program point L1929-1(lines 1916 1934) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,531 INFO L853 garLoopResultBuilder]: At program point L1929-2(lines 1916 1934) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,531 INFO L853 garLoopResultBuilder]: At program point L1929-3(lines 1916 1934) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,531 INFO L860 garLoopResultBuilder]: At program point L1929-4(lines 1916 1934) the Hoare annotation is: true [2021-10-21 20:31:33,531 INFO L860 garLoopResultBuilder]: At program point L1929-5(lines 1916 1934) the Hoare annotation is: true [2021-10-21 20:31:33,532 INFO L857 garLoopResultBuilder]: For program point L1005(lines 1005 1017) no Hoare annotation was computed. [2021-10-21 20:31:33,532 INFO L857 garLoopResultBuilder]: For program point L1005-2(lines 1005 1017) no Hoare annotation was computed. [2021-10-21 20:31:33,532 INFO L857 garLoopResultBuilder]: For program point L1534(lines 1534 1545) no Hoare annotation was computed. [2021-10-21 20:31:33,532 INFO L857 garLoopResultBuilder]: For program point L1534-1(lines 1534 1545) no Hoare annotation was computed. [2021-10-21 20:31:33,532 INFO L857 garLoopResultBuilder]: For program point L1534-2(lines 1534 1545) no Hoare annotation was computed. [2021-10-21 20:31:33,532 INFO L857 garLoopResultBuilder]: For program point L1534-3(lines 1534 1545) no Hoare annotation was computed. [2021-10-21 20:31:33,532 INFO L857 garLoopResultBuilder]: For program point L1534-4(lines 1534 1545) no Hoare annotation was computed. [2021-10-21 20:31:33,533 INFO L857 garLoopResultBuilder]: For program point L1534-5(lines 1534 1545) no Hoare annotation was computed. [2021-10-21 20:31:33,533 INFO L857 garLoopResultBuilder]: For program point L874(lines 874 882) no Hoare annotation was computed. [2021-10-21 20:31:33,533 INFO L857 garLoopResultBuilder]: For program point L2460(lines 2460 2464) no Hoare annotation was computed. [2021-10-21 20:31:33,533 INFO L857 garLoopResultBuilder]: For program point L1008(lines 1008 1016) no Hoare annotation was computed. [2021-10-21 20:31:33,533 INFO L857 garLoopResultBuilder]: For program point L1008-2(lines 1008 1016) no Hoare annotation was computed. [2021-10-21 20:31:33,533 INFO L857 garLoopResultBuilder]: For program point L877(lines 877 881) no Hoare annotation was computed. [2021-10-21 20:31:33,534 INFO L857 garLoopResultBuilder]: For program point L1538(lines 1538 1544) no Hoare annotation was computed. [2021-10-21 20:31:33,534 INFO L857 garLoopResultBuilder]: For program point L1538-1(lines 1538 1544) no Hoare annotation was computed. [2021-10-21 20:31:33,534 INFO L857 garLoopResultBuilder]: For program point L1538-2(lines 1538 1544) no Hoare annotation was computed. [2021-10-21 20:31:33,534 INFO L857 garLoopResultBuilder]: For program point L1538-3(lines 1538 1544) no Hoare annotation was computed. [2021-10-21 20:31:33,534 INFO L857 garLoopResultBuilder]: For program point L1538-4(lines 1538 1544) no Hoare annotation was computed. [2021-10-21 20:31:33,534 INFO L857 garLoopResultBuilder]: For program point L1538-5(lines 1538 1544) no Hoare annotation was computed. [2021-10-21 20:31:33,535 INFO L853 garLoopResultBuilder]: At program point L85(lines 1 2659) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (not (= ~rjh~0 1)) (= ~__ste_client_forwardReceiver1~0 0) (not (= ~__ste_email_to0~0 1))) [2021-10-21 20:31:33,535 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-10-21 20:31:33,535 INFO L857 garLoopResultBuilder]: For program point L1011(lines 1011 1015) no Hoare annotation was computed. [2021-10-21 20:31:33,535 INFO L857 garLoopResultBuilder]: For program point L1011-3(lines 1011 1015) no Hoare annotation was computed. [2021-10-21 20:31:33,535 INFO L853 garLoopResultBuilder]: At program point L2466(lines 2456 2491) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-21 20:31:33,536 INFO L853 garLoopResultBuilder]: At program point L1543(lines 1526 1549) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-10-21 20:31:33,536 INFO L857 garLoopResultBuilder]: For program point L486(line 486) no Hoare annotation was computed. [2021-10-21 20:31:33,536 INFO L853 garLoopResultBuilder]: At program point L1543-1(lines 1526 1549) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,536 INFO L857 garLoopResultBuilder]: For program point L486-1(line 486) no Hoare annotation was computed. [2021-10-21 20:31:33,536 INFO L853 garLoopResultBuilder]: At program point L1543-2(lines 1526 1549) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-21 20:31:33,537 INFO L857 garLoopResultBuilder]: For program point L486-2(line 486) no Hoare annotation was computed. [2021-10-21 20:31:33,537 INFO L853 garLoopResultBuilder]: At program point L1543-3(lines 1526 1549) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,537 INFO L857 garLoopResultBuilder]: For program point L486-3(line 486) no Hoare annotation was computed. [2021-10-21 20:31:33,537 INFO L853 garLoopResultBuilder]: At program point L1543-4(lines 1526 1549) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,537 INFO L857 garLoopResultBuilder]: For program point L486-4(line 486) no Hoare annotation was computed. [2021-10-21 20:31:33,537 INFO L853 garLoopResultBuilder]: At program point L1543-5(lines 1526 1549) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-21 20:31:33,538 INFO L857 garLoopResultBuilder]: For program point L486-5(line 486) no Hoare annotation was computed. [2021-10-21 20:31:33,538 INFO L853 garLoopResultBuilder]: At program point L487(lines 2289 2306) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,538 INFO L853 garLoopResultBuilder]: At program point L487-1(lines 2289 2306) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,538 INFO L853 garLoopResultBuilder]: At program point L487-2(lines 2289 2306) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,538 INFO L853 garLoopResultBuilder]: At program point L487-3(lines 2289 2306) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-21 20:31:33,539 INFO L860 garLoopResultBuilder]: At program point L487-4(lines 2289 2306) the Hoare annotation is: true [2021-10-21 20:31:33,539 INFO L860 garLoopResultBuilder]: At program point L487-5(lines 2289 2306) the Hoare annotation is: true [2021-10-21 20:31:33,539 INFO L857 garLoopResultBuilder]: For program point L885(lines 885 901) no Hoare annotation was computed. [2021-10-21 20:31:33,539 INFO L853 garLoopResultBuilder]: At program point L885-1(lines 851 906) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-21 20:31:33,539 INFO L853 garLoopResultBuilder]: At program point L2603(lines 2583 2605) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle 3) (= ~__ste_ClientAddressBook_size0~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1))) [2021-10-21 20:31:33,540 INFO L857 garLoopResultBuilder]: For program point L2471(lines 2471 2475) no Hoare annotation was computed. [2021-10-21 20:31:33,540 INFO L853 garLoopResultBuilder]: At program point L93(lines 88 96) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (not (= ~rjh~0 1)) (= ~__ste_client_forwardReceiver1~0 0) (not (= ~__ste_email_to0~0 1))) [2021-10-21 20:31:33,540 INFO L857 garLoopResultBuilder]: For program point L886(lines 886 898) no Hoare annotation was computed. [2021-10-21 20:31:33,540 INFO L857 garLoopResultBuilder]: For program point L1019(lines 1019 1035) no Hoare annotation was computed. [2021-10-21 20:31:33,540 INFO L853 garLoopResultBuilder]: At program point L1019-1(lines 985 1040) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-21 20:31:33,540 INFO L857 garLoopResultBuilder]: For program point L1019-2(lines 1019 1035) no Hoare annotation was computed. [2021-10-21 20:31:33,541 INFO L853 garLoopResultBuilder]: At program point L1019-3(lines 1 2659) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-21 20:31:33,541 INFO L857 garLoopResultBuilder]: For program point L1020(lines 1020 1032) no Hoare annotation was computed. [2021-10-21 20:31:33,541 INFO L857 garLoopResultBuilder]: For program point L1020-2(lines 1020 1032) no Hoare annotation was computed. [2021-10-21 20:31:33,541 INFO L857 garLoopResultBuilder]: For program point L889(lines 889 897) no Hoare annotation was computed. [2021-10-21 20:31:33,541 INFO L857 garLoopResultBuilder]: For program point L1023(lines 1023 1031) no Hoare annotation was computed. [2021-10-21 20:31:33,542 INFO L857 garLoopResultBuilder]: For program point L1023-2(lines 1023 1031) no Hoare annotation was computed. [2021-10-21 20:31:33,542 INFO L853 garLoopResultBuilder]: At program point L2477(lines 2467 2490) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-21 20:31:33,542 INFO L857 garLoopResultBuilder]: For program point L892(lines 892 896) no Hoare annotation was computed. [2021-10-21 20:31:33,542 INFO L857 garLoopResultBuilder]: For program point L1554(lines 1554 1566) no Hoare annotation was computed. [2021-10-21 20:31:33,542 INFO L857 garLoopResultBuilder]: For program point L1554-2(lines 1554 1566) no Hoare annotation was computed. [2021-10-21 20:31:33,542 INFO L857 garLoopResultBuilder]: For program point L1554-4(lines 1554 1566) no Hoare annotation was computed. [2021-10-21 20:31:33,543 INFO L857 garLoopResultBuilder]: For program point L1026(lines 1026 1030) no Hoare annotation was computed. [2021-10-21 20:31:33,548 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-10-21 20:31:33,681 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.10 08:31:33 BoogieIcfgContainer [2021-10-21 20:31:33,681 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-10-21 20:31:33,682 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-10-21 20:31:33,682 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-10-21 20:31:33,682 INFO L275 PluginConnector]: Witness Printer initialized [2021-10-21 20:31:33,683 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.10 08:30:13" (3/4) ... [2021-10-21 20:31:33,686 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-10-21 20:31:33,745 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 208 nodes and edges [2021-10-21 20:31:33,753 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 114 nodes and edges [2021-10-21 20:31:33,759 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-10-21 20:31:33,766 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2021-10-21 20:31:33,772 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-10-21 20:31:33,778 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-10-21 20:31:33,835 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,840 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,844 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,845 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-21 20:31:33,845 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,845 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-21 20:31:33,846 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,846 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-21 20:31:33,848 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || ((((((((((sender == 1 && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-21 20:31:33,849 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-21 20:31:33,850 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client [2021-10-21 20:31:33,850 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-21 20:31:33,850 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client [2021-10-21 20:31:33,850 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) [2021-10-21 20:31:33,851 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) || (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && 2 == handle) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) [2021-10-21 20:31:33,851 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-21 20:31:33,851 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,852 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client [2021-10-21 20:31:33,852 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-21 20:31:33,852 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,852 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) [2021-10-21 20:31:33,852 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-21 20:31:33,853 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,853 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) [2021-10-21 20:31:33,853 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-21 20:31:33,853 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,854 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,854 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,854 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,854 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,855 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) [2021-10-21 20:31:33,855 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,855 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,856 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,856 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,856 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,857 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,857 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,857 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,857 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,857 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-10-21 20:31:33,858 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,858 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,858 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,858 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-10-21 20:31:33,859 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,859 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,859 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,860 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-21 20:31:33,860 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,860 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,860 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,861 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,861 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,861 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,861 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,862 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) || ((((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) [2021-10-21 20:31:33,862 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,862 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,863 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-21 20:31:33,863 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,863 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,863 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-21 20:31:33,864 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,864 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) || (((((((((sender == 1 && handle == 3) && !(rjh == 1)) && \result == 1) && 2 == to) && !(to == 1)) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-21 20:31:33,864 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,864 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,865 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,865 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-21 20:31:33,865 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,865 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-10-21 20:31:33,866 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,866 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,866 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-21 20:31:33,867 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,867 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,867 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,867 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-10-21 20:31:33,868 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-21 20:31:33,868 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,868 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,868 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,869 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,869 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,869 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,870 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,870 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,870 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,871 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,871 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,872 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,872 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,872 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,873 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,873 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,873 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,873 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) [2021-10-21 20:31:33,874 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,874 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,874 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,874 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-21 20:31:33,875 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,875 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-21 20:31:33,875 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-21 20:31:33,875 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,876 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) [2021-10-21 20:31:33,876 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-21 20:31:33,876 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-21 20:31:33,876 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:33,876 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-21 20:31:33,877 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-21 20:31:34,170 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/witness.graphml [2021-10-21 20:31:34,171 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-10-21 20:31:34,172 INFO L168 Benchmark]: Toolchain (without parser) took 84506.66 ms. Allocated memory was 115.3 MB in the beginning and 1.3 GB in the end (delta: 1.1 GB). Free memory was 74.6 MB in the beginning and 985.5 MB in the end (delta: -910.9 MB). Peak memory consumption was 229.7 MB. Max. memory is 16.1 GB. [2021-10-21 20:31:34,173 INFO L168 Benchmark]: CDTParser took 0.30 ms. Allocated memory is still 115.3 MB. Free memory was 93.5 MB in the beginning and 93.3 MB in the end (delta: 125.9 kB). There was no memory consumed. Max. memory is 16.1 GB. [2021-10-21 20:31:34,174 INFO L168 Benchmark]: CACSL2BoogieTranslator took 877.40 ms. Allocated memory is still 115.3 MB. Free memory was 74.5 MB in the beginning and 69.2 MB in the end (delta: 5.2 MB). Peak memory consumption was 10.9 MB. Max. memory is 16.1 GB. [2021-10-21 20:31:34,174 INFO L168 Benchmark]: Boogie Procedure Inliner took 176.36 ms. Allocated memory is still 115.3 MB. Free memory was 69.2 MB in the beginning and 58.3 MB in the end (delta: 11.0 MB). Peak memory consumption was 10.5 MB. Max. memory is 16.1 GB. [2021-10-21 20:31:34,175 INFO L168 Benchmark]: Boogie Preprocessor took 187.44 ms. Allocated memory is still 115.3 MB. Free memory was 58.3 MB in the beginning and 87.0 MB in the end (delta: -28.7 MB). Peak memory consumption was 18.2 MB. Max. memory is 16.1 GB. [2021-10-21 20:31:34,175 INFO L168 Benchmark]: RCFGBuilder took 2116.58 ms. Allocated memory was 115.3 MB in the beginning and 146.8 MB in the end (delta: 31.5 MB). Free memory was 87.0 MB in the beginning and 87.4 MB in the end (delta: -363.1 kB). Peak memory consumption was 56.4 MB. Max. memory is 16.1 GB. [2021-10-21 20:31:34,176 INFO L168 Benchmark]: TraceAbstraction took 80652.13 ms. Allocated memory was 146.8 MB in the beginning and 1.3 GB in the end (delta: 1.1 GB). Free memory was 86.5 MB in the beginning and 1.0 GB in the end (delta: -944.6 MB). Peak memory consumption was 765.4 MB. Max. memory is 16.1 GB. [2021-10-21 20:31:34,176 INFO L168 Benchmark]: Witness Printer took 488.83 ms. Allocated memory is still 1.3 GB. Free memory was 1.0 GB in the beginning and 985.5 MB in the end (delta: 45.6 MB). Peak memory consumption was 46.1 MB. Max. memory is 16.1 GB. [2021-10-21 20:31:34,178 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30 ms. Allocated memory is still 115.3 MB. Free memory was 93.5 MB in the beginning and 93.3 MB in the end (delta: 125.9 kB). There was no memory consumed. Max. memory is 16.1 GB. * CACSL2BoogieTranslator took 877.40 ms. Allocated memory is still 115.3 MB. Free memory was 74.5 MB in the beginning and 69.2 MB in the end (delta: 5.2 MB). Peak memory consumption was 10.9 MB. Max. memory is 16.1 GB. * Boogie Procedure Inliner took 176.36 ms. Allocated memory is still 115.3 MB. Free memory was 69.2 MB in the beginning and 58.3 MB in the end (delta: 11.0 MB). Peak memory consumption was 10.5 MB. Max. memory is 16.1 GB. * Boogie Preprocessor took 187.44 ms. Allocated memory is still 115.3 MB. Free memory was 58.3 MB in the beginning and 87.0 MB in the end (delta: -28.7 MB). Peak memory consumption was 18.2 MB. Max. memory is 16.1 GB. * RCFGBuilder took 2116.58 ms. Allocated memory was 115.3 MB in the beginning and 146.8 MB in the end (delta: 31.5 MB). Free memory was 87.0 MB in the beginning and 87.4 MB in the end (delta: -363.1 kB). Peak memory consumption was 56.4 MB. Max. memory is 16.1 GB. * TraceAbstraction took 80652.13 ms. Allocated memory was 146.8 MB in the beginning and 1.3 GB in the end (delta: 1.1 GB). Free memory was 86.5 MB in the beginning and 1.0 GB in the end (delta: -944.6 MB). Peak memory consumption was 765.4 MB. Max. memory is 16.1 GB. * Witness Printer took 488.83 ms. Allocated memory is still 1.3 GB. Free memory was 1.0 GB in the beginning and 985.5 MB in the end (delta: 45.6 MB). Peak memory consumption was 46.1 MB. Max. memory is 16.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0ms ErrorAutomatonConstructionTimeTotal, 0.0ms FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0ms ErrorAutomatonConstructionTimeAvg, 0.0ms ErrorAutomatonDifferenceTimeAvg, 0.0ms ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 477 locations, 6 error locations. Started 1 CEGAR loops. OverallTime: 80438.7ms, OverallIterations: 21, TraceHistogramMax: 3, EmptinessCheckTime: 99.5ms, AutomataDifference: 11923.5ms, DeadEndRemovalTime: 0.0ms, HoareAnnotationTime: 61780.5ms, InitialAbstractionConstructionTime: 20.0ms, PartialOrderReductionTime: 0.0ms, HoareTripleCheckerStatistics: 22811 SDtfs, 35759 SDslu, 46310 SDs, 0 SdLazy, 3484 SolverSat, 381 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 3573.2ms Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 236 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 146 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 628 ImplicationChecksByTransitivity, 1216.4ms Time, 0.0ms BasicInterpolantAutomatonTime, BiggestAbstraction: size=10744occurred in iteration=20, InterpolantAutomatonStates: 155, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0ms DumpTime, AutomataMinimizationStatistics: 3430.4ms AutomataMinimizationTime, 21 MinimizatonAttempts, 17689 StatesRemovedByMinimization, 19 NontrivialMinimizations, HoareAnnotationStatistics: 0.0ms HoareAnnotationTime, 151 LocationsWithAnnotation, 151 PreInvPairs, 3090 NumberOfFragments, 5966 HoareAnnotationTreeSize, 151 FomulaSimplifications, 6277953389 FormulaSimplificationTreeSizeReduction, 20013.8ms HoareSimplificationTime, 151 FomulaSimplificationsInter, 10700861 FormulaSimplificationTreeSizeReductionInter, 41684.0ms HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 218.3ms SsaConstructionTime, 642.2ms SatisfiabilityAnalysisTime, 1508.1ms InterpolantComputationTime, 1260 NumberOfCodeBlocks, 1260 NumberOfCodeBlocksAsserted, 22 NumberOfCheckSat, 1238 ConstructedInterpolants, 0 QuantifiedInterpolants, 2082 SizeOfPredicates, 0 NumberOfNonLiveVariables, 802 ConjunctsInSsa, 3 ConjunctsInUnsatCore, 22 InterpolantComputations, 20 PerfectInterpolantSequences, 129/133 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 6 specifications checked. All of them hold - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1859]: Loop Invariant Derived loop invariant: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((__ste_ClientAddressBook_size0 == 0 && bob == 1) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && !(__ste_email_to0 == 1)) && handle == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client - InvariantResult [Line: 1826]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 635]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2395]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1044]: Loop Invariant Derived loop invariant: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((handle == 3 && __ste_ClientAddressBook_size0 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && !(__ste_email_to0 == 1) - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 1526]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1044]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1671]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2359]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1916]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2351]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1479]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1626]: Loop Invariant Derived loop invariant: ((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 88]: Loop Invariant Derived loop invariant: ((__ste_ClientAddressBook_size0 == 0 && !(rjh == 1)) && __ste_client_forwardReceiver1 == 0) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) - InvariantResult [Line: 1580]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((__ste_ClientAddressBook_size0 == 0 && !(rjh == 1)) && __ste_client_forwardReceiver1 == 0) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1916]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1916]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2606]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1479]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1916]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && 2 == to) && bob == 1) && rjh == 2) && !(__ste_email_to0 == 1)) && msg == 1 - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1580]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 659]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1817]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1580]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 2456]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((__ste_ClientAddressBook_size0 == 0 && !(rjh == 1)) && bob == 1) && __ste_client_forwardReceiver1 == 0) && !(__ste_email_to0 == 1) - InvariantResult [Line: 2406]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1916]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1580]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 1044]: Loop Invariant Derived loop invariant: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1794]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2616]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2350]: Loop Invariant Derived loop invariant: ((handle == 3 && bob == 1) && rjh == 2) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1044]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || ((((((((((sender == 1 && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1479]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0) && !(handle == 1)) || ((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) && !(handle == 1)) - InvariantResult [Line: 1526]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1044]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1916]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && __ste_email_to0 == 2) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1526]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2583]: Loop Invariant Derived loop invariant: ((((handle == 3 && __ste_ClientAddressBook_size0 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1580]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2384]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1835]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1479]: Loop Invariant Derived loop invariant: (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) || (((((((((sender == 1 && handle == 3) && !(rjh == 1)) && \result == 1) && 2 == to) && !(to == 1)) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1479]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1671]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1526]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 2442]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1580]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 1044]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 2431]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 1526]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2370]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 851]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1526]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) || ((((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 635]: Loop Invariant Derived loop invariant: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2417]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1859]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1479]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) || (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && 2 == handle) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 2467]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) RESULT: Ultimate proved your program to be correct! [2021-10-21 20:31:34,301 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ff3615ef-551c-4fd0-96f8-d9fc48668889/bin/uautomizer-j4sWxH34Be/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...