./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version b2eff8ba Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 331c48a04a8caddf27498f6f02cdac644ba512a5bbe373bec7a9be0d5f3b8263 ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.2.1-dev-b2eff8b [2021-10-28 09:55:21,798 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-10-28 09:55:21,801 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-10-28 09:55:21,858 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-10-28 09:55:21,859 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-10-28 09:55:21,864 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-10-28 09:55:21,866 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-10-28 09:55:21,870 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-10-28 09:55:21,873 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-10-28 09:55:21,879 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-10-28 09:55:21,881 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-10-28 09:55:21,883 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-10-28 09:55:21,883 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-10-28 09:55:21,886 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-10-28 09:55:21,889 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-10-28 09:55:21,893 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-10-28 09:55:21,895 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-10-28 09:55:21,897 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-10-28 09:55:21,899 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-10-28 09:55:21,907 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-10-28 09:55:21,909 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-10-28 09:55:21,911 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-10-28 09:55:21,914 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-10-28 09:55:21,915 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-10-28 09:55:21,925 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-10-28 09:55:21,925 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-10-28 09:55:21,926 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-10-28 09:55:21,928 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-10-28 09:55:21,929 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-10-28 09:55:21,931 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-10-28 09:55:21,931 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-10-28 09:55:21,932 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-10-28 09:55:21,934 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-10-28 09:55:21,936 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-10-28 09:55:21,938 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-10-28 09:55:21,938 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-10-28 09:55:21,939 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-10-28 09:55:21,939 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-10-28 09:55:21,940 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-10-28 09:55:21,941 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-10-28 09:55:21,942 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-10-28 09:55:21,943 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-10-28 09:55:21,989 INFO L113 SettingsManager]: Loading preferences was successful [2021-10-28 09:55:21,990 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-10-28 09:55:21,991 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-10-28 09:55:21,991 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-10-28 09:55:21,996 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-10-28 09:55:21,996 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-10-28 09:55:21,996 INFO L138 SettingsManager]: * Use SBE=true [2021-10-28 09:55:21,997 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-10-28 09:55:21,997 INFO L138 SettingsManager]: * sizeof long=4 [2021-10-28 09:55:21,997 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-10-28 09:55:21,998 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-10-28 09:55:21,999 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-10-28 09:55:21,999 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-10-28 09:55:21,999 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-10-28 09:55:22,000 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-10-28 09:55:22,000 INFO L138 SettingsManager]: * sizeof long double=12 [2021-10-28 09:55:22,000 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-10-28 09:55:22,000 INFO L138 SettingsManager]: * Use constant arrays=true [2021-10-28 09:55:22,001 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-10-28 09:55:22,001 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-10-28 09:55:22,001 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-10-28 09:55:22,001 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-10-28 09:55:22,002 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-10-28 09:55:22,002 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-10-28 09:55:22,002 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-10-28 09:55:22,002 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-10-28 09:55:22,003 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-10-28 09:55:22,003 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-10-28 09:55:22,003 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-10-28 09:55:22,005 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-10-28 09:55:22,005 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-10-28 09:55:22,005 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-10-28 09:55:22,006 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 331c48a04a8caddf27498f6f02cdac644ba512a5bbe373bec7a9be0d5f3b8263 [2021-10-28 09:55:22,351 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-10-28 09:55:22,387 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-10-28 09:55:22,389 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-10-28 09:55:22,391 INFO L271 PluginConnector]: Initializing CDTParser... [2021-10-28 09:55:22,392 INFO L275 PluginConnector]: CDTParser initialized [2021-10-28 09:55:22,393 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c [2021-10-28 09:55:22,478 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/data/e20c9fa40/a6e619ea78ff463392528aca466a4212/FLAG0a553f360 [2021-10-28 09:55:23,138 INFO L306 CDTParser]: Found 1 translation units. [2021-10-28 09:55:23,140 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c [2021-10-28 09:55:23,172 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/data/e20c9fa40/a6e619ea78ff463392528aca466a4212/FLAG0a553f360 [2021-10-28 09:55:23,317 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/data/e20c9fa40/a6e619ea78ff463392528aca466a4212 [2021-10-28 09:55:23,320 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-10-28 09:55:23,322 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-10-28 09:55:23,337 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-10-28 09:55:23,338 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-10-28 09:55:23,341 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-10-28 09:55:23,342 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.10 09:55:23" (1/1) ... [2021-10-28 09:55:23,343 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@39c7fa1e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:55:23, skipping insertion in model container [2021-10-28 09:55:23,343 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.10 09:55:23" (1/1) ... [2021-10-28 09:55:23,350 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-10-28 09:55:23,442 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-10-28 09:55:23,764 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c[12529,12542] [2021-10-28 09:55:24,027 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-28 09:55:24,046 INFO L203 MainTranslator]: Completed pre-run [2021-10-28 09:55:24,111 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c[12529,12542] [2021-10-28 09:55:24,215 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-28 09:55:24,254 INFO L208 MainTranslator]: Completed translation [2021-10-28 09:55:24,256 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:55:24 WrapperNode [2021-10-28 09:55:24,256 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-10-28 09:55:24,257 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-10-28 09:55:24,258 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-10-28 09:55:24,258 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-10-28 09:55:24,265 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:55:24" (1/1) ... [2021-10-28 09:55:24,305 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:55:24" (1/1) ... [2021-10-28 09:55:24,458 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-10-28 09:55:24,459 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-10-28 09:55:24,459 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-10-28 09:55:24,459 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-10-28 09:55:24,468 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:55:24" (1/1) ... [2021-10-28 09:55:24,469 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:55:24" (1/1) ... [2021-10-28 09:55:24,499 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:55:24" (1/1) ... [2021-10-28 09:55:24,500 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:55:24" (1/1) ... [2021-10-28 09:55:24,551 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:55:24" (1/1) ... [2021-10-28 09:55:24,593 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:55:24" (1/1) ... [2021-10-28 09:55:24,603 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:55:24" (1/1) ... [2021-10-28 09:55:24,623 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-10-28 09:55:24,625 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-10-28 09:55:24,626 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-10-28 09:55:24,627 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-10-28 09:55:24,631 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:55:24" (1/1) ... [2021-10-28 09:55:24,640 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-10-28 09:55:24,651 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/z3 [2021-10-28 09:55:24,680 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-10-28 09:55:24,691 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-10-28 09:55:24,730 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2021-10-28 09:55:24,730 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-10-28 09:55:24,731 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-10-28 09:55:24,731 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-10-28 09:55:24,731 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-10-28 09:55:26,800 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-10-28 09:55:26,800 INFO L299 CfgBuilder]: Removed 405 assume(true) statements. [2021-10-28 09:55:26,803 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.10 09:55:26 BoogieIcfgContainer [2021-10-28 09:55:26,803 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-10-28 09:55:26,805 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-10-28 09:55:26,805 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-10-28 09:55:26,808 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-10-28 09:55:26,809 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.10 09:55:23" (1/3) ... [2021-10-28 09:55:26,810 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6008b6ae and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.10 09:55:26, skipping insertion in model container [2021-10-28 09:55:26,810 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:55:24" (2/3) ... [2021-10-28 09:55:26,810 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6008b6ae and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.10 09:55:26, skipping insertion in model container [2021-10-28 09:55:26,810 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.10 09:55:26" (3/3) ... [2021-10-28 09:55:26,812 INFO L111 eAbstractionObserver]: Analyzing ICFG email_spec0_product36.cil.c [2021-10-28 09:55:26,817 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-10-28 09:55:26,818 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 6 error locations. [2021-10-28 09:55:26,870 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-10-28 09:55:26,876 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-10-28 09:55:26,877 INFO L340 AbstractCegarLoop]: Starting to check reachability of 6 error locations. [2021-10-28 09:55:26,902 INFO L276 IsEmpty]: Start isEmpty. Operand has 477 states, 470 states have (on average 1.695744680851064) internal successors, (797), 476 states have internal predecessors, (797), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:26,912 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-10-28 09:55:26,919 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:26,920 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:26,921 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:26,926 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:26,926 INFO L85 PathProgramCache]: Analyzing trace with hash 727264019, now seen corresponding path program 1 times [2021-10-28 09:55:26,938 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:26,938 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [846981958] [2021-10-28 09:55:26,939 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:26,940 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:27,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:27,313 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:55:27,314 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:27,314 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [846981958] [2021-10-28 09:55:27,315 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [846981958] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:27,315 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:27,316 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-10-28 09:55:27,317 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1613819442] [2021-10-28 09:55:27,323 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-10-28 09:55:27,323 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:27,336 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-10-28 09:55:27,337 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-10-28 09:55:27,341 INFO L87 Difference]: Start difference. First operand has 477 states, 470 states have (on average 1.695744680851064) internal successors, (797), 476 states have internal predecessors, (797), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 20.5) internal successors, (41), 2 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:27,406 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:27,415 INFO L93 Difference]: Finished difference Result 860 states and 1420 transitions. [2021-10-28 09:55:27,416 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-10-28 09:55:27,417 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 20.5) internal successors, (41), 2 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2021-10-28 09:55:27,418 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:27,440 INFO L225 Difference]: With dead ends: 860 [2021-10-28 09:55:27,441 INFO L226 Difference]: Without dead ends: 449 [2021-10-28 09:55:27,449 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-10-28 09:55:27,467 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 449 states. [2021-10-28 09:55:27,518 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 449 to 449. [2021-10-28 09:55:27,520 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 449 states, 443 states have (on average 1.6794582392776525) internal successors, (744), 448 states have internal predecessors, (744), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:27,523 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 449 states to 449 states and 744 transitions. [2021-10-28 09:55:27,524 INFO L78 Accepts]: Start accepts. Automaton has 449 states and 744 transitions. Word has length 41 [2021-10-28 09:55:27,524 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:27,524 INFO L470 AbstractCegarLoop]: Abstraction has 449 states and 744 transitions. [2021-10-28 09:55:27,525 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 20.5) internal successors, (41), 2 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:27,525 INFO L276 IsEmpty]: Start isEmpty. Operand 449 states and 744 transitions. [2021-10-28 09:55:27,527 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2021-10-28 09:55:27,528 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:27,528 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:27,528 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-10-28 09:55:27,529 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:27,529 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:27,529 INFO L85 PathProgramCache]: Analyzing trace with hash 1990434142, now seen corresponding path program 1 times [2021-10-28 09:55:27,530 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:27,530 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1932909764] [2021-10-28 09:55:27,530 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:27,530 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:27,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:27,692 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:55:27,692 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:27,692 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1932909764] [2021-10-28 09:55:27,693 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1932909764] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:27,693 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:27,693 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 09:55:27,693 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1272440289] [2021-10-28 09:55:27,694 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 09:55:27,695 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:27,695 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 09:55:27,696 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:55:27,696 INFO L87 Difference]: Start difference. First operand 449 states and 744 transitions. Second operand has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:27,834 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:27,835 INFO L93 Difference]: Finished difference Result 1320 states and 2190 transitions. [2021-10-28 09:55:27,835 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 09:55:27,835 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2021-10-28 09:55:27,836 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:27,842 INFO L225 Difference]: With dead ends: 1320 [2021-10-28 09:55:27,842 INFO L226 Difference]: Without dead ends: 882 [2021-10-28 09:55:27,843 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:55:27,845 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 882 states. [2021-10-28 09:55:27,874 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 882 to 448. [2021-10-28 09:55:27,887 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 448 states, 442 states have (on average 1.6742081447963801) internal successors, (740), 447 states have internal predecessors, (740), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:27,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 740 transitions. [2021-10-28 09:55:27,890 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 740 transitions. Word has length 42 [2021-10-28 09:55:27,890 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:27,890 INFO L470 AbstractCegarLoop]: Abstraction has 448 states and 740 transitions. [2021-10-28 09:55:27,890 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:27,890 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 740 transitions. [2021-10-28 09:55:27,894 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2021-10-28 09:55:27,894 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:27,894 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:27,895 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-10-28 09:55:27,895 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:27,895 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:27,896 INFO L85 PathProgramCache]: Analyzing trace with hash -1205522101, now seen corresponding path program 1 times [2021-10-28 09:55:27,896 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:27,896 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2019623121] [2021-10-28 09:55:27,896 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:27,897 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:27,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:27,988 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:55:27,989 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:27,993 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2019623121] [2021-10-28 09:55:27,993 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2019623121] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:27,994 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:27,994 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 09:55:27,995 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1314748140] [2021-10-28 09:55:27,997 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 09:55:27,997 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:28,000 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 09:55:28,001 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:55:28,002 INFO L87 Difference]: Start difference. First operand 448 states and 740 transitions. Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:28,038 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:28,038 INFO L93 Difference]: Finished difference Result 882 states and 1460 transitions. [2021-10-28 09:55:28,039 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 09:55:28,039 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2021-10-28 09:55:28,039 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:28,043 INFO L225 Difference]: With dead ends: 882 [2021-10-28 09:55:28,043 INFO L226 Difference]: Without dead ends: 449 [2021-10-28 09:55:28,044 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:55:28,045 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 449 states. [2021-10-28 09:55:28,070 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 449 to 448. [2021-10-28 09:55:28,071 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 448 states, 442 states have (on average 1.667420814479638) internal successors, (737), 447 states have internal predecessors, (737), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:28,074 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 737 transitions. [2021-10-28 09:55:28,074 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 737 transitions. Word has length 43 [2021-10-28 09:55:28,074 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:28,074 INFO L470 AbstractCegarLoop]: Abstraction has 448 states and 737 transitions. [2021-10-28 09:55:28,075 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:28,075 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 737 transitions. [2021-10-28 09:55:28,077 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2021-10-28 09:55:28,077 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:28,077 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:28,077 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-10-28 09:55:28,078 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:28,078 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:28,078 INFO L85 PathProgramCache]: Analyzing trace with hash 945994064, now seen corresponding path program 1 times [2021-10-28 09:55:28,078 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:28,079 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [911010390] [2021-10-28 09:55:28,079 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:28,079 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:28,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:28,215 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:55:28,216 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:28,216 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [911010390] [2021-10-28 09:55:28,216 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [911010390] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:28,217 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:28,217 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 09:55:28,217 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [369151966] [2021-10-28 09:55:28,218 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 09:55:28,218 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:28,218 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 09:55:28,219 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:55:28,219 INFO L87 Difference]: Start difference. First operand 448 states and 737 transitions. Second operand has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:28,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:28,242 INFO L93 Difference]: Finished difference Result 806 states and 1314 transitions. [2021-10-28 09:55:28,243 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 09:55:28,243 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2021-10-28 09:55:28,243 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:28,246 INFO L225 Difference]: With dead ends: 806 [2021-10-28 09:55:28,247 INFO L226 Difference]: Without dead ends: 451 [2021-10-28 09:55:28,248 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:55:28,249 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 451 states. [2021-10-28 09:55:28,261 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 451 to 450. [2021-10-28 09:55:28,289 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 450 states, 444 states have (on average 1.6644144144144144) internal successors, (739), 449 states have internal predecessors, (739), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:28,295 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 450 states to 450 states and 739 transitions. [2021-10-28 09:55:28,295 INFO L78 Accepts]: Start accepts. Automaton has 450 states and 739 transitions. Word has length 45 [2021-10-28 09:55:28,296 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:28,296 INFO L470 AbstractCegarLoop]: Abstraction has 450 states and 739 transitions. [2021-10-28 09:55:28,296 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:28,296 INFO L276 IsEmpty]: Start isEmpty. Operand 450 states and 739 transitions. [2021-10-28 09:55:28,297 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2021-10-28 09:55:28,298 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:28,298 INFO L513 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:28,298 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-10-28 09:55:28,298 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:28,299 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:28,299 INFO L85 PathProgramCache]: Analyzing trace with hash -1740183871, now seen corresponding path program 1 times [2021-10-28 09:55:28,299 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:28,300 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1091515051] [2021-10-28 09:55:28,300 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:28,300 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:28,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:28,392 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:55:28,392 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:28,392 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1091515051] [2021-10-28 09:55:28,393 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1091515051] provided 0 perfect and 1 imperfect interpolant sequences [2021-10-28 09:55:28,393 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1259704728] [2021-10-28 09:55:28,393 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:28,393 INFO L170 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-10-28 09:55:28,394 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/z3 [2021-10-28 09:55:28,396 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-10-28 09:55:28,397 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-10-28 09:55:28,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:28,701 INFO L263 TraceCheckSpWp]: Trace formula consists of 802 conjuncts, 3 conjunts are in the unsatisfiable core [2021-10-28 09:55:28,709 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-10-28 09:55:28,925 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:55:28,926 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1259704728] provided 0 perfect and 1 imperfect interpolant sequences [2021-10-28 09:55:28,926 INFO L186 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2021-10-28 09:55:28,926 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4] total 5 [2021-10-28 09:55:28,927 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1694335921] [2021-10-28 09:55:28,928 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 09:55:28,929 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:28,930 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 09:55:28,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2021-10-28 09:55:28,931 INFO L87 Difference]: Start difference. First operand 450 states and 739 transitions. Second operand has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:29,001 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:29,002 INFO L93 Difference]: Finished difference Result 1237 states and 2030 transitions. [2021-10-28 09:55:29,002 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-10-28 09:55:29,003 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2021-10-28 09:55:29,004 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:29,010 INFO L225 Difference]: With dead ends: 1237 [2021-10-28 09:55:29,011 INFO L226 Difference]: Without dead ends: 882 [2021-10-28 09:55:29,012 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2021-10-28 09:55:29,014 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 882 states. [2021-10-28 09:55:29,054 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 882 to 526. [2021-10-28 09:55:29,056 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 526 states, 520 states have (on average 1.6961538461538461) internal successors, (882), 525 states have internal predecessors, (882), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:29,059 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 526 states to 526 states and 882 transitions. [2021-10-28 09:55:29,059 INFO L78 Accepts]: Start accepts. Automaton has 526 states and 882 transitions. Word has length 50 [2021-10-28 09:55:29,060 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:29,060 INFO L470 AbstractCegarLoop]: Abstraction has 526 states and 882 transitions. [2021-10-28 09:55:29,060 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:29,060 INFO L276 IsEmpty]: Start isEmpty. Operand 526 states and 882 transitions. [2021-10-28 09:55:29,061 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-10-28 09:55:29,061 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:29,062 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:29,101 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-10-28 09:55:29,290 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-10-28 09:55:29,291 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:29,291 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:29,291 INFO L85 PathProgramCache]: Analyzing trace with hash 298481648, now seen corresponding path program 2 times [2021-10-28 09:55:29,291 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:29,292 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [458605605] [2021-10-28 09:55:29,292 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:29,292 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:29,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:29,401 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:55:29,402 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:29,402 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [458605605] [2021-10-28 09:55:29,402 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [458605605] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:29,403 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:29,403 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 09:55:29,403 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1523162910] [2021-10-28 09:55:29,404 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 09:55:29,404 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:29,404 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 09:55:29,405 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:55:29,405 INFO L87 Difference]: Start difference. First operand 526 states and 882 transitions. Second operand has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:29,455 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:29,456 INFO L93 Difference]: Finished difference Result 1389 states and 2316 transitions. [2021-10-28 09:55:29,456 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 09:55:29,457 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2021-10-28 09:55:29,457 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:29,463 INFO L225 Difference]: With dead ends: 1389 [2021-10-28 09:55:29,464 INFO L226 Difference]: Without dead ends: 958 [2021-10-28 09:55:29,465 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:55:29,467 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 958 states. [2021-10-28 09:55:29,497 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 958 to 603. [2021-10-28 09:55:29,498 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 603 states, 597 states have (on average 1.7169179229480738) internal successors, (1025), 602 states have internal predecessors, (1025), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:29,502 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 603 states to 603 states and 1025 transitions. [2021-10-28 09:55:29,502 INFO L78 Accepts]: Start accepts. Automaton has 603 states and 1025 transitions. Word has length 55 [2021-10-28 09:55:29,502 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:29,503 INFO L470 AbstractCegarLoop]: Abstraction has 603 states and 1025 transitions. [2021-10-28 09:55:29,503 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:29,503 INFO L276 IsEmpty]: Start isEmpty. Operand 603 states and 1025 transitions. [2021-10-28 09:55:29,505 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-10-28 09:55:29,505 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:29,506 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:29,506 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-10-28 09:55:29,506 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:29,507 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:29,507 INFO L85 PathProgramCache]: Analyzing trace with hash -226823759, now seen corresponding path program 1 times [2021-10-28 09:55:29,507 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:29,508 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1601644793] [2021-10-28 09:55:29,508 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:29,508 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:29,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:29,587 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-10-28 09:55:29,587 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:29,587 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1601644793] [2021-10-28 09:55:29,588 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1601644793] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:29,588 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:29,588 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 09:55:29,588 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1244713800] [2021-10-28 09:55:29,589 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 09:55:29,590 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:29,590 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 09:55:29,591 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:55:29,591 INFO L87 Difference]: Start difference. First operand 603 states and 1025 transitions. Second operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:29,645 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:29,645 INFO L93 Difference]: Finished difference Result 1537 states and 2594 transitions. [2021-10-28 09:55:29,645 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 09:55:29,646 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2021-10-28 09:55:29,646 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:29,652 INFO L225 Difference]: With dead ends: 1537 [2021-10-28 09:55:29,652 INFO L226 Difference]: Without dead ends: 958 [2021-10-28 09:55:29,653 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:55:29,655 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 958 states. [2021-10-28 09:55:29,686 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 958 to 603. [2021-10-28 09:55:29,688 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 603 states, 597 states have (on average 1.7135678391959799) internal successors, (1023), 602 states have internal predecessors, (1023), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:29,692 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 603 states to 603 states and 1023 transitions. [2021-10-28 09:55:29,692 INFO L78 Accepts]: Start accepts. Automaton has 603 states and 1023 transitions. Word has length 57 [2021-10-28 09:55:29,692 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:29,692 INFO L470 AbstractCegarLoop]: Abstraction has 603 states and 1023 transitions. [2021-10-28 09:55:29,693 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:29,693 INFO L276 IsEmpty]: Start isEmpty. Operand 603 states and 1023 transitions. [2021-10-28 09:55:29,694 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-10-28 09:55:29,694 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:29,694 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:29,694 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-10-28 09:55:29,695 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:29,695 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:29,695 INFO L85 PathProgramCache]: Analyzing trace with hash -1735157297, now seen corresponding path program 2 times [2021-10-28 09:55:29,695 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:29,696 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [788140514] [2021-10-28 09:55:29,696 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:29,696 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:29,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:29,788 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-28 09:55:29,788 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:29,789 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [788140514] [2021-10-28 09:55:29,789 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [788140514] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:29,789 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:29,789 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 09:55:29,789 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1640046977] [2021-10-28 09:55:29,790 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 09:55:29,790 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:29,791 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 09:55:29,791 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:55:29,791 INFO L87 Difference]: Start difference. First operand 603 states and 1023 transitions. Second operand has 3 states, 3 states have (on average 18.0) internal successors, (54), 3 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:29,854 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:29,854 INFO L93 Difference]: Finished difference Result 1674 states and 2848 transitions. [2021-10-28 09:55:29,854 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 09:55:29,855 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.0) internal successors, (54), 3 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2021-10-28 09:55:29,855 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:29,862 INFO L225 Difference]: With dead ends: 1674 [2021-10-28 09:55:29,862 INFO L226 Difference]: Without dead ends: 1101 [2021-10-28 09:55:29,863 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:55:29,865 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1101 states. [2021-10-28 09:55:29,897 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1101 to 746. [2021-10-28 09:55:29,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 746 states, 740 states have (on average 1.7405405405405405) internal successors, (1288), 745 states have internal predecessors, (1288), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:29,903 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 746 states to 746 states and 1288 transitions. [2021-10-28 09:55:29,903 INFO L78 Accepts]: Start accepts. Automaton has 746 states and 1288 transitions. Word has length 57 [2021-10-28 09:55:29,905 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:29,905 INFO L470 AbstractCegarLoop]: Abstraction has 746 states and 1288 transitions. [2021-10-28 09:55:29,906 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.0) internal successors, (54), 3 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:29,906 INFO L276 IsEmpty]: Start isEmpty. Operand 746 states and 1288 transitions. [2021-10-28 09:55:29,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-10-28 09:55:29,908 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:29,908 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:29,908 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-10-28 09:55:29,909 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:29,909 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:29,909 INFO L85 PathProgramCache]: Analyzing trace with hash 1243815331, now seen corresponding path program 1 times [2021-10-28 09:55:29,909 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:29,910 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1080379160] [2021-10-28 09:55:29,910 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:29,910 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:29,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:29,992 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-28 09:55:29,992 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:29,997 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1080379160] [2021-10-28 09:55:29,997 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1080379160] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:29,997 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:29,997 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-28 09:55:29,998 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1892986905] [2021-10-28 09:55:29,999 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 09:55:30,000 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:30,002 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 09:55:30,003 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 09:55:30,003 INFO L87 Difference]: Start difference. First operand 746 states and 1288 transitions. Second operand has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:30,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:30,422 INFO L93 Difference]: Finished difference Result 1894 states and 3253 transitions. [2021-10-28 09:55:30,422 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-28 09:55:30,422 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2021-10-28 09:55:30,423 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:30,430 INFO L225 Difference]: With dead ends: 1894 [2021-10-28 09:55:30,430 INFO L226 Difference]: Without dead ends: 1244 [2021-10-28 09:55:30,432 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-10-28 09:55:30,434 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1244 states. [2021-10-28 09:55:30,473 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1244 to 746. [2021-10-28 09:55:30,475 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 746 states, 740 states have (on average 1.7364864864864864) internal successors, (1285), 745 states have internal predecessors, (1285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:30,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 746 states to 746 states and 1285 transitions. [2021-10-28 09:55:30,478 INFO L78 Accepts]: Start accepts. Automaton has 746 states and 1285 transitions. Word has length 58 [2021-10-28 09:55:30,479 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:30,479 INFO L470 AbstractCegarLoop]: Abstraction has 746 states and 1285 transitions. [2021-10-28 09:55:30,479 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:30,479 INFO L276 IsEmpty]: Start isEmpty. Operand 746 states and 1285 transitions. [2021-10-28 09:55:30,481 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-10-28 09:55:30,481 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:30,481 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:30,481 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-10-28 09:55:30,481 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:30,482 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:30,482 INFO L85 PathProgramCache]: Analyzing trace with hash -462083701, now seen corresponding path program 1 times [2021-10-28 09:55:30,482 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:30,482 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [369491291] [2021-10-28 09:55:30,482 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:30,482 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:30,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:30,615 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-28 09:55:30,616 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:30,616 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [369491291] [2021-10-28 09:55:30,616 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [369491291] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:30,616 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:30,616 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-10-28 09:55:30,616 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1480459514] [2021-10-28 09:55:30,617 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-10-28 09:55:30,617 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:30,617 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-10-28 09:55:30,618 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2021-10-28 09:55:30,618 INFO L87 Difference]: Start difference. First operand 746 states and 1285 transitions. Second operand has 10 states, 10 states have (on average 5.4) internal successors, (54), 10 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:32,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:32,580 INFO L93 Difference]: Finished difference Result 3388 states and 5518 transitions. [2021-10-28 09:55:32,581 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-10-28 09:55:32,581 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 10 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2021-10-28 09:55:32,581 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:32,599 INFO L225 Difference]: With dead ends: 3388 [2021-10-28 09:55:32,599 INFO L226 Difference]: Without dead ends: 3094 [2021-10-28 09:55:32,601 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 208 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=290, Invalid=766, Unknown=0, NotChecked=0, Total=1056 [2021-10-28 09:55:32,605 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3094 states. [2021-10-28 09:55:32,691 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3094 to 1013. [2021-10-28 09:55:32,693 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1013 states, 1007 states have (on average 1.6971201588877856) internal successors, (1709), 1012 states have internal predecessors, (1709), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:32,697 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1013 states to 1013 states and 1709 transitions. [2021-10-28 09:55:32,698 INFO L78 Accepts]: Start accepts. Automaton has 1013 states and 1709 transitions. Word has length 58 [2021-10-28 09:55:32,698 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:32,698 INFO L470 AbstractCegarLoop]: Abstraction has 1013 states and 1709 transitions. [2021-10-28 09:55:32,698 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 10 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:32,698 INFO L276 IsEmpty]: Start isEmpty. Operand 1013 states and 1709 transitions. [2021-10-28 09:55:32,700 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-10-28 09:55:32,700 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:32,700 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:32,700 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-10-28 09:55:32,701 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:32,701 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:32,701 INFO L85 PathProgramCache]: Analyzing trace with hash -1190675934, now seen corresponding path program 1 times [2021-10-28 09:55:32,701 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:32,702 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2107772795] [2021-10-28 09:55:32,702 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:32,702 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:32,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:32,847 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-28 09:55:32,848 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:32,848 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2107772795] [2021-10-28 09:55:32,848 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2107772795] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:32,848 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:32,848 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-10-28 09:55:32,848 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2054858232] [2021-10-28 09:55:32,849 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-10-28 09:55:32,849 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:32,850 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-10-28 09:55:32,850 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2021-10-28 09:55:32,850 INFO L87 Difference]: Start difference. First operand 1013 states and 1709 transitions. Second operand has 10 states, 10 states have (on average 5.5) internal successors, (55), 10 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:34,835 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:34,835 INFO L93 Difference]: Finished difference Result 3650 states and 5919 transitions. [2021-10-28 09:55:34,836 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-10-28 09:55:34,836 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.5) internal successors, (55), 10 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2021-10-28 09:55:34,837 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:34,856 INFO L225 Difference]: With dead ends: 3650 [2021-10-28 09:55:34,857 INFO L226 Difference]: Without dead ends: 3154 [2021-10-28 09:55:34,859 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 205 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=290, Invalid=766, Unknown=0, NotChecked=0, Total=1056 [2021-10-28 09:55:34,863 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3154 states. [2021-10-28 09:55:34,973 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3154 to 1124. [2021-10-28 09:55:34,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1124 states, 1118 states have (on average 1.684257602862254) internal successors, (1883), 1123 states have internal predecessors, (1883), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:34,982 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1124 states to 1124 states and 1883 transitions. [2021-10-28 09:55:34,983 INFO L78 Accepts]: Start accepts. Automaton has 1124 states and 1883 transitions. Word has length 59 [2021-10-28 09:55:34,984 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:34,984 INFO L470 AbstractCegarLoop]: Abstraction has 1124 states and 1883 transitions. [2021-10-28 09:55:34,984 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.5) internal successors, (55), 10 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:34,984 INFO L276 IsEmpty]: Start isEmpty. Operand 1124 states and 1883 transitions. [2021-10-28 09:55:34,986 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-10-28 09:55:34,986 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:34,986 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:34,987 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-10-28 09:55:34,992 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:34,992 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:34,992 INFO L85 PathProgramCache]: Analyzing trace with hash -1608706913, now seen corresponding path program 1 times [2021-10-28 09:55:34,993 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:34,993 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [929534799] [2021-10-28 09:55:34,993 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:34,993 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:35,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:35,085 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-28 09:55:35,086 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:35,086 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [929534799] [2021-10-28 09:55:35,087 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [929534799] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:35,087 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:35,087 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-10-28 09:55:35,087 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [694753110] [2021-10-28 09:55:35,088 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-10-28 09:55:35,088 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:35,088 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-10-28 09:55:35,089 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-10-28 09:55:35,089 INFO L87 Difference]: Start difference. First operand 1124 states and 1883 transitions. Second operand has 7 states, 7 states have (on average 7.857142857142857) internal successors, (55), 7 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:35,424 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:35,425 INFO L93 Difference]: Finished difference Result 2109 states and 3448 transitions. [2021-10-28 09:55:35,425 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-10-28 09:55:35,426 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.857142857142857) internal successors, (55), 7 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2021-10-28 09:55:35,426 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:35,434 INFO L225 Difference]: With dead ends: 2109 [2021-10-28 09:55:35,434 INFO L226 Difference]: Without dead ends: 1399 [2021-10-28 09:55:35,436 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=74, Invalid=136, Unknown=0, NotChecked=0, Total=210 [2021-10-28 09:55:35,438 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1399 states. [2021-10-28 09:55:35,525 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1399 to 1046. [2021-10-28 09:55:35,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1046 states, 1040 states have (on average 1.6836538461538462) internal successors, (1751), 1045 states have internal predecessors, (1751), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:35,534 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1046 states to 1046 states and 1751 transitions. [2021-10-28 09:55:35,535 INFO L78 Accepts]: Start accepts. Automaton has 1046 states and 1751 transitions. Word has length 59 [2021-10-28 09:55:35,535 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:35,535 INFO L470 AbstractCegarLoop]: Abstraction has 1046 states and 1751 transitions. [2021-10-28 09:55:35,535 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.857142857142857) internal successors, (55), 7 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:35,536 INFO L276 IsEmpty]: Start isEmpty. Operand 1046 states and 1751 transitions. [2021-10-28 09:55:35,537 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-10-28 09:55:35,537 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:35,538 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:35,538 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-10-28 09:55:35,538 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:35,538 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:35,539 INFO L85 PathProgramCache]: Analyzing trace with hash 1160689309, now seen corresponding path program 1 times [2021-10-28 09:55:35,539 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:35,539 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [504989623] [2021-10-28 09:55:35,539 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:35,539 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:35,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:35,632 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-28 09:55:35,632 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:35,632 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [504989623] [2021-10-28 09:55:35,633 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [504989623] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:35,633 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:35,633 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 09:55:35,633 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [510976407] [2021-10-28 09:55:35,633 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 09:55:35,634 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:35,634 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 09:55:35,635 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 09:55:35,635 INFO L87 Difference]: Start difference. First operand 1046 states and 1751 transitions. Second operand has 5 states, 5 states have (on average 11.2) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:36,079 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:36,079 INFO L93 Difference]: Finished difference Result 3655 states and 6060 transitions. [2021-10-28 09:55:36,079 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-10-28 09:55:36,080 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.2) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 60 [2021-10-28 09:55:36,080 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:36,098 INFO L225 Difference]: With dead ends: 3655 [2021-10-28 09:55:36,098 INFO L226 Difference]: Without dead ends: 3116 [2021-10-28 09:55:36,102 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-10-28 09:55:36,106 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3116 states. [2021-10-28 09:55:36,307 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3116 to 2000. [2021-10-28 09:55:36,312 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2000 states, 1994 states have (on average 1.6745235707121364) internal successors, (3339), 1999 states have internal predecessors, (3339), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:36,320 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2000 states to 2000 states and 3339 transitions. [2021-10-28 09:55:36,321 INFO L78 Accepts]: Start accepts. Automaton has 2000 states and 3339 transitions. Word has length 60 [2021-10-28 09:55:36,321 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:36,321 INFO L470 AbstractCegarLoop]: Abstraction has 2000 states and 3339 transitions. [2021-10-28 09:55:36,321 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.2) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:36,321 INFO L276 IsEmpty]: Start isEmpty. Operand 2000 states and 3339 transitions. [2021-10-28 09:55:36,324 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-10-28 09:55:36,324 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:36,324 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:36,324 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-10-28 09:55:36,325 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:36,325 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:36,325 INFO L85 PathProgramCache]: Analyzing trace with hash 1162684893, now seen corresponding path program 1 times [2021-10-28 09:55:36,325 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:36,325 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [594791388] [2021-10-28 09:55:36,326 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:36,326 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:36,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:36,447 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-28 09:55:36,447 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:36,447 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [594791388] [2021-10-28 09:55:36,448 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [594791388] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:36,448 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:36,448 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-10-28 09:55:36,448 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1956855549] [2021-10-28 09:55:36,449 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-10-28 09:55:36,449 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:36,450 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-10-28 09:55:36,450 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2021-10-28 09:55:36,450 INFO L87 Difference]: Start difference. First operand 2000 states and 3339 transitions. Second operand has 9 states, 9 states have (on average 6.333333333333333) internal successors, (57), 9 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:38,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:38,395 INFO L93 Difference]: Finished difference Result 6190 states and 9970 transitions. [2021-10-28 09:55:38,396 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-10-28 09:55:38,396 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 6.333333333333333) internal successors, (57), 9 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 61 [2021-10-28 09:55:38,396 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:38,446 INFO L225 Difference]: With dead ends: 6190 [2021-10-28 09:55:38,446 INFO L226 Difference]: Without dead ends: 5030 [2021-10-28 09:55:38,449 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 186 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=268, Invalid=662, Unknown=0, NotChecked=0, Total=930 [2021-10-28 09:55:38,455 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5030 states. [2021-10-28 09:55:38,749 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5030 to 2639. [2021-10-28 09:55:38,754 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2639 states, 2633 states have (on average 1.645271553361185) internal successors, (4332), 2638 states have internal predecessors, (4332), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:38,762 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2639 states to 2639 states and 4332 transitions. [2021-10-28 09:55:38,762 INFO L78 Accepts]: Start accepts. Automaton has 2639 states and 4332 transitions. Word has length 61 [2021-10-28 09:55:38,763 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:38,763 INFO L470 AbstractCegarLoop]: Abstraction has 2639 states and 4332 transitions. [2021-10-28 09:55:38,763 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 6.333333333333333) internal successors, (57), 9 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:38,763 INFO L276 IsEmpty]: Start isEmpty. Operand 2639 states and 4332 transitions. [2021-10-28 09:55:38,766 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2021-10-28 09:55:38,766 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:38,766 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:38,767 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2021-10-28 09:55:38,767 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:38,767 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:38,767 INFO L85 PathProgramCache]: Analyzing trace with hash 1212942047, now seen corresponding path program 1 times [2021-10-28 09:55:38,768 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:38,768 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [747392336] [2021-10-28 09:55:38,768 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:38,768 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:38,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:38,835 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-28 09:55:38,835 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:38,835 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [747392336] [2021-10-28 09:55:38,835 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [747392336] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:38,835 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:38,835 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 09:55:38,838 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [488230099] [2021-10-28 09:55:38,838 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-10-28 09:55:38,838 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:38,839 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-28 09:55:38,841 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-28 09:55:38,841 INFO L87 Difference]: Start difference. First operand 2639 states and 4332 transitions. Second operand has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:39,204 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:39,205 INFO L93 Difference]: Finished difference Result 3927 states and 6332 transitions. [2021-10-28 09:55:39,206 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-10-28 09:55:39,206 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 62 [2021-10-28 09:55:39,206 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:39,213 INFO L225 Difference]: With dead ends: 3927 [2021-10-28 09:55:39,213 INFO L226 Difference]: Without dead ends: 2623 [2021-10-28 09:55:39,217 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-10-28 09:55:39,220 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2623 states. [2021-10-28 09:55:39,393 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2623 to 1982. [2021-10-28 09:55:39,398 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1982 states, 1976 states have (on average 1.6634615384615385) internal successors, (3287), 1981 states have internal predecessors, (3287), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:39,404 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1982 states to 1982 states and 3287 transitions. [2021-10-28 09:55:39,405 INFO L78 Accepts]: Start accepts. Automaton has 1982 states and 3287 transitions. Word has length 62 [2021-10-28 09:55:39,405 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:39,405 INFO L470 AbstractCegarLoop]: Abstraction has 1982 states and 3287 transitions. [2021-10-28 09:55:39,405 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:39,405 INFO L276 IsEmpty]: Start isEmpty. Operand 1982 states and 3287 transitions. [2021-10-28 09:55:39,408 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-10-28 09:55:39,408 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:39,408 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:39,409 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2021-10-28 09:55:39,409 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:39,409 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:39,409 INFO L85 PathProgramCache]: Analyzing trace with hash 737410204, now seen corresponding path program 1 times [2021-10-28 09:55:39,410 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:39,410 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [447907637] [2021-10-28 09:55:39,410 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:39,410 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:39,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:39,501 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-28 09:55:39,502 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:39,502 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [447907637] [2021-10-28 09:55:39,502 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [447907637] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:39,502 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:39,502 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 09:55:39,502 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1451472177] [2021-10-28 09:55:39,503 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 09:55:39,503 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:39,503 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 09:55:39,504 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 09:55:39,504 INFO L87 Difference]: Start difference. First operand 1982 states and 3287 transitions. Second operand has 5 states, 5 states have (on average 12.4) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:40,011 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:40,012 INFO L93 Difference]: Finished difference Result 5624 states and 9108 transitions. [2021-10-28 09:55:40,012 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-10-28 09:55:40,012 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 66 [2021-10-28 09:55:40,013 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:40,024 INFO L225 Difference]: With dead ends: 5624 [2021-10-28 09:55:40,024 INFO L226 Difference]: Without dead ends: 4452 [2021-10-28 09:55:40,028 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-10-28 09:55:40,034 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4452 states. [2021-10-28 09:55:40,350 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4452 to 3216. [2021-10-28 09:55:40,358 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3216 states, 3210 states have (on average 1.6763239875389409) internal successors, (5381), 3215 states have internal predecessors, (5381), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:40,368 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3216 states to 3216 states and 5381 transitions. [2021-10-28 09:55:40,369 INFO L78 Accepts]: Start accepts. Automaton has 3216 states and 5381 transitions. Word has length 66 [2021-10-28 09:55:40,369 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:40,369 INFO L470 AbstractCegarLoop]: Abstraction has 3216 states and 5381 transitions. [2021-10-28 09:55:40,369 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:40,369 INFO L276 IsEmpty]: Start isEmpty. Operand 3216 states and 5381 transitions. [2021-10-28 09:55:40,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-10-28 09:55:40,374 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:40,375 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:40,375 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2021-10-28 09:55:40,375 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:40,375 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:40,376 INFO L85 PathProgramCache]: Analyzing trace with hash -2115831750, now seen corresponding path program 1 times [2021-10-28 09:55:40,376 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:40,376 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1652116819] [2021-10-28 09:55:40,376 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:40,376 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:40,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:40,432 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-28 09:55:40,433 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:40,433 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1652116819] [2021-10-28 09:55:40,433 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1652116819] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:40,433 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:40,434 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 09:55:40,434 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1189022642] [2021-10-28 09:55:40,435 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 09:55:40,435 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:40,435 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 09:55:40,436 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:55:40,436 INFO L87 Difference]: Start difference. First operand 3216 states and 5381 transitions. Second operand has 3 states, 3 states have (on average 21.0) internal successors, (63), 3 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:40,850 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:40,850 INFO L93 Difference]: Finished difference Result 9456 states and 15823 transitions. [2021-10-28 09:55:40,850 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 09:55:40,850 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.0) internal successors, (63), 3 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 66 [2021-10-28 09:55:40,850 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:40,867 INFO L225 Difference]: With dead ends: 9456 [2021-10-28 09:55:40,867 INFO L226 Difference]: Without dead ends: 6274 [2021-10-28 09:55:40,872 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:55:40,880 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6274 states. [2021-10-28 09:55:41,232 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6274 to 4370. [2021-10-28 09:55:41,251 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4370 states, 4364 states have (on average 1.722731439046746) internal successors, (7518), 4369 states have internal predecessors, (7518), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:41,268 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4370 states to 4370 states and 7518 transitions. [2021-10-28 09:55:41,270 INFO L78 Accepts]: Start accepts. Automaton has 4370 states and 7518 transitions. Word has length 66 [2021-10-28 09:55:41,270 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:41,271 INFO L470 AbstractCegarLoop]: Abstraction has 4370 states and 7518 transitions. [2021-10-28 09:55:41,271 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.0) internal successors, (63), 3 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:41,272 INFO L276 IsEmpty]: Start isEmpty. Operand 4370 states and 7518 transitions. [2021-10-28 09:55:41,278 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-10-28 09:55:41,278 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:41,279 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:41,279 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2021-10-28 09:55:41,279 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:41,279 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:41,280 INFO L85 PathProgramCache]: Analyzing trace with hash -245114945, now seen corresponding path program 1 times [2021-10-28 09:55:41,280 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:41,280 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [577478542] [2021-10-28 09:55:41,280 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:41,280 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:41,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:41,354 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-28 09:55:41,355 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:41,355 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [577478542] [2021-10-28 09:55:41,355 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [577478542] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:41,355 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:41,355 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-28 09:55:41,356 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [686033690] [2021-10-28 09:55:41,358 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 09:55:41,358 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:41,358 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 09:55:41,359 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 09:55:41,359 INFO L87 Difference]: Start difference. First operand 4370 states and 7518 transitions. Second operand has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:41,870 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:41,870 INFO L93 Difference]: Finished difference Result 6478 states and 10803 transitions. [2021-10-28 09:55:41,870 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-28 09:55:41,870 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 67 [2021-10-28 09:55:41,871 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:41,883 INFO L225 Difference]: With dead ends: 6478 [2021-10-28 09:55:41,883 INFO L226 Difference]: Without dead ends: 4606 [2021-10-28 09:55:41,887 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-10-28 09:55:41,893 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4606 states. [2021-10-28 09:55:42,143 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4606 to 3908. [2021-10-28 09:55:42,149 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3908 states, 3902 states have (on average 1.7391081496668375) internal successors, (6786), 3907 states have internal predecessors, (6786), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:42,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3908 states to 3908 states and 6786 transitions. [2021-10-28 09:55:42,158 INFO L78 Accepts]: Start accepts. Automaton has 3908 states and 6786 transitions. Word has length 67 [2021-10-28 09:55:42,158 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:42,158 INFO L470 AbstractCegarLoop]: Abstraction has 3908 states and 6786 transitions. [2021-10-28 09:55:42,158 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:42,158 INFO L276 IsEmpty]: Start isEmpty. Operand 3908 states and 6786 transitions. [2021-10-28 09:55:42,164 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-10-28 09:55:42,165 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:42,165 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:42,165 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2021-10-28 09:55:42,165 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:42,166 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:42,166 INFO L85 PathProgramCache]: Analyzing trace with hash 167071917, now seen corresponding path program 1 times [2021-10-28 09:55:42,166 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:42,166 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [459666836] [2021-10-28 09:55:42,166 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:42,166 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:42,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:42,216 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-28 09:55:42,216 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:42,217 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [459666836] [2021-10-28 09:55:42,217 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [459666836] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:42,217 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:42,217 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 09:55:42,217 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [641818422] [2021-10-28 09:55:42,218 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 09:55:42,218 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:42,218 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 09:55:42,218 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:55:42,219 INFO L87 Difference]: Start difference. First operand 3908 states and 6786 transitions. Second operand has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:42,602 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:42,602 INFO L93 Difference]: Finished difference Result 11510 states and 20000 transitions. [2021-10-28 09:55:42,602 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 09:55:42,602 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 67 [2021-10-28 09:55:42,602 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:42,622 INFO L225 Difference]: With dead ends: 11510 [2021-10-28 09:55:42,622 INFO L226 Difference]: Without dead ends: 7640 [2021-10-28 09:55:42,629 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:55:42,639 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7640 states. [2021-10-28 09:55:43,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7640 to 6198. [2021-10-28 09:55:43,017 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6198 states, 6192 states have (on average 1.7782622739018088) internal successors, (11011), 6197 states have internal predecessors, (11011), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:43,031 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6198 states to 6198 states and 11011 transitions. [2021-10-28 09:55:43,031 INFO L78 Accepts]: Start accepts. Automaton has 6198 states and 11011 transitions. Word has length 67 [2021-10-28 09:55:43,031 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:43,031 INFO L470 AbstractCegarLoop]: Abstraction has 6198 states and 11011 transitions. [2021-10-28 09:55:43,032 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:43,032 INFO L276 IsEmpty]: Start isEmpty. Operand 6198 states and 11011 transitions. [2021-10-28 09:55:43,041 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2021-10-28 09:55:43,041 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:43,042 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:43,042 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2021-10-28 09:55:43,042 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:43,042 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:43,043 INFO L85 PathProgramCache]: Analyzing trace with hash -268562696, now seen corresponding path program 1 times [2021-10-28 09:55:43,043 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:43,043 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [509729411] [2021-10-28 09:55:43,043 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:43,043 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:43,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:43,092 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-28 09:55:43,093 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:43,093 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [509729411] [2021-10-28 09:55:43,093 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [509729411] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:43,093 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:43,093 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 09:55:43,093 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [650704334] [2021-10-28 09:55:43,094 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 09:55:43,094 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:43,095 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 09:55:43,095 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:55:43,095 INFO L87 Difference]: Start difference. First operand 6198 states and 11011 transitions. Second operand has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:43,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:43,628 INFO L93 Difference]: Finished difference Result 18342 states and 32605 transitions. [2021-10-28 09:55:43,628 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 09:55:43,628 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2021-10-28 09:55:43,629 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:43,661 INFO L225 Difference]: With dead ends: 18342 [2021-10-28 09:55:43,661 INFO L226 Difference]: Without dead ends: 12186 [2021-10-28 09:55:43,671 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:55:43,684 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12186 states. [2021-10-28 09:55:44,248 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12186 to 10744. [2021-10-28 09:55:44,261 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10744 states, 10738 states have (on average 1.8033153287390575) internal successors, (19364), 10743 states have internal predecessors, (19364), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:44,292 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10744 states to 10744 states and 19364 transitions. [2021-10-28 09:55:44,292 INFO L78 Accepts]: Start accepts. Automaton has 10744 states and 19364 transitions. Word has length 68 [2021-10-28 09:55:44,293 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:44,293 INFO L470 AbstractCegarLoop]: Abstraction has 10744 states and 19364 transitions. [2021-10-28 09:55:44,293 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:44,293 INFO L276 IsEmpty]: Start isEmpty. Operand 10744 states and 19364 transitions. [2021-10-28 09:55:44,308 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-10-28 09:55:44,308 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:55:44,309 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:55:44,309 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2021-10-28 09:55:44,309 INFO L402 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 09:55:44,310 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:55:44,310 INFO L85 PathProgramCache]: Analyzing trace with hash -552890897, now seen corresponding path program 1 times [2021-10-28 09:55:44,310 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:55:44,310 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [95241111] [2021-10-28 09:55:44,310 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:55:44,311 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:55:44,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:55:44,388 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-28 09:55:44,389 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:55:44,389 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [95241111] [2021-10-28 09:55:44,389 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [95241111] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:55:44,390 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:55:44,390 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 09:55:44,390 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1927477196] [2021-10-28 09:55:44,390 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-10-28 09:55:44,390 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:55:44,391 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-28 09:55:44,391 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-28 09:55:44,391 INFO L87 Difference]: Start difference. First operand 10744 states and 19364 transitions. Second operand has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:45,171 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:55:45,171 INFO L93 Difference]: Finished difference Result 11460 states and 20513 transitions. [2021-10-28 09:55:45,172 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-10-28 09:55:45,172 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 69 [2021-10-28 09:55:45,172 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:55:45,172 INFO L225 Difference]: With dead ends: 11460 [2021-10-28 09:55:45,172 INFO L226 Difference]: Without dead ends: 0 [2021-10-28 09:55:45,183 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-10-28 09:55:45,183 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-10-28 09:55:45,184 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-10-28 09:55:45,184 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:45,184 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-10-28 09:55:45,184 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 69 [2021-10-28 09:55:45,184 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:55:45,184 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-28 09:55:45,185 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:55:45,185 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-10-28 09:55:45,185 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-10-28 09:55:45,188 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION [2021-10-28 09:55:45,189 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION [2021-10-28 09:55:45,189 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION [2021-10-28 09:55:45,189 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION [2021-10-28 09:55:45,189 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION [2021-10-28 09:55:45,190 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION [2021-10-28 09:55:45,190 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2021-10-28 09:55:45,192 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-10-28 09:55:45,201 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:45,335 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:45,553 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:45,581 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:45,583 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:46,460 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:46,551 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:47,325 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:47,367 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:47,857 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:48,348 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:49,083 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:49,300 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:49,414 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:49,487 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:49,489 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:49,707 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:49,826 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:49,882 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:49,934 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:50,397 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:50,529 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:50,997 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:50,998 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:51,101 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:51,366 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:51,517 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:51,681 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:51,841 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:51,971 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:52,097 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:52,175 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:52,412 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:52,595 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:52,877 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:52,949 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:53,034 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:53,104 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:53,128 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:53,201 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:53,506 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:53,507 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:53,614 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:53,615 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:53,680 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:54,114 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:54,179 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:54,294 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:54,295 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:54,300 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:54,427 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:54,446 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:54,804 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:54,805 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:54,822 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:54,861 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:55,262 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:55,358 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:55,474 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:55,606 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:55,727 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:55,762 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:55,890 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:55,891 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:55,957 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:56,123 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:56,124 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:56,446 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:56,808 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:56,931 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:57,039 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:57,484 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:57,529 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:57,747 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:57,748 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:58,149 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:58,205 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:58,206 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:58,270 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:58,634 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:58,648 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:58,669 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:58,919 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:59,032 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:59,260 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:59,345 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:59,585 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:59,651 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:59,806 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:59,937 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:55:59,981 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:00,018 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:00,106 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:00,118 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:00,611 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:00,788 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:00,788 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:01,059 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:01,130 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:01,130 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:01,131 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:01,153 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:01,181 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:01,405 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:01,626 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:01,681 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:01,786 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:01,830 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:01,831 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:01,832 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:02,075 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:02,076 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:02,129 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:02,201 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:02,270 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:02,382 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:02,775 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:02,832 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:02,928 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:02,977 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:03,084 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:03,212 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:03,463 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:03,720 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:04,215 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:04,327 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:04,396 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:04,597 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:04,599 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:04,651 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:04,710 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:04,741 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:04,912 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:05,005 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:05,072 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:05,106 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:05,212 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:05,212 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:05,275 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:05,316 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:05,446 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:05,552 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:05,594 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:05,956 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:05,992 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:06,104 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:06,296 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:06,320 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:06,437 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:06,656 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:06,836 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:56:49,696 INFO L857 garLoopResultBuilder]: For program point L1026-3(lines 1026 1030) no Hoare annotation was computed. [2021-10-28 09:56:49,696 INFO L857 garLoopResultBuilder]: For program point L1557(lines 1557 1565) no Hoare annotation was computed. [2021-10-28 09:56:49,696 INFO L857 garLoopResultBuilder]: For program point L1557-2(lines 1557 1565) no Hoare annotation was computed. [2021-10-28 09:56:49,696 INFO L857 garLoopResultBuilder]: For program point L2482(lines 2482 2486) no Hoare annotation was computed. [2021-10-28 09:56:49,696 INFO L857 garLoopResultBuilder]: For program point L1557-4(lines 1557 1565) no Hoare annotation was computed. [2021-10-28 09:56:49,697 INFO L853 garLoopResultBuilder]: At program point L2482-1(lines 2351 2500) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 09:56:49,697 INFO L853 garLoopResultBuilder]: At program point L1822(lines 1817 1825) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,697 INFO L857 garLoopResultBuilder]: For program point L2616(lines 2616 2623) no Hoare annotation was computed. [2021-10-28 09:56:49,697 INFO L860 garLoopResultBuilder]: At program point L2616-1(lines 2616 2623) the Hoare annotation is: true [2021-10-28 09:56:49,698 INFO L857 garLoopResultBuilder]: For program point L2352(lines 2351 2500) no Hoare annotation was computed. [2021-10-28 09:56:49,698 INFO L857 garLoopResultBuilder]: For program point L1560(lines 1560 1564) no Hoare annotation was computed. [2021-10-28 09:56:49,698 INFO L853 garLoopResultBuilder]: At program point L1560-2(lines 1 2659) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (not (= ~rjh~0 1)) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (not (= ~__ste_email_to0~0 1))) [2021-10-28 09:56:49,698 INFO L857 garLoopResultBuilder]: For program point L1560-3(lines 1560 1564) no Hoare annotation was computed. [2021-10-28 09:56:49,698 INFO L853 garLoopResultBuilder]: At program point L1560-5(lines 1 2659) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1)) (= ULTIMATE.start_setClientId_~handle 2)) [2021-10-28 09:56:49,698 INFO L857 garLoopResultBuilder]: For program point L1560-6(lines 1560 1564) no Hoare annotation was computed. [2021-10-28 09:56:49,699 INFO L853 garLoopResultBuilder]: At program point L1560-8(lines 1 2659) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle 3) (= ~__ste_ClientAddressBook_size0~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1))) [2021-10-28 09:56:49,699 INFO L857 garLoopResultBuilder]: For program point L2353(lines 2353 2357) no Hoare annotation was computed. [2021-10-28 09:56:49,699 INFO L857 garLoopResultBuilder]: For program point L1957(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 09:56:49,699 INFO L857 garLoopResultBuilder]: For program point L1957-1(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 09:56:49,699 INFO L857 garLoopResultBuilder]: For program point L1957-2(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 09:56:49,699 INFO L857 garLoopResultBuilder]: For program point L1957-3(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 09:56:49,699 INFO L857 garLoopResultBuilder]: For program point L1957-4(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 09:56:49,700 INFO L857 garLoopResultBuilder]: For program point L1957-5(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 09:56:49,700 INFO L857 garLoopResultBuilder]: For program point L1957-6(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 09:56:49,700 INFO L857 garLoopResultBuilder]: For program point L1957-7(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 09:56:49,700 INFO L857 garLoopResultBuilder]: For program point L1957-8(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 09:56:49,700 INFO L857 garLoopResultBuilder]: For program point L1957-9(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 09:56:49,700 INFO L857 garLoopResultBuilder]: For program point L1957-10(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 09:56:49,700 INFO L857 garLoopResultBuilder]: For program point L1957-11(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 09:56:49,701 INFO L857 garLoopResultBuilder]: For program point L639(lines 639 655) no Hoare annotation was computed. [2021-10-28 09:56:49,701 INFO L857 garLoopResultBuilder]: For program point L639-1(lines 639 655) no Hoare annotation was computed. [2021-10-28 09:56:49,701 INFO L857 garLoopResultBuilder]: For program point L1961(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 09:56:49,701 INFO L857 garLoopResultBuilder]: For program point L1961-1(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 09:56:49,701 INFO L857 garLoopResultBuilder]: For program point L1961-2(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 09:56:49,701 INFO L857 garLoopResultBuilder]: For program point L1961-3(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 09:56:49,701 INFO L857 garLoopResultBuilder]: For program point L1961-4(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 09:56:49,702 INFO L857 garLoopResultBuilder]: For program point L1961-5(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 09:56:49,702 INFO L857 garLoopResultBuilder]: For program point L1961-6(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 09:56:49,702 INFO L857 garLoopResultBuilder]: For program point L1961-7(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 09:56:49,702 INFO L857 garLoopResultBuilder]: For program point L1697(lines 1697 1716) no Hoare annotation was computed. [2021-10-28 09:56:49,702 INFO L857 garLoopResultBuilder]: For program point L1961-8(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 09:56:49,702 INFO L857 garLoopResultBuilder]: For program point L1697-1(lines 1697 1716) no Hoare annotation was computed. [2021-10-28 09:56:49,702 INFO L857 garLoopResultBuilder]: For program point L1961-9(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 09:56:49,702 INFO L857 garLoopResultBuilder]: For program point L1961-10(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 09:56:49,703 INFO L857 garLoopResultBuilder]: For program point L1961-11(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 09:56:49,703 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2021-10-28 09:56:49,703 INFO L857 garLoopResultBuilder]: For program point L2359(lines 2359 2499) no Hoare annotation was computed. [2021-10-28 09:56:49,703 INFO L853 garLoopResultBuilder]: At program point L1831(lines 1826 1834) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,703 INFO L860 garLoopResultBuilder]: At program point L2624(lines 2606 2626) the Hoare annotation is: true [2021-10-28 09:56:49,704 INFO L857 garLoopResultBuilder]: For program point L643(lines 643 654) no Hoare annotation was computed. [2021-10-28 09:56:49,704 INFO L857 garLoopResultBuilder]: For program point L643-1(lines 643 654) no Hoare annotation was computed. [2021-10-28 09:56:49,704 INFO L853 garLoopResultBuilder]: At program point L1966(lines 1953 1971) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10) (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-28 09:56:49,704 INFO L853 garLoopResultBuilder]: At program point L1966-1(lines 1953 1971) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,704 INFO L853 garLoopResultBuilder]: At program point L1966-2(lines 1953 1971) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,705 INFO L853 garLoopResultBuilder]: At program point L1966-3(lines 1953 1971) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,705 INFO L853 garLoopResultBuilder]: At program point L1966-4(lines 1953 1971) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= 2 ULTIMATE.start_incoming_~client)) [2021-10-28 09:56:49,705 INFO L853 garLoopResultBuilder]: At program point L1966-5(lines 1953 1971) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,705 INFO L853 garLoopResultBuilder]: At program point L1966-6(lines 1953 1971) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,705 INFO L853 garLoopResultBuilder]: At program point L1966-7(lines 1953 1971) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,706 INFO L853 garLoopResultBuilder]: At program point L1966-8(lines 1953 1971) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-28 09:56:49,706 INFO L860 garLoopResultBuilder]: At program point L1966-9(lines 1953 1971) the Hoare annotation is: true [2021-10-28 09:56:49,706 INFO L853 garLoopResultBuilder]: At program point L1966-10(lines 1953 1971) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-28 09:56:49,706 INFO L860 garLoopResultBuilder]: At program point L1966-11(lines 1953 1971) the Hoare annotation is: true [2021-10-28 09:56:49,706 INFO L857 garLoopResultBuilder]: For program point L2363(lines 2363 2367) no Hoare annotation was computed. [2021-10-28 09:56:49,706 INFO L857 garLoopResultBuilder]: For program point L647(lines 647 653) no Hoare annotation was computed. [2021-10-28 09:56:49,707 INFO L857 garLoopResultBuilder]: For program point L647-1(lines 647 653) no Hoare annotation was computed. [2021-10-28 09:56:49,707 INFO L853 garLoopResultBuilder]: At program point L1840(lines 1835 1843) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,707 INFO L853 garLoopResultBuilder]: At program point L2501(lines 2350 2502) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle 3) (= ~bob~0 1) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1))) [2021-10-28 09:56:49,707 INFO L853 garLoopResultBuilder]: At program point L2369(lines 2359 2499) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 09:56:49,707 INFO L857 garLoopResultBuilder]: For program point L1048(lines 1048 1064) no Hoare annotation was computed. [2021-10-28 09:56:49,707 INFO L857 garLoopResultBuilder]: For program point L1048-1(lines 1048 1064) no Hoare annotation was computed. [2021-10-28 09:56:49,707 INFO L857 garLoopResultBuilder]: For program point L1048-2(lines 1048 1064) no Hoare annotation was computed. [2021-10-28 09:56:49,707 INFO L857 garLoopResultBuilder]: For program point L1048-3(lines 1048 1064) no Hoare annotation was computed. [2021-10-28 09:56:49,707 INFO L857 garLoopResultBuilder]: For program point L1048-4(lines 1048 1064) no Hoare annotation was computed. [2021-10-28 09:56:49,707 INFO L857 garLoopResultBuilder]: For program point L1048-5(lines 1048 1064) no Hoare annotation was computed. [2021-10-28 09:56:49,707 INFO L853 garLoopResultBuilder]: At program point L652(lines 635 658) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,707 INFO L853 garLoopResultBuilder]: At program point L652-1(lines 635 658) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,708 INFO L857 garLoopResultBuilder]: For program point L1976(lines 1976 1984) no Hoare annotation was computed. [2021-10-28 09:56:49,708 INFO L857 garLoopResultBuilder]: For program point L1976-2(lines 1976 1984) no Hoare annotation was computed. [2021-10-28 09:56:49,708 INFO L857 garLoopResultBuilder]: For program point L1976-4(lines 1976 1984) no Hoare annotation was computed. [2021-10-28 09:56:49,708 INFO L857 garLoopResultBuilder]: For program point L1976-6(lines 1976 1984) no Hoare annotation was computed. [2021-10-28 09:56:49,708 INFO L857 garLoopResultBuilder]: For program point L1976-8(lines 1976 1984) no Hoare annotation was computed. [2021-10-28 09:56:49,708 INFO L857 garLoopResultBuilder]: For program point L1976-10(lines 1976 1984) no Hoare annotation was computed. [2021-10-28 09:56:49,708 INFO L857 garLoopResultBuilder]: For program point L1976-12(lines 1976 1984) no Hoare annotation was computed. [2021-10-28 09:56:49,708 INFO L857 garLoopResultBuilder]: For program point L1052(lines 1052 1063) no Hoare annotation was computed. [2021-10-28 09:56:49,708 INFO L857 garLoopResultBuilder]: For program point L1052-1(lines 1052 1063) no Hoare annotation was computed. [2021-10-28 09:56:49,708 INFO L857 garLoopResultBuilder]: For program point L1052-2(lines 1052 1063) no Hoare annotation was computed. [2021-10-28 09:56:49,708 INFO L857 garLoopResultBuilder]: For program point L1052-3(lines 1052 1063) no Hoare annotation was computed. [2021-10-28 09:56:49,708 INFO L857 garLoopResultBuilder]: For program point L920(lines 920 981) no Hoare annotation was computed. [2021-10-28 09:56:49,708 INFO L857 garLoopResultBuilder]: For program point L1052-4(lines 1052 1063) no Hoare annotation was computed. [2021-10-28 09:56:49,708 INFO L857 garLoopResultBuilder]: For program point L920-1(lines 920 981) no Hoare annotation was computed. [2021-10-28 09:56:49,709 INFO L857 garLoopResultBuilder]: For program point L1052-5(lines 1052 1063) no Hoare annotation was computed. [2021-10-28 09:56:49,709 INFO L857 garLoopResultBuilder]: For program point L920-2(lines 920 981) no Hoare annotation was computed. [2021-10-28 09:56:49,709 INFO L857 garLoopResultBuilder]: For program point L920-3(lines 920 981) no Hoare annotation was computed. [2021-10-28 09:56:49,709 INFO L857 garLoopResultBuilder]: For program point L2374(lines 2374 2381) no Hoare annotation was computed. [2021-10-28 09:56:49,709 INFO L857 garLoopResultBuilder]: For program point L921(lines 921 937) no Hoare annotation was computed. [2021-10-28 09:56:49,709 INFO L857 garLoopResultBuilder]: For program point L921-1(lines 921 937) no Hoare annotation was computed. [2021-10-28 09:56:49,709 INFO L857 garLoopResultBuilder]: For program point L921-2(lines 921 937) no Hoare annotation was computed. [2021-10-28 09:56:49,709 INFO L857 garLoopResultBuilder]: For program point L921-3(lines 921 937) no Hoare annotation was computed. [2021-10-28 09:56:49,709 INFO L857 garLoopResultBuilder]: For program point L1979(lines 1979 1983) no Hoare annotation was computed. [2021-10-28 09:56:49,709 INFO L853 garLoopResultBuilder]: At program point L1979-2(lines 1972 1987) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1)) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,710 INFO L857 garLoopResultBuilder]: For program point L1979-3(lines 1979 1983) no Hoare annotation was computed. [2021-10-28 09:56:49,710 INFO L853 garLoopResultBuilder]: At program point L1979-5(lines 1972 1987) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-10-28 09:56:49,710 INFO L857 garLoopResultBuilder]: For program point L1979-6(lines 1979 1983) no Hoare annotation was computed. [2021-10-28 09:56:49,710 INFO L853 garLoopResultBuilder]: At program point L1979-8(lines 1972 1987) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,710 INFO L857 garLoopResultBuilder]: For program point L1979-9(lines 1979 1983) no Hoare annotation was computed. [2021-10-28 09:56:49,710 INFO L853 garLoopResultBuilder]: At program point L1979-11(lines 1972 1987) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,710 INFO L857 garLoopResultBuilder]: For program point L1979-12(lines 1979 1983) no Hoare annotation was computed. [2021-10-28 09:56:49,710 INFO L853 garLoopResultBuilder]: At program point L1979-14(lines 1972 1987) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,711 INFO L857 garLoopResultBuilder]: For program point L1979-15(lines 1979 1983) no Hoare annotation was computed. [2021-10-28 09:56:49,711 INFO L853 garLoopResultBuilder]: At program point L1979-17(lines 1972 1987) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,711 INFO L857 garLoopResultBuilder]: For program point L1979-18(lines 1979 1983) no Hoare annotation was computed. [2021-10-28 09:56:49,711 INFO L853 garLoopResultBuilder]: At program point L1979-20(lines 1972 1987) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,711 INFO L857 garLoopResultBuilder]: For program point L1056(lines 1056 1062) no Hoare annotation was computed. [2021-10-28 09:56:49,711 INFO L857 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-10-28 09:56:49,711 INFO L857 garLoopResultBuilder]: For program point L1056-1(lines 1056 1062) no Hoare annotation was computed. [2021-10-28 09:56:49,711 INFO L857 garLoopResultBuilder]: For program point L1056-2(lines 1056 1062) no Hoare annotation was computed. [2021-10-28 09:56:49,711 INFO L857 garLoopResultBuilder]: For program point L1056-3(lines 1056 1062) no Hoare annotation was computed. [2021-10-28 09:56:49,711 INFO L857 garLoopResultBuilder]: For program point L1056-4(lines 1056 1062) no Hoare annotation was computed. [2021-10-28 09:56:49,711 INFO L857 garLoopResultBuilder]: For program point L1056-5(lines 1056 1062) no Hoare annotation was computed. [2021-10-28 09:56:49,711 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2021-10-28 09:56:49,711 INFO L857 garLoopResultBuilder]: For program point L925(lines 925 936) no Hoare annotation was computed. [2021-10-28 09:56:49,712 INFO L857 garLoopResultBuilder]: For program point L925-1(lines 925 936) no Hoare annotation was computed. [2021-10-28 09:56:49,712 INFO L857 garLoopResultBuilder]: For program point L925-2(lines 925 936) no Hoare annotation was computed. [2021-10-28 09:56:49,712 INFO L857 garLoopResultBuilder]: For program point L925-3(lines 925 936) no Hoare annotation was computed. [2021-10-28 09:56:49,712 INFO L857 garLoopResultBuilder]: For program point L663(lines 663 675) no Hoare annotation was computed. [2021-10-28 09:56:49,712 INFO L853 garLoopResultBuilder]: At program point L1061(lines 1044 1067) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10) (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-28 09:56:49,712 INFO L853 garLoopResultBuilder]: At program point L1061-1(lines 1044 1067) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,712 INFO L853 garLoopResultBuilder]: At program point L1061-2(lines 1044 1067) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= 2 ULTIMATE.start_incoming_~client)) [2021-10-28 09:56:49,712 INFO L853 garLoopResultBuilder]: At program point L1061-3(lines 1044 1067) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,712 INFO L857 garLoopResultBuilder]: For program point L929(lines 929 935) no Hoare annotation was computed. [2021-10-28 09:56:49,712 INFO L853 garLoopResultBuilder]: At program point L1061-4(lines 1044 1067) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-28 09:56:49,712 INFO L857 garLoopResultBuilder]: For program point L929-1(lines 929 935) no Hoare annotation was computed. [2021-10-28 09:56:49,712 INFO L853 garLoopResultBuilder]: At program point L1061-5(lines 1044 1067) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-28 09:56:49,713 INFO L857 garLoopResultBuilder]: For program point L929-2(lines 929 935) no Hoare annotation was computed. [2021-10-28 09:56:49,713 INFO L857 garLoopResultBuilder]: For program point L929-3(lines 929 935) no Hoare annotation was computed. [2021-10-28 09:56:49,713 INFO L853 garLoopResultBuilder]: At program point L2383(lines 2370 2498) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 09:56:49,713 INFO L857 garLoopResultBuilder]: For program point L666(lines 666 674) no Hoare annotation was computed. [2021-10-28 09:56:49,713 INFO L857 garLoopResultBuilder]: For program point L669(lines 669 673) no Hoare annotation was computed. [2021-10-28 09:56:49,713 INFO L853 garLoopResultBuilder]: At program point L669-2(lines 659 678) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 09:56:49,713 INFO L853 garLoopResultBuilder]: At program point L1727(lines 1 2659) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (= 2 ULTIMATE.start_incoming_~client)) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-10-28 09:56:49,713 INFO L853 garLoopResultBuilder]: At program point L1727-1(lines 1 2659) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,713 INFO L853 garLoopResultBuilder]: At program point L1727-2(lines 1 2659) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= 2 ULTIMATE.start_incoming_~client)) [2021-10-28 09:56:49,713 INFO L853 garLoopResultBuilder]: At program point L1727-3(lines 1 2659) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,713 INFO L853 garLoopResultBuilder]: At program point L1727-4(lines 1 2659) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-28 09:56:49,714 INFO L853 garLoopResultBuilder]: At program point L1727-5(lines 1 2659) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-28 09:56:49,714 INFO L857 garLoopResultBuilder]: For program point L2388(lines 2388 2392) no Hoare annotation was computed. [2021-10-28 09:56:49,714 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2021-10-28 09:56:49,714 INFO L857 garLoopResultBuilder]: For program point L1994(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 09:56:49,714 INFO L857 garLoopResultBuilder]: For program point L1994-1(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 09:56:49,714 INFO L857 garLoopResultBuilder]: For program point L1994-2(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 09:56:49,715 INFO L857 garLoopResultBuilder]: For program point L1994-3(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 09:56:49,715 INFO L857 garLoopResultBuilder]: For program point L1994-4(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 09:56:49,715 INFO L857 garLoopResultBuilder]: For program point L1994-5(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 09:56:49,715 INFO L857 garLoopResultBuilder]: For program point L1994-6(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 09:56:49,715 INFO L857 garLoopResultBuilder]: For program point L1994-7(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 09:56:49,715 INFO L857 garLoopResultBuilder]: For program point L1994-8(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 09:56:49,715 INFO L857 garLoopResultBuilder]: For program point L1994-9(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 09:56:49,715 INFO L857 garLoopResultBuilder]: For program point L1994-10(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 09:56:49,715 INFO L857 garLoopResultBuilder]: For program point L1994-11(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 09:56:49,715 INFO L857 garLoopResultBuilder]: For program point L1994-12(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 09:56:49,715 INFO L857 garLoopResultBuilder]: For program point L1994-13(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 09:56:49,715 INFO L853 garLoopResultBuilder]: At program point L1863(lines 1859 1865) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,715 INFO L853 garLoopResultBuilder]: At program point L1863-1(lines 1859 1865) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,715 INFO L857 garLoopResultBuilder]: For program point L939(lines 939 980) no Hoare annotation was computed. [2021-10-28 09:56:49,716 INFO L857 garLoopResultBuilder]: For program point L939-1(lines 939 980) no Hoare annotation was computed. [2021-10-28 09:56:49,716 INFO L857 garLoopResultBuilder]: For program point L939-2(lines 939 980) no Hoare annotation was computed. [2021-10-28 09:56:49,716 INFO L857 garLoopResultBuilder]: For program point L939-3(lines 939 980) no Hoare annotation was computed. [2021-10-28 09:56:49,716 INFO L857 garLoopResultBuilder]: For program point L1072(lines 1072 1084) no Hoare annotation was computed. [2021-10-28 09:56:49,716 INFO L857 garLoopResultBuilder]: For program point L940(lines 940 956) no Hoare annotation was computed. [2021-10-28 09:56:49,716 INFO L857 garLoopResultBuilder]: For program point L940-1(lines 940 956) no Hoare annotation was computed. [2021-10-28 09:56:49,716 INFO L857 garLoopResultBuilder]: For program point L940-2(lines 940 956) no Hoare annotation was computed. [2021-10-28 09:56:49,716 INFO L857 garLoopResultBuilder]: For program point L940-3(lines 940 956) no Hoare annotation was computed. [2021-10-28 09:56:49,716 INFO L853 garLoopResultBuilder]: At program point L2394(lines 2384 2497) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 09:56:49,717 INFO L857 garLoopResultBuilder]: For program point L1998(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 09:56:49,717 INFO L857 garLoopResultBuilder]: For program point L1998-1(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 09:56:49,717 INFO L857 garLoopResultBuilder]: For program point L1998-2(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 09:56:49,717 INFO L857 garLoopResultBuilder]: For program point L1998-3(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 09:56:49,717 INFO L857 garLoopResultBuilder]: For program point L1998-4(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 09:56:49,717 INFO L857 garLoopResultBuilder]: For program point L1998-5(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 09:56:49,717 INFO L857 garLoopResultBuilder]: For program point L1998-6(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 09:56:49,717 INFO L857 garLoopResultBuilder]: For program point L1998-7(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 09:56:49,718 INFO L857 garLoopResultBuilder]: For program point L1998-8(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 09:56:49,718 INFO L857 garLoopResultBuilder]: For program point L1998-9(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 09:56:49,718 INFO L857 garLoopResultBuilder]: For program point L1998-10(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 09:56:49,718 INFO L857 garLoopResultBuilder]: For program point L1998-11(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 09:56:49,718 INFO L857 garLoopResultBuilder]: For program point L1998-12(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 09:56:49,718 INFO L857 garLoopResultBuilder]: For program point L1998-13(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 09:56:49,718 INFO L857 garLoopResultBuilder]: For program point L1075(lines 1075 1083) no Hoare annotation was computed. [2021-10-28 09:56:49,719 INFO L857 garLoopResultBuilder]: For program point L944(lines 944 955) no Hoare annotation was computed. [2021-10-28 09:56:49,719 INFO L857 garLoopResultBuilder]: For program point L944-1(lines 944 955) no Hoare annotation was computed. [2021-10-28 09:56:49,719 INFO L857 garLoopResultBuilder]: For program point L944-2(lines 944 955) no Hoare annotation was computed. [2021-10-28 09:56:49,719 INFO L857 garLoopResultBuilder]: For program point L944-3(lines 944 955) no Hoare annotation was computed. [2021-10-28 09:56:49,719 INFO L853 garLoopResultBuilder]: At program point L1605(lines 1580 1607) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,719 INFO L853 garLoopResultBuilder]: At program point L1605-1(lines 1580 1607) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,720 INFO L853 garLoopResultBuilder]: At program point L1605-2(lines 1580 1607) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,720 INFO L853 garLoopResultBuilder]: At program point L1605-3(lines 1580 1607) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,720 INFO L860 garLoopResultBuilder]: At program point L1605-4(lines 1580 1607) the Hoare annotation is: true [2021-10-28 09:56:49,720 INFO L860 garLoopResultBuilder]: At program point L1605-5(lines 1580 1607) the Hoare annotation is: true [2021-10-28 09:56:49,720 INFO L857 garLoopResultBuilder]: For program point L2399(lines 2399 2403) no Hoare annotation was computed. [2021-10-28 09:56:49,720 INFO L857 garLoopResultBuilder]: For program point L1078(lines 1078 1082) no Hoare annotation was computed. [2021-10-28 09:56:49,721 INFO L853 garLoopResultBuilder]: At program point L1078-2(lines 1 2659) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (not (= ~__ste_email_to0~0 1))) (.cse4 (= ULTIMATE.start_test_~op2~0 0)) (.cse5 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 (= ULTIMATE.start_test_~op1~0 0) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 (= ULTIMATE.start_test_~op1~0 1) .cse3 .cse4 .cse5))) [2021-10-28 09:56:49,721 INFO L853 garLoopResultBuilder]: At program point L2003(lines 1990 2008) the Hoare annotation is: (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,721 INFO L853 garLoopResultBuilder]: At program point L2003-1(lines 1990 2008) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-10-28 09:56:49,721 INFO L853 garLoopResultBuilder]: At program point L2003-2(lines 1990 2008) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,721 INFO L853 garLoopResultBuilder]: At program point L2003-3(lines 1990 2008) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,722 INFO L853 garLoopResultBuilder]: At program point L2003-4(lines 1990 2008) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,722 INFO L853 garLoopResultBuilder]: At program point L2003-5(lines 1990 2008) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,722 INFO L853 garLoopResultBuilder]: At program point L2003-6(lines 1990 2008) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,722 INFO L853 garLoopResultBuilder]: At program point L2003-7(lines 1990 2008) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,722 INFO L853 garLoopResultBuilder]: At program point L2003-8(lines 1990 2008) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,722 INFO L853 garLoopResultBuilder]: At program point L2003-9(lines 1990 2008) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,723 INFO L853 garLoopResultBuilder]: At program point L2003-10(lines 1990 2008) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4))) [2021-10-28 09:56:49,723 INFO L860 garLoopResultBuilder]: At program point L2003-11(lines 1990 2008) the Hoare annotation is: true [2021-10-28 09:56:49,723 INFO L853 garLoopResultBuilder]: At program point L2003-12(lines 1990 2008) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-28 09:56:49,723 INFO L860 garLoopResultBuilder]: At program point L2003-13(lines 1990 2008) the Hoare annotation is: true [2021-10-28 09:56:49,723 INFO L857 garLoopResultBuilder]: For program point L948(lines 948 954) no Hoare annotation was computed. [2021-10-28 09:56:49,723 INFO L857 garLoopResultBuilder]: For program point L948-1(lines 948 954) no Hoare annotation was computed. [2021-10-28 09:56:49,724 INFO L857 garLoopResultBuilder]: For program point L948-2(lines 948 954) no Hoare annotation was computed. [2021-10-28 09:56:49,724 INFO L857 garLoopResultBuilder]: For program point L948-3(lines 948 954) no Hoare annotation was computed. [2021-10-28 09:56:49,724 INFO L853 garLoopResultBuilder]: At program point L2405(lines 2395 2496) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 09:56:49,724 INFO L853 garLoopResultBuilder]: At program point L1613(lines 1608 1616) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,724 INFO L853 garLoopResultBuilder]: At program point L1613-1(lines 1608 1616) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,724 INFO L853 garLoopResultBuilder]: At program point L1613-2(lines 1608 1616) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,724 INFO L853 garLoopResultBuilder]: At program point L1613-3(lines 1608 1616) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,724 INFO L853 garLoopResultBuilder]: At program point L1613-4(lines 1608 1616) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,725 INFO L853 garLoopResultBuilder]: At program point L1613-5(lines 1608 1616) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,725 INFO L853 garLoopResultBuilder]: At program point L1613-6(lines 1608 1616) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,725 INFO L853 garLoopResultBuilder]: At program point L1613-7(lines 1608 1616) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,725 INFO L853 garLoopResultBuilder]: At program point L1613-8(lines 1608 1616) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,725 INFO L860 garLoopResultBuilder]: At program point L1613-9(lines 1608 1616) the Hoare annotation is: true [2021-10-28 09:56:49,725 INFO L853 garLoopResultBuilder]: At program point L1613-10(lines 1608 1616) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,725 INFO L860 garLoopResultBuilder]: At program point L1613-11(lines 1608 1616) the Hoare annotation is: true [2021-10-28 09:56:49,725 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-10-28 09:56:49,725 INFO L857 garLoopResultBuilder]: For program point L1483(lines 1483 1499) no Hoare annotation was computed. [2021-10-28 09:56:49,725 INFO L857 garLoopResultBuilder]: For program point L1483-1(lines 1483 1499) no Hoare annotation was computed. [2021-10-28 09:56:49,725 INFO L857 garLoopResultBuilder]: For program point L1483-2(lines 1483 1499) no Hoare annotation was computed. [2021-10-28 09:56:49,726 INFO L857 garLoopResultBuilder]: For program point L1483-3(lines 1483 1499) no Hoare annotation was computed. [2021-10-28 09:56:49,726 INFO L857 garLoopResultBuilder]: For program point L1483-4(lines 1483 1499) no Hoare annotation was computed. [2021-10-28 09:56:49,726 INFO L857 garLoopResultBuilder]: For program point L1483-5(lines 1483 1499) no Hoare annotation was computed. [2021-10-28 09:56:49,726 INFO L857 garLoopResultBuilder]: For program point L1748(lines 1748 1754) no Hoare annotation was computed. [2021-10-28 09:56:49,726 INFO L853 garLoopResultBuilder]: At program point L1748-1(lines 1740 1757) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,726 INFO L857 garLoopResultBuilder]: For program point L1748-2(lines 1748 1754) no Hoare annotation was computed. [2021-10-28 09:56:49,726 INFO L853 garLoopResultBuilder]: At program point L1748-3(lines 1740 1757) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,727 INFO L857 garLoopResultBuilder]: For program point L1748-4(lines 1748 1754) no Hoare annotation was computed. [2021-10-28 09:56:49,727 INFO L853 garLoopResultBuilder]: At program point L1748-5(lines 1740 1757) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= 2 |ULTIMATE.start_getEmailTo_#res|)) (.cse2 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse3 (= ULTIMATE.start_setClientId_~handle 3)) (.cse4 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse5 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse6 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse7 (= 2 ULTIMATE.start_createEmail_~to)) (.cse8 (= ~bob~0 1)) (.cse9 (= ~rjh~0 2)) (.cse10 (= ULTIMATE.start_outgoing_~size~2 0)) (.cse11 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse12 (= ULTIMATE.start_outgoing_~msg 1)) (.cse13 (= 2 ULTIMATE.start_incoming_~client))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= ULTIMATE.start_setEmailTo_~handle 1) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~__ste_email_to0~0 2) .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13))) [2021-10-28 09:56:49,727 INFO L857 garLoopResultBuilder]: For program point L1748-6(lines 1748 1754) no Hoare annotation was computed. [2021-10-28 09:56:49,727 INFO L853 garLoopResultBuilder]: At program point L1748-7(lines 1740 1757) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,727 INFO L857 garLoopResultBuilder]: For program point L1748-8(lines 1748 1754) no Hoare annotation was computed. [2021-10-28 09:56:49,727 INFO L853 garLoopResultBuilder]: At program point L1748-9(lines 1740 1757) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-28 09:56:49,727 INFO L857 garLoopResultBuilder]: For program point L1748-10(lines 1748 1754) no Hoare annotation was computed. [2021-10-28 09:56:49,728 INFO L853 garLoopResultBuilder]: At program point L1748-11(lines 1740 1757) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-28 09:56:49,728 INFO L857 garLoopResultBuilder]: For program point L2013(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 09:56:49,728 INFO L857 garLoopResultBuilder]: For program point L2013-2(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 09:56:49,728 INFO L857 garLoopResultBuilder]: For program point L2013-4(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 09:56:49,728 INFO L857 garLoopResultBuilder]: For program point L2013-6(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 09:56:49,728 INFO L857 garLoopResultBuilder]: For program point L2013-8(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 09:56:49,728 INFO L857 garLoopResultBuilder]: For program point L2013-10(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 09:56:49,728 INFO L857 garLoopResultBuilder]: For program point L2013-12(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 09:56:49,728 INFO L857 garLoopResultBuilder]: For program point L2013-14(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 09:56:49,729 INFO L857 garLoopResultBuilder]: For program point L2013-16(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 09:56:49,729 INFO L857 garLoopResultBuilder]: For program point L2410(lines 2410 2414) no Hoare annotation was computed. [2021-10-28 09:56:49,729 INFO L857 garLoopResultBuilder]: For program point L2013-18(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 09:56:49,729 INFO L857 garLoopResultBuilder]: For program point L2013-20(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 09:56:49,729 INFO L857 garLoopResultBuilder]: For program point L2013-22(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 09:56:49,729 INFO L857 garLoopResultBuilder]: For program point L2013-24(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 09:56:49,729 INFO L857 garLoopResultBuilder]: For program point L2013-26(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 09:56:49,729 INFO L857 garLoopResultBuilder]: For program point L2013-28(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 09:56:49,730 INFO L857 garLoopResultBuilder]: For program point L2013-30(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 09:56:49,730 INFO L857 garLoopResultBuilder]: For program point L2013-32(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 09:56:49,730 INFO L857 garLoopResultBuilder]: For program point L958(lines 958 979) no Hoare annotation was computed. [2021-10-28 09:56:49,730 INFO L857 garLoopResultBuilder]: For program point L958-1(lines 958 979) no Hoare annotation was computed. [2021-10-28 09:56:49,730 INFO L857 garLoopResultBuilder]: For program point L958-2(lines 958 979) no Hoare annotation was computed. [2021-10-28 09:56:49,730 INFO L857 garLoopResultBuilder]: For program point L958-3(lines 958 979) no Hoare annotation was computed. [2021-10-28 09:56:49,730 INFO L857 garLoopResultBuilder]: For program point L1487(lines 1487 1498) no Hoare annotation was computed. [2021-10-28 09:56:49,730 INFO L857 garLoopResultBuilder]: For program point L1487-1(lines 1487 1498) no Hoare annotation was computed. [2021-10-28 09:56:49,730 INFO L857 garLoopResultBuilder]: For program point L1487-2(lines 1487 1498) no Hoare annotation was computed. [2021-10-28 09:56:49,730 INFO L857 garLoopResultBuilder]: For program point L1487-3(lines 1487 1498) no Hoare annotation was computed. [2021-10-28 09:56:49,730 INFO L857 garLoopResultBuilder]: For program point L1487-4(lines 1487 1498) no Hoare annotation was computed. [2021-10-28 09:56:49,730 INFO L857 garLoopResultBuilder]: For program point L1487-5(lines 1487 1498) no Hoare annotation was computed. [2021-10-28 09:56:49,730 INFO L857 garLoopResultBuilder]: For program point L2016(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 09:56:49,730 INFO L857 garLoopResultBuilder]: For program point L959(lines 959 975) no Hoare annotation was computed. [2021-10-28 09:56:49,731 INFO L853 garLoopResultBuilder]: At program point L2016-2(lines 2009 2024) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,731 INFO L857 garLoopResultBuilder]: For program point L959-1(lines 959 975) no Hoare annotation was computed. [2021-10-28 09:56:49,731 INFO L857 garLoopResultBuilder]: For program point L2016-3(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 09:56:49,731 INFO L857 garLoopResultBuilder]: For program point L959-2(lines 959 975) no Hoare annotation was computed. [2021-10-28 09:56:49,731 INFO L857 garLoopResultBuilder]: For program point L959-3(lines 959 975) no Hoare annotation was computed. [2021-10-28 09:56:49,731 INFO L853 garLoopResultBuilder]: At program point L2016-5(lines 2009 2024) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse1 (= ULTIMATE.start_setClientId_~handle 3)) (.cse2 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse3 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse4 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse5 (= 2 ULTIMATE.start_createEmail_~to)) (.cse6 (= ~bob~0 1)) (.cse7 (= ~rjh~0 2)) (.cse8 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse9 (= ULTIMATE.start_outgoing_~msg 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 .cse3 (= ~__ste_email_to0~0 2) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ULTIMATE.start_setEmailTo_~handle 1) .cse6 .cse7 .cse8 .cse9))) [2021-10-28 09:56:49,731 INFO L857 garLoopResultBuilder]: For program point L2016-6(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 09:56:49,732 INFO L853 garLoopResultBuilder]: At program point L2016-8(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,732 INFO L857 garLoopResultBuilder]: For program point L2016-9(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 09:56:49,732 INFO L853 garLoopResultBuilder]: At program point L2016-11(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,732 INFO L857 garLoopResultBuilder]: For program point L2016-12(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 09:56:49,732 INFO L853 garLoopResultBuilder]: At program point L2016-14(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,732 INFO L857 garLoopResultBuilder]: For program point L2016-15(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 09:56:49,733 INFO L853 garLoopResultBuilder]: At program point L2016-17(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,733 INFO L857 garLoopResultBuilder]: For program point L2016-18(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 09:56:49,733 INFO L853 garLoopResultBuilder]: At program point L2016-20(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,733 INFO L857 garLoopResultBuilder]: For program point L2016-21(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 09:56:49,733 INFO L853 garLoopResultBuilder]: At program point L2016-23(lines 2009 2024) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= 2 |ULTIMATE.start_getEmailTo_#res|)) (.cse2 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse3 (= ULTIMATE.start_setClientId_~handle 3)) (.cse4 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse5 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse6 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse7 (= 2 ULTIMATE.start_createEmail_~to)) (.cse8 (= ~bob~0 1)) (.cse9 (= ~rjh~0 2)) (.cse10 (= ULTIMATE.start_outgoing_~size~2 0)) (.cse11 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse12 (= ULTIMATE.start_outgoing_~msg 1)) (.cse13 (= 2 ULTIMATE.start_incoming_~client))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= ULTIMATE.start_setEmailTo_~handle 1) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~__ste_email_to0~0 2) .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13))) [2021-10-28 09:56:49,733 INFO L857 garLoopResultBuilder]: For program point L2016-24(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 09:56:49,734 INFO L853 garLoopResultBuilder]: At program point L2016-26(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,734 INFO L857 garLoopResultBuilder]: For program point L2016-27(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 09:56:49,734 INFO L853 garLoopResultBuilder]: At program point L2016-29(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,734 INFO L857 garLoopResultBuilder]: For program point L2016-30(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 09:56:49,734 INFO L853 garLoopResultBuilder]: At program point L2016-32(lines 2009 2024) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,734 INFO L857 garLoopResultBuilder]: For program point L2016-33(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 09:56:49,735 INFO L853 garLoopResultBuilder]: At program point L2016-35(lines 2009 2024) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,735 INFO L857 garLoopResultBuilder]: For program point L2016-36(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 09:56:49,735 INFO L853 garLoopResultBuilder]: At program point L2016-38(lines 2009 2024) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,735 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2021-10-28 09:56:49,735 INFO L857 garLoopResultBuilder]: For program point L2016-39(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 09:56:49,735 INFO L853 garLoopResultBuilder]: At program point L2016-41(lines 2009 2024) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-28 09:56:49,736 INFO L857 garLoopResultBuilder]: For program point L2016-42(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 09:56:49,736 INFO L853 garLoopResultBuilder]: At program point L2016-44(lines 2009 2024) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,736 INFO L857 garLoopResultBuilder]: For program point L2016-45(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 09:56:49,736 INFO L853 garLoopResultBuilder]: At program point L2016-47(lines 2009 2024) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-28 09:56:49,736 INFO L857 garLoopResultBuilder]: For program point L2016-48(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 09:56:49,736 INFO L853 garLoopResultBuilder]: At program point L2016-50(lines 2009 2024) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,737 INFO L857 garLoopResultBuilder]: For program point L1491(lines 1491 1497) no Hoare annotation was computed. [2021-10-28 09:56:49,737 INFO L857 garLoopResultBuilder]: For program point L1491-1(lines 1491 1497) no Hoare annotation was computed. [2021-10-28 09:56:49,737 INFO L853 garLoopResultBuilder]: At program point L2416(lines 2406 2495) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 09:56:49,737 INFO L857 garLoopResultBuilder]: For program point L1491-2(lines 1491 1497) no Hoare annotation was computed. [2021-10-28 09:56:49,737 INFO L857 garLoopResultBuilder]: For program point L1491-3(lines 1491 1497) no Hoare annotation was computed. [2021-10-28 09:56:49,737 INFO L857 garLoopResultBuilder]: For program point L1491-4(lines 1491 1497) no Hoare annotation was computed. [2021-10-28 09:56:49,737 INFO L857 garLoopResultBuilder]: For program point L1491-5(lines 1491 1497) no Hoare annotation was computed. [2021-10-28 09:56:49,738 INFO L857 garLoopResultBuilder]: For program point L963(lines 963 974) no Hoare annotation was computed. [2021-10-28 09:56:49,738 INFO L857 garLoopResultBuilder]: For program point L963-1(lines 963 974) no Hoare annotation was computed. [2021-10-28 09:56:49,738 INFO L857 garLoopResultBuilder]: For program point L963-2(lines 963 974) no Hoare annotation was computed. [2021-10-28 09:56:49,738 INFO L857 garLoopResultBuilder]: For program point L963-3(lines 963 974) no Hoare annotation was computed. [2021-10-28 09:56:49,738 INFO L857 garLoopResultBuilder]: For program point L967(lines 967 973) no Hoare annotation was computed. [2021-10-28 09:56:49,738 INFO L857 garLoopResultBuilder]: For program point L967-1(lines 967 973) no Hoare annotation was computed. [2021-10-28 09:56:49,738 INFO L857 garLoopResultBuilder]: For program point L967-2(lines 967 973) no Hoare annotation was computed. [2021-10-28 09:56:49,738 INFO L857 garLoopResultBuilder]: For program point L967-3(lines 967 973) no Hoare annotation was computed. [2021-10-28 09:56:49,739 INFO L853 garLoopResultBuilder]: At program point L1496(lines 1479 1502) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,739 INFO L853 garLoopResultBuilder]: At program point L1496-1(lines 1479 1502) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,739 INFO L853 garLoopResultBuilder]: At program point L1496-2(lines 1479 1502) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_outgoing_~size~2 0)) (.cse10 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse11 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse8 .cse9 .cse10 .cse11 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-28 09:56:49,739 INFO L853 garLoopResultBuilder]: At program point L1496-3(lines 1479 1502) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,739 INFO L857 garLoopResultBuilder]: For program point L2421(lines 2421 2428) no Hoare annotation was computed. [2021-10-28 09:56:49,740 INFO L853 garLoopResultBuilder]: At program point L1496-4(lines 1479 1502) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) .cse2) (and .cse0 (not (= ~rjh~0 1)) .cse1 (not (= ULTIMATE.start_createEmail_~to 1)) .cse2 (= |ULTIMATE.start_getClientForwardReceiver_#res| 0)))) [2021-10-28 09:56:49,740 INFO L853 garLoopResultBuilder]: At program point L1496-5(lines 1479 1502) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (not (= ~rjh~0 1))) (.cse2 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse3 (not (= ULTIMATE.start_createEmail_~to 1))) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= |ULTIMATE.start_getClientForwardReceiver_#res| 0)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= 2 ULTIMATE.start_createEmail_~to) .cse3 (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-28 09:56:49,740 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2021-10-28 09:56:49,740 INFO L857 garLoopResultBuilder]: For program point L2560(lines 2560 2568) no Hoare annotation was computed. [2021-10-28 09:56:49,740 INFO L857 garLoopResultBuilder]: For program point L1768(lines 1768 1775) no Hoare annotation was computed. [2021-10-28 09:56:49,740 INFO L853 garLoopResultBuilder]: At program point L1768-1(lines 1671 1682) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,741 INFO L857 garLoopResultBuilder]: For program point L1768-2(lines 1768 1775) no Hoare annotation was computed. [2021-10-28 09:56:49,741 INFO L857 garLoopResultBuilder]: For program point L1768-4(lines 1768 1775) no Hoare annotation was computed. [2021-10-28 09:56:49,741 INFO L853 garLoopResultBuilder]: At program point L1768-5(lines 1794 1806) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,741 INFO L857 garLoopResultBuilder]: For program point L1768-6(lines 1768 1775) no Hoare annotation was computed. [2021-10-28 09:56:49,741 INFO L853 garLoopResultBuilder]: At program point L1768-7(lines 1671 1682) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,741 INFO L857 garLoopResultBuilder]: For program point L1768-8(lines 1768 1775) no Hoare annotation was computed. [2021-10-28 09:56:49,742 INFO L857 garLoopResultBuilder]: For program point L1768-10(lines 1768 1775) no Hoare annotation was computed. [2021-10-28 09:56:49,742 INFO L857 garLoopResultBuilder]: For program point L2297(lines 2297 2303) no Hoare annotation was computed. [2021-10-28 09:56:49,742 INFO L857 garLoopResultBuilder]: For program point L2297-2(lines 2297 2303) no Hoare annotation was computed. [2021-10-28 09:56:49,742 INFO L857 garLoopResultBuilder]: For program point L2297-4(lines 2297 2303) no Hoare annotation was computed. [2021-10-28 09:56:49,742 INFO L857 garLoopResultBuilder]: For program point L2297-6(lines 2297 2303) no Hoare annotation was computed. [2021-10-28 09:56:49,742 INFO L857 garLoopResultBuilder]: For program point L2297-8(lines 2297 2303) no Hoare annotation was computed. [2021-10-28 09:56:49,742 INFO L857 garLoopResultBuilder]: For program point L2297-10(lines 2297 2303) no Hoare annotation was computed. [2021-10-28 09:56:49,743 INFO L853 garLoopResultBuilder]: At program point L1637(lines 1626 1640) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,743 INFO L853 garLoopResultBuilder]: At program point L2430(lines 2417 2494) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 09:56:49,743 INFO L853 garLoopResultBuilder]: At program point L978(lines 916 984) the Hoare annotation is: (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,743 INFO L853 garLoopResultBuilder]: At program point L978-1(lines 916 984) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,743 INFO L853 garLoopResultBuilder]: At program point L978-2(lines 916 984) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,743 INFO L853 garLoopResultBuilder]: At program point L978-3(lines 916 984) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,744 INFO L857 garLoopResultBuilder]: For program point L1507(lines 1507 1519) no Hoare annotation was computed. [2021-10-28 09:56:49,744 INFO L857 garLoopResultBuilder]: For program point L1510(lines 1510 1518) no Hoare annotation was computed. [2021-10-28 09:56:49,744 INFO L857 garLoopResultBuilder]: For program point L2435(lines 2435 2439) no Hoare annotation was computed. [2021-10-28 09:56:49,744 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-10-28 09:56:49,744 INFO L857 garLoopResultBuilder]: For program point L1513(lines 1513 1517) no Hoare annotation was computed. [2021-10-28 09:56:49,744 INFO L853 garLoopResultBuilder]: At program point L1513-2(lines 1 2659) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 09:56:49,744 INFO L857 garLoopResultBuilder]: For program point L855(lines 855 903) no Hoare annotation was computed. [2021-10-28 09:56:49,745 INFO L853 garLoopResultBuilder]: At program point L2441(lines 2431 2493) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 09:56:49,745 INFO L857 garLoopResultBuilder]: For program point L856(lines 856 868) no Hoare annotation was computed. [2021-10-28 09:56:49,745 INFO L857 garLoopResultBuilder]: For program point L989(lines 989 1037) no Hoare annotation was computed. [2021-10-28 09:56:49,745 INFO L857 garLoopResultBuilder]: For program point L989-1(lines 989 1037) no Hoare annotation was computed. [2021-10-28 09:56:49,745 INFO L857 garLoopResultBuilder]: For program point L990(lines 990 1002) no Hoare annotation was computed. [2021-10-28 09:56:49,745 INFO L857 garLoopResultBuilder]: For program point L990-2(lines 990 1002) no Hoare annotation was computed. [2021-10-28 09:56:49,745 INFO L857 garLoopResultBuilder]: For program point L859(lines 859 867) no Hoare annotation was computed. [2021-10-28 09:56:49,746 INFO L857 garLoopResultBuilder]: For program point L2446(lines 2446 2453) no Hoare annotation was computed. [2021-10-28 09:56:49,746 INFO L857 garLoopResultBuilder]: For program point L993(lines 993 1001) no Hoare annotation was computed. [2021-10-28 09:56:49,746 INFO L857 garLoopResultBuilder]: For program point L993-2(lines 993 1001) no Hoare annotation was computed. [2021-10-28 09:56:49,746 INFO L857 garLoopResultBuilder]: For program point L862(lines 862 866) no Hoare annotation was computed. [2021-10-28 09:56:49,746 INFO L857 garLoopResultBuilder]: For program point L1920(lines 1920 1931) no Hoare annotation was computed. [2021-10-28 09:56:49,746 INFO L857 garLoopResultBuilder]: For program point L1920-1(lines 1920 1931) no Hoare annotation was computed. [2021-10-28 09:56:49,746 INFO L857 garLoopResultBuilder]: For program point L1920-2(lines 1920 1931) no Hoare annotation was computed. [2021-10-28 09:56:49,747 INFO L857 garLoopResultBuilder]: For program point L1920-3(lines 1920 1931) no Hoare annotation was computed. [2021-10-28 09:56:49,747 INFO L857 garLoopResultBuilder]: For program point L1920-4(lines 1920 1931) no Hoare annotation was computed. [2021-10-28 09:56:49,747 INFO L857 garLoopResultBuilder]: For program point L1920-5(lines 1920 1931) no Hoare annotation was computed. [2021-10-28 09:56:49,747 INFO L857 garLoopResultBuilder]: For program point L996(lines 996 1000) no Hoare annotation was computed. [2021-10-28 09:56:49,747 INFO L857 garLoopResultBuilder]: For program point L996-3(lines 996 1000) no Hoare annotation was computed. [2021-10-28 09:56:49,747 INFO L857 garLoopResultBuilder]: For program point L1924(lines 1924 1930) no Hoare annotation was computed. [2021-10-28 09:56:49,747 INFO L857 garLoopResultBuilder]: For program point L1924-1(lines 1924 1930) no Hoare annotation was computed. [2021-10-28 09:56:49,748 INFO L857 garLoopResultBuilder]: For program point L1924-2(lines 1924 1930) no Hoare annotation was computed. [2021-10-28 09:56:49,748 INFO L857 garLoopResultBuilder]: For program point L1924-3(lines 1924 1930) no Hoare annotation was computed. [2021-10-28 09:56:49,748 INFO L857 garLoopResultBuilder]: For program point L1924-4(lines 1924 1930) no Hoare annotation was computed. [2021-10-28 09:56:49,748 INFO L857 garLoopResultBuilder]: For program point L1924-5(lines 1924 1930) no Hoare annotation was computed. [2021-10-28 09:56:49,748 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2021-10-28 09:56:49,748 INFO L857 garLoopResultBuilder]: For program point L1530(lines 1530 1546) no Hoare annotation was computed. [2021-10-28 09:56:49,748 INFO L857 garLoopResultBuilder]: For program point L1530-1(lines 1530 1546) no Hoare annotation was computed. [2021-10-28 09:56:49,749 INFO L857 garLoopResultBuilder]: For program point L1530-2(lines 1530 1546) no Hoare annotation was computed. [2021-10-28 09:56:49,749 INFO L857 garLoopResultBuilder]: For program point L1530-3(lines 1530 1546) no Hoare annotation was computed. [2021-10-28 09:56:49,749 INFO L853 garLoopResultBuilder]: At program point L2455(lines 2442 2492) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 09:56:49,749 INFO L857 garLoopResultBuilder]: For program point L1530-4(lines 1530 1546) no Hoare annotation was computed. [2021-10-28 09:56:49,749 INFO L857 garLoopResultBuilder]: For program point L1530-5(lines 1530 1546) no Hoare annotation was computed. [2021-10-28 09:56:49,749 INFO L857 garLoopResultBuilder]: For program point L870(lines 870 902) no Hoare annotation was computed. [2021-10-28 09:56:49,750 INFO L857 garLoopResultBuilder]: For program point L871(lines 871 883) no Hoare annotation was computed. [2021-10-28 09:56:49,750 INFO L857 garLoopResultBuilder]: For program point L1004(lines 1004 1036) no Hoare annotation was computed. [2021-10-28 09:56:49,750 INFO L857 garLoopResultBuilder]: For program point L1004-1(lines 1004 1036) no Hoare annotation was computed. [2021-10-28 09:56:49,750 INFO L853 garLoopResultBuilder]: At program point L1929(lines 1916 1934) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,750 INFO L853 garLoopResultBuilder]: At program point L1929-1(lines 1916 1934) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,750 INFO L853 garLoopResultBuilder]: At program point L1929-2(lines 1916 1934) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,751 INFO L853 garLoopResultBuilder]: At program point L1929-3(lines 1916 1934) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,751 INFO L860 garLoopResultBuilder]: At program point L1929-4(lines 1916 1934) the Hoare annotation is: true [2021-10-28 09:56:49,751 INFO L860 garLoopResultBuilder]: At program point L1929-5(lines 1916 1934) the Hoare annotation is: true [2021-10-28 09:56:49,751 INFO L857 garLoopResultBuilder]: For program point L1005(lines 1005 1017) no Hoare annotation was computed. [2021-10-28 09:56:49,751 INFO L857 garLoopResultBuilder]: For program point L1005-2(lines 1005 1017) no Hoare annotation was computed. [2021-10-28 09:56:49,751 INFO L857 garLoopResultBuilder]: For program point L1534(lines 1534 1545) no Hoare annotation was computed. [2021-10-28 09:56:49,751 INFO L857 garLoopResultBuilder]: For program point L1534-1(lines 1534 1545) no Hoare annotation was computed. [2021-10-28 09:56:49,752 INFO L857 garLoopResultBuilder]: For program point L1534-2(lines 1534 1545) no Hoare annotation was computed. [2021-10-28 09:56:49,752 INFO L857 garLoopResultBuilder]: For program point L1534-3(lines 1534 1545) no Hoare annotation was computed. [2021-10-28 09:56:49,752 INFO L857 garLoopResultBuilder]: For program point L1534-4(lines 1534 1545) no Hoare annotation was computed. [2021-10-28 09:56:49,752 INFO L857 garLoopResultBuilder]: For program point L1534-5(lines 1534 1545) no Hoare annotation was computed. [2021-10-28 09:56:49,752 INFO L857 garLoopResultBuilder]: For program point L874(lines 874 882) no Hoare annotation was computed. [2021-10-28 09:56:49,752 INFO L857 garLoopResultBuilder]: For program point L2460(lines 2460 2464) no Hoare annotation was computed. [2021-10-28 09:56:49,752 INFO L857 garLoopResultBuilder]: For program point L1008(lines 1008 1016) no Hoare annotation was computed. [2021-10-28 09:56:49,752 INFO L857 garLoopResultBuilder]: For program point L1008-2(lines 1008 1016) no Hoare annotation was computed. [2021-10-28 09:56:49,753 INFO L857 garLoopResultBuilder]: For program point L877(lines 877 881) no Hoare annotation was computed. [2021-10-28 09:56:49,753 INFO L857 garLoopResultBuilder]: For program point L1538(lines 1538 1544) no Hoare annotation was computed. [2021-10-28 09:56:49,753 INFO L857 garLoopResultBuilder]: For program point L1538-1(lines 1538 1544) no Hoare annotation was computed. [2021-10-28 09:56:49,753 INFO L857 garLoopResultBuilder]: For program point L1538-2(lines 1538 1544) no Hoare annotation was computed. [2021-10-28 09:56:49,753 INFO L857 garLoopResultBuilder]: For program point L1538-3(lines 1538 1544) no Hoare annotation was computed. [2021-10-28 09:56:49,753 INFO L857 garLoopResultBuilder]: For program point L1538-4(lines 1538 1544) no Hoare annotation was computed. [2021-10-28 09:56:49,753 INFO L857 garLoopResultBuilder]: For program point L1538-5(lines 1538 1544) no Hoare annotation was computed. [2021-10-28 09:56:49,754 INFO L853 garLoopResultBuilder]: At program point L85(lines 1 2659) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (not (= ~rjh~0 1)) (= ~__ste_client_forwardReceiver1~0 0) (not (= ~__ste_email_to0~0 1))) [2021-10-28 09:56:49,754 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-10-28 09:56:49,754 INFO L857 garLoopResultBuilder]: For program point L1011(lines 1011 1015) no Hoare annotation was computed. [2021-10-28 09:56:49,754 INFO L857 garLoopResultBuilder]: For program point L1011-3(lines 1011 1015) no Hoare annotation was computed. [2021-10-28 09:56:49,754 INFO L853 garLoopResultBuilder]: At program point L2466(lines 2456 2491) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 09:56:49,754 INFO L853 garLoopResultBuilder]: At program point L1543(lines 1526 1549) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-10-28 09:56:49,755 INFO L857 garLoopResultBuilder]: For program point L486(line 486) no Hoare annotation was computed. [2021-10-28 09:56:49,755 INFO L853 garLoopResultBuilder]: At program point L1543-1(lines 1526 1549) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,755 INFO L857 garLoopResultBuilder]: For program point L486-1(line 486) no Hoare annotation was computed. [2021-10-28 09:56:49,755 INFO L853 garLoopResultBuilder]: At program point L1543-2(lines 1526 1549) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 09:56:49,755 INFO L857 garLoopResultBuilder]: For program point L486-2(line 486) no Hoare annotation was computed. [2021-10-28 09:56:49,755 INFO L853 garLoopResultBuilder]: At program point L1543-3(lines 1526 1549) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,756 INFO L857 garLoopResultBuilder]: For program point L486-3(line 486) no Hoare annotation was computed. [2021-10-28 09:56:49,756 INFO L853 garLoopResultBuilder]: At program point L1543-4(lines 1526 1549) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,756 INFO L857 garLoopResultBuilder]: For program point L486-4(line 486) no Hoare annotation was computed. [2021-10-28 09:56:49,756 INFO L853 garLoopResultBuilder]: At program point L1543-5(lines 1526 1549) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 09:56:49,756 INFO L857 garLoopResultBuilder]: For program point L486-5(line 486) no Hoare annotation was computed. [2021-10-28 09:56:49,756 INFO L853 garLoopResultBuilder]: At program point L487(lines 2289 2306) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,757 INFO L853 garLoopResultBuilder]: At program point L487-1(lines 2289 2306) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,757 INFO L853 garLoopResultBuilder]: At program point L487-2(lines 2289 2306) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,757 INFO L853 garLoopResultBuilder]: At program point L487-3(lines 2289 2306) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 09:56:49,757 INFO L860 garLoopResultBuilder]: At program point L487-4(lines 2289 2306) the Hoare annotation is: true [2021-10-28 09:56:49,757 INFO L860 garLoopResultBuilder]: At program point L487-5(lines 2289 2306) the Hoare annotation is: true [2021-10-28 09:56:49,757 INFO L857 garLoopResultBuilder]: For program point L885(lines 885 901) no Hoare annotation was computed. [2021-10-28 09:56:49,758 INFO L853 garLoopResultBuilder]: At program point L885-1(lines 851 906) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 09:56:49,758 INFO L853 garLoopResultBuilder]: At program point L2603(lines 2583 2605) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle 3) (= ~__ste_ClientAddressBook_size0~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1))) [2021-10-28 09:56:49,758 INFO L857 garLoopResultBuilder]: For program point L2471(lines 2471 2475) no Hoare annotation was computed. [2021-10-28 09:56:49,758 INFO L853 garLoopResultBuilder]: At program point L93(lines 88 96) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (not (= ~rjh~0 1)) (= ~__ste_client_forwardReceiver1~0 0) (not (= ~__ste_email_to0~0 1))) [2021-10-28 09:56:49,758 INFO L857 garLoopResultBuilder]: For program point L886(lines 886 898) no Hoare annotation was computed. [2021-10-28 09:56:49,758 INFO L857 garLoopResultBuilder]: For program point L1019(lines 1019 1035) no Hoare annotation was computed. [2021-10-28 09:56:49,759 INFO L853 garLoopResultBuilder]: At program point L1019-1(lines 985 1040) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 09:56:49,759 INFO L857 garLoopResultBuilder]: For program point L1019-2(lines 1019 1035) no Hoare annotation was computed. [2021-10-28 09:56:49,759 INFO L853 garLoopResultBuilder]: At program point L1019-3(lines 1 2659) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 09:56:49,759 INFO L857 garLoopResultBuilder]: For program point L1020(lines 1020 1032) no Hoare annotation was computed. [2021-10-28 09:56:49,759 INFO L857 garLoopResultBuilder]: For program point L1020-2(lines 1020 1032) no Hoare annotation was computed. [2021-10-28 09:56:49,759 INFO L857 garLoopResultBuilder]: For program point L889(lines 889 897) no Hoare annotation was computed. [2021-10-28 09:56:49,759 INFO L857 garLoopResultBuilder]: For program point L1023(lines 1023 1031) no Hoare annotation was computed. [2021-10-28 09:56:49,760 INFO L857 garLoopResultBuilder]: For program point L1023-2(lines 1023 1031) no Hoare annotation was computed. [2021-10-28 09:56:49,760 INFO L853 garLoopResultBuilder]: At program point L2477(lines 2467 2490) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 09:56:49,760 INFO L857 garLoopResultBuilder]: For program point L892(lines 892 896) no Hoare annotation was computed. [2021-10-28 09:56:49,760 INFO L857 garLoopResultBuilder]: For program point L1554(lines 1554 1566) no Hoare annotation was computed. [2021-10-28 09:56:49,760 INFO L857 garLoopResultBuilder]: For program point L1554-2(lines 1554 1566) no Hoare annotation was computed. [2021-10-28 09:56:49,760 INFO L857 garLoopResultBuilder]: For program point L1554-4(lines 1554 1566) no Hoare annotation was computed. [2021-10-28 09:56:49,761 INFO L857 garLoopResultBuilder]: For program point L1026(lines 1026 1030) no Hoare annotation was computed. [2021-10-28 09:56:49,764 INFO L731 BasicCegarLoop]: Path program histogram: [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:56:49,766 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-10-28 09:56:49,853 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.10 09:56:49 BoogieIcfgContainer [2021-10-28 09:56:49,854 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-10-28 09:56:49,854 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-10-28 09:56:49,854 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-10-28 09:56:49,855 INFO L275 PluginConnector]: Witness Printer initialized [2021-10-28 09:56:49,855 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.10 09:55:26" (3/4) ... [2021-10-28 09:56:49,858 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-10-28 09:56:49,904 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 208 nodes and edges [2021-10-28 09:56:49,917 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 114 nodes and edges [2021-10-28 09:56:49,922 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-10-28 09:56:49,928 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2021-10-28 09:56:49,933 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-10-28 09:56:49,938 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-10-28 09:56:49,972 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,974 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,974 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,974 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-28 09:56:49,975 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,975 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-28 09:56:49,975 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,976 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-28 09:56:49,976 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || ((((((((((sender == 1 && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-28 09:56:49,977 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-28 09:56:49,977 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client [2021-10-28 09:56:49,977 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-28 09:56:49,977 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client [2021-10-28 09:56:49,978 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) [2021-10-28 09:56:49,978 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) || (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && 2 == handle) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) [2021-10-28 09:56:49,978 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-28 09:56:49,978 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,979 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client [2021-10-28 09:56:49,979 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-28 09:56:49,979 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,979 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) [2021-10-28 09:56:49,979 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-28 09:56:49,980 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,980 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) [2021-10-28 09:56:49,980 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-28 09:56:49,980 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,980 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,981 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,981 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,981 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,981 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) [2021-10-28 09:56:49,982 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,982 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,982 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,982 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,982 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,983 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,983 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,983 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,983 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,984 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-10-28 09:56:49,984 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,984 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,984 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,984 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-10-28 09:56:49,985 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,985 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,985 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,986 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-28 09:56:49,986 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,986 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,986 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,986 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,986 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,987 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,987 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,987 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) || ((((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) [2021-10-28 09:56:49,987 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,988 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,988 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-28 09:56:49,988 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,988 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,989 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-28 09:56:49,989 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,989 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) || (((((((((sender == 1 && handle == 3) && !(rjh == 1)) && \result == 1) && 2 == to) && !(to == 1)) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-28 09:56:49,989 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,989 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,990 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,990 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-28 09:56:49,990 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,990 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-10-28 09:56:49,990 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,991 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,991 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-28 09:56:49,991 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,992 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,992 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,992 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-10-28 09:56:49,992 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 09:56:49,992 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,993 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,993 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,993 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,993 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,993 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,994 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,994 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,994 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,995 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,995 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,995 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,995 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,995 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,996 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,996 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,996 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,997 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) [2021-10-28 09:56:49,997 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,997 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,997 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,997 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-28 09:56:49,998 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,998 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-28 09:56:49,998 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-28 09:56:49,998 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,998 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) [2021-10-28 09:56:49,999 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-28 09:56:49,999 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-28 09:56:49,999 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:49,999 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-28 09:56:49,999 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 09:56:50,182 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/witness.graphml [2021-10-28 09:56:50,182 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-10-28 09:56:50,184 INFO L168 Benchmark]: Toolchain (without parser) took 86861.20 ms. Allocated memory was 98.6 MB in the beginning and 1.5 GB in the end (delta: 1.4 GB). Free memory was 62.3 MB in the beginning and 1.0 GB in the end (delta: -966.7 MB). Peak memory consumption was 478.9 MB. Max. memory is 16.1 GB. [2021-10-28 09:56:50,184 INFO L168 Benchmark]: CDTParser took 0.27 ms. Allocated memory is still 81.8 MB. Free memory was 60.6 MB in the beginning and 60.6 MB in the end (delta: 21.4 kB). There was no memory consumed. Max. memory is 16.1 GB. [2021-10-28 09:56:50,185 INFO L168 Benchmark]: CACSL2BoogieTranslator took 918.77 ms. Allocated memory is still 98.6 MB. Free memory was 61.9 MB in the beginning and 52.2 MB in the end (delta: 9.7 MB). Peak memory consumption was 14.7 MB. Max. memory is 16.1 GB. [2021-10-28 09:56:50,185 INFO L168 Benchmark]: Boogie Procedure Inliner took 201.39 ms. Allocated memory is still 98.6 MB. Free memory was 51.7 MB in the beginning and 70.8 MB in the end (delta: -19.0 MB). Peak memory consumption was 18.5 MB. Max. memory is 16.1 GB. [2021-10-28 09:56:50,185 INFO L168 Benchmark]: Boogie Preprocessor took 164.72 ms. Allocated memory is still 98.6 MB. Free memory was 70.8 MB in the beginning and 63.3 MB in the end (delta: 7.4 MB). Peak memory consumption was 6.3 MB. Max. memory is 16.1 GB. [2021-10-28 09:56:50,186 INFO L168 Benchmark]: RCFGBuilder took 2178.13 ms. Allocated memory was 98.6 MB in the beginning and 136.3 MB in the end (delta: 37.7 MB). Free memory was 62.8 MB in the beginning and 90.3 MB in the end (delta: -27.5 MB). Peak memory consumption was 50.2 MB. Max. memory is 16.1 GB. [2021-10-28 09:56:50,186 INFO L168 Benchmark]: TraceAbstraction took 83048.76 ms. Allocated memory was 136.3 MB in the beginning and 1.5 GB in the end (delta: 1.4 GB). Free memory was 89.3 MB in the beginning and 1.1 GB in the end (delta: -985.3 MB). Peak memory consumption was 993.5 MB. Max. memory is 16.1 GB. [2021-10-28 09:56:50,187 INFO L168 Benchmark]: Witness Printer took 328.05 ms. Allocated memory is still 1.5 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 45.6 MB). Peak memory consumption was 46.1 MB. Max. memory is 16.1 GB. [2021-10-28 09:56:50,189 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.27 ms. Allocated memory is still 81.8 MB. Free memory was 60.6 MB in the beginning and 60.6 MB in the end (delta: 21.4 kB). There was no memory consumed. Max. memory is 16.1 GB. * CACSL2BoogieTranslator took 918.77 ms. Allocated memory is still 98.6 MB. Free memory was 61.9 MB in the beginning and 52.2 MB in the end (delta: 9.7 MB). Peak memory consumption was 14.7 MB. Max. memory is 16.1 GB. * Boogie Procedure Inliner took 201.39 ms. Allocated memory is still 98.6 MB. Free memory was 51.7 MB in the beginning and 70.8 MB in the end (delta: -19.0 MB). Peak memory consumption was 18.5 MB. Max. memory is 16.1 GB. * Boogie Preprocessor took 164.72 ms. Allocated memory is still 98.6 MB. Free memory was 70.8 MB in the beginning and 63.3 MB in the end (delta: 7.4 MB). Peak memory consumption was 6.3 MB. Max. memory is 16.1 GB. * RCFGBuilder took 2178.13 ms. Allocated memory was 98.6 MB in the beginning and 136.3 MB in the end (delta: 37.7 MB). Free memory was 62.8 MB in the beginning and 90.3 MB in the end (delta: -27.5 MB). Peak memory consumption was 50.2 MB. Max. memory is 16.1 GB. * TraceAbstraction took 83048.76 ms. Allocated memory was 136.3 MB in the beginning and 1.5 GB in the end (delta: 1.4 GB). Free memory was 89.3 MB in the beginning and 1.1 GB in the end (delta: -985.3 MB). Peak memory consumption was 993.5 MB. Max. memory is 16.1 GB. * Witness Printer took 328.05 ms. Allocated memory is still 1.5 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 45.6 MB). Peak memory consumption was 46.1 MB. Max. memory is 16.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 477 locations, 6 error locations. Started 1 CEGAR loops. OverallTime: 82.8s, OverallIterations: 21, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 11.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 64.5s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 22811 SDtfs, 35759 SDslu, 46310 SDs, 0 SdLazy, 3484 SolverSat, 381 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 3.6s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 236 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 146 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 628 ImplicationChecksByTransitivity, 1.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=10744occurred in iteration=20, InterpolantAutomatonStates: 155, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 3.4s AutomataMinimizationTime, 21 MinimizatonAttempts, 17689 StatesRemovedByMinimization, 19 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 151 LocationsWithAnnotation, 151 PreInvPairs, 3090 NumberOfFragments, 5966 HoareAnnotationTreeSize, 151 FomulaSimplifications, 6277953389 FormulaSimplificationTreeSizeReduction, 21.7s HoareSimplificationTime, 151 FomulaSimplificationsInter, 10700861 FormulaSimplificationTreeSizeReductionInter, 42.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 1260 NumberOfCodeBlocks, 1260 NumberOfCodeBlocksAsserted, 22 NumberOfCheckSat, 1238 ConstructedInterpolants, 0 QuantifiedInterpolants, 2082 SizeOfPredicates, 0 NumberOfNonLiveVariables, 802 ConjunctsInSsa, 3 ConjunctsInUnsatCore, 22 InterpolantComputations, 20 PerfectInterpolantSequences, 129/133 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 6 specifications checked. All of them hold - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1859]: Loop Invariant Derived loop invariant: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((__ste_ClientAddressBook_size0 == 0 && bob == 1) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && !(__ste_email_to0 == 1)) && handle == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client - InvariantResult [Line: 1826]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 635]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2395]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1044]: Loop Invariant Derived loop invariant: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((handle == 3 && __ste_ClientAddressBook_size0 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && !(__ste_email_to0 == 1) - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 1526]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1044]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1671]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2359]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1916]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2351]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1479]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1626]: Loop Invariant Derived loop invariant: ((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 88]: Loop Invariant Derived loop invariant: ((__ste_ClientAddressBook_size0 == 0 && !(rjh == 1)) && __ste_client_forwardReceiver1 == 0) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) - InvariantResult [Line: 1580]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((__ste_ClientAddressBook_size0 == 0 && !(rjh == 1)) && __ste_client_forwardReceiver1 == 0) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1916]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1916]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2606]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1479]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1916]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && 2 == to) && bob == 1) && rjh == 2) && !(__ste_email_to0 == 1)) && msg == 1 - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1580]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 659]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1817]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1580]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 2456]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((__ste_ClientAddressBook_size0 == 0 && !(rjh == 1)) && bob == 1) && __ste_client_forwardReceiver1 == 0) && !(__ste_email_to0 == 1) - InvariantResult [Line: 2406]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1916]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1580]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 1044]: Loop Invariant Derived loop invariant: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1794]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2616]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2350]: Loop Invariant Derived loop invariant: ((handle == 3 && bob == 1) && rjh == 2) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1044]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || ((((((((((sender == 1 && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1479]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0) && !(handle == 1)) || ((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) && !(handle == 1)) - InvariantResult [Line: 1526]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1044]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1916]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && __ste_email_to0 == 2) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1526]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2583]: Loop Invariant Derived loop invariant: ((((handle == 3 && __ste_ClientAddressBook_size0 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1580]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2384]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1835]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1479]: Loop Invariant Derived loop invariant: (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) || (((((((((sender == 1 && handle == 3) && !(rjh == 1)) && \result == 1) && 2 == to) && !(to == 1)) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1479]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1671]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1526]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 2442]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1580]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 1044]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 2431]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 1526]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2370]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 851]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1526]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) || ((((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 635]: Loop Invariant Derived loop invariant: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2417]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1859]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1479]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) || (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && 2 == handle) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 2467]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) RESULT: Ultimate proved your program to be correct! [2021-10-28 09:56:50,297 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4ff85ccd-5d4f-47b2-b451-368cb13dd4d0/bin/uautomizer-UnR33cPsHg/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...