./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version b2eff8ba Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 331c48a04a8caddf27498f6f02cdac644ba512a5bbe373bec7a9be0d5f3b8263 ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.2.1-dev-b2eff8b [2021-10-28 23:31:05,482 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-10-28 23:31:05,484 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-10-28 23:31:05,530 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-10-28 23:31:05,531 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-10-28 23:31:05,536 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-10-28 23:31:05,540 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-10-28 23:31:05,545 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-10-28 23:31:05,548 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-10-28 23:31:05,556 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-10-28 23:31:05,557 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-10-28 23:31:05,559 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-10-28 23:31:05,560 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-10-28 23:31:05,563 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-10-28 23:31:05,566 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-10-28 23:31:05,573 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-10-28 23:31:05,575 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-10-28 23:31:05,576 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-10-28 23:31:05,582 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-10-28 23:31:05,590 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-10-28 23:31:05,595 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-10-28 23:31:05,597 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-10-28 23:31:05,601 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-10-28 23:31:05,602 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-10-28 23:31:05,609 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-10-28 23:31:05,610 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-10-28 23:31:05,611 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-10-28 23:31:05,613 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-10-28 23:31:05,614 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-10-28 23:31:05,615 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-10-28 23:31:05,616 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-10-28 23:31:05,617 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-10-28 23:31:05,619 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-10-28 23:31:05,621 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-10-28 23:31:05,623 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-10-28 23:31:05,623 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-10-28 23:31:05,624 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-10-28 23:31:05,624 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-10-28 23:31:05,625 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-10-28 23:31:05,626 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-10-28 23:31:05,627 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-10-28 23:31:05,628 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-10-28 23:31:05,679 INFO L113 SettingsManager]: Loading preferences was successful [2021-10-28 23:31:05,680 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-10-28 23:31:05,680 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-10-28 23:31:05,680 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-10-28 23:31:05,682 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-10-28 23:31:05,682 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-10-28 23:31:05,682 INFO L138 SettingsManager]: * Use SBE=true [2021-10-28 23:31:05,682 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-10-28 23:31:05,683 INFO L138 SettingsManager]: * sizeof long=4 [2021-10-28 23:31:05,683 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-10-28 23:31:05,683 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-10-28 23:31:05,683 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-10-28 23:31:05,683 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-10-28 23:31:05,684 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-10-28 23:31:05,685 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-10-28 23:31:05,685 INFO L138 SettingsManager]: * sizeof long double=12 [2021-10-28 23:31:05,686 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-10-28 23:31:05,686 INFO L138 SettingsManager]: * Use constant arrays=true [2021-10-28 23:31:05,686 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-10-28 23:31:05,686 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-10-28 23:31:05,687 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-10-28 23:31:05,687 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-10-28 23:31:05,687 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-10-28 23:31:05,688 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-10-28 23:31:05,688 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-10-28 23:31:05,688 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-10-28 23:31:05,688 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-10-28 23:31:05,689 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-10-28 23:31:05,689 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-10-28 23:31:05,691 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-10-28 23:31:05,691 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-10-28 23:31:05,691 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-10-28 23:31:05,692 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 331c48a04a8caddf27498f6f02cdac644ba512a5bbe373bec7a9be0d5f3b8263 [2021-10-28 23:31:05,983 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-10-28 23:31:06,003 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-10-28 23:31:06,005 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-10-28 23:31:06,007 INFO L271 PluginConnector]: Initializing CDTParser... [2021-10-28 23:31:06,008 INFO L275 PluginConnector]: CDTParser initialized [2021-10-28 23:31:06,009 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/../../sv-benchmarks/c/product-lines/email_spec0_product36.cil.c [2021-10-28 23:31:06,077 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/data/88994af80/22d4ca5188c849fc99da0727cd82849d/FLAGa037b2f11 [2021-10-28 23:31:06,671 INFO L306 CDTParser]: Found 1 translation units. [2021-10-28 23:31:06,672 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c [2021-10-28 23:31:06,691 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/data/88994af80/22d4ca5188c849fc99da0727cd82849d/FLAGa037b2f11 [2021-10-28 23:31:06,909 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/data/88994af80/22d4ca5188c849fc99da0727cd82849d [2021-10-28 23:31:06,916 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-10-28 23:31:06,918 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-10-28 23:31:06,920 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-10-28 23:31:06,921 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-10-28 23:31:06,924 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-10-28 23:31:06,925 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.10 11:31:06" (1/1) ... [2021-10-28 23:31:06,927 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@775dc0f8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:31:06, skipping insertion in model container [2021-10-28 23:31:06,927 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.10 11:31:06" (1/1) ... [2021-10-28 23:31:06,935 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-10-28 23:31:07,005 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-10-28 23:31:07,294 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c[12529,12542] [2021-10-28 23:31:07,582 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-28 23:31:07,595 INFO L203 MainTranslator]: Completed pre-run [2021-10-28 23:31:07,626 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/sv-benchmarks/c/product-lines/email_spec0_product36.cil.c[12529,12542] [2021-10-28 23:31:07,700 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-28 23:31:07,731 INFO L208 MainTranslator]: Completed translation [2021-10-28 23:31:07,731 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:31:07 WrapperNode [2021-10-28 23:31:07,731 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-10-28 23:31:07,732 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-10-28 23:31:07,732 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-10-28 23:31:07,732 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-10-28 23:31:07,738 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:31:07" (1/1) ... [2021-10-28 23:31:07,764 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:31:07" (1/1) ... [2021-10-28 23:31:07,906 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-10-28 23:31:07,907 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-10-28 23:31:07,907 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-10-28 23:31:07,907 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-10-28 23:31:07,916 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:31:07" (1/1) ... [2021-10-28 23:31:07,916 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:31:07" (1/1) ... [2021-10-28 23:31:07,929 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:31:07" (1/1) ... [2021-10-28 23:31:07,929 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:31:07" (1/1) ... [2021-10-28 23:31:07,973 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:31:07" (1/1) ... [2021-10-28 23:31:07,995 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:31:07" (1/1) ... [2021-10-28 23:31:08,001 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:31:07" (1/1) ... [2021-10-28 23:31:08,016 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-10-28 23:31:08,017 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-10-28 23:31:08,017 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-10-28 23:31:08,018 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-10-28 23:31:08,019 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:31:07" (1/1) ... [2021-10-28 23:31:08,026 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-10-28 23:31:08,041 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:31:08,053 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-10-28 23:31:08,055 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-10-28 23:31:08,093 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2021-10-28 23:31:08,094 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-10-28 23:31:08,094 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-10-28 23:31:08,094 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-10-28 23:31:08,094 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-10-28 23:31:10,299 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-10-28 23:31:10,299 INFO L299 CfgBuilder]: Removed 405 assume(true) statements. [2021-10-28 23:31:10,302 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.10 11:31:10 BoogieIcfgContainer [2021-10-28 23:31:10,302 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-10-28 23:31:10,304 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-10-28 23:31:10,305 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-10-28 23:31:10,308 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-10-28 23:31:10,308 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.10 11:31:06" (1/3) ... [2021-10-28 23:31:10,309 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2f30ceb3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.10 11:31:10, skipping insertion in model container [2021-10-28 23:31:10,309 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 11:31:07" (2/3) ... [2021-10-28 23:31:10,310 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2f30ceb3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.10 11:31:10, skipping insertion in model container [2021-10-28 23:31:10,310 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.10 11:31:10" (3/3) ... [2021-10-28 23:31:10,311 INFO L111 eAbstractionObserver]: Analyzing ICFG email_spec0_product36.cil.c [2021-10-28 23:31:10,317 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-10-28 23:31:10,317 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 6 error locations. [2021-10-28 23:31:10,369 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-10-28 23:31:10,375 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-10-28 23:31:10,376 INFO L340 AbstractCegarLoop]: Starting to check reachability of 6 error locations. [2021-10-28 23:31:10,402 INFO L276 IsEmpty]: Start isEmpty. Operand has 477 states, 470 states have (on average 1.695744680851064) internal successors, (797), 476 states have internal predecessors, (797), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:10,412 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-10-28 23:31:10,412 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:10,413 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:10,414 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:10,419 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:10,420 INFO L85 PathProgramCache]: Analyzing trace with hash 727264019, now seen corresponding path program 1 times [2021-10-28 23:31:10,429 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:10,430 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [523048505] [2021-10-28 23:31:10,430 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:10,431 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:10,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:10,729 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 23:31:10,730 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:10,731 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [523048505] [2021-10-28 23:31:10,731 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [523048505] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:10,732 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:10,732 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-10-28 23:31:10,734 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [571665393] [2021-10-28 23:31:10,739 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-10-28 23:31:10,739 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:10,752 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-10-28 23:31:10,753 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-10-28 23:31:10,756 INFO L87 Difference]: Start difference. First operand has 477 states, 470 states have (on average 1.695744680851064) internal successors, (797), 476 states have internal predecessors, (797), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 20.5) internal successors, (41), 2 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:10,817 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:10,817 INFO L93 Difference]: Finished difference Result 860 states and 1420 transitions. [2021-10-28 23:31:10,817 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-10-28 23:31:10,819 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 20.5) internal successors, (41), 2 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2021-10-28 23:31:10,819 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:10,835 INFO L225 Difference]: With dead ends: 860 [2021-10-28 23:31:10,835 INFO L226 Difference]: Without dead ends: 449 [2021-10-28 23:31:10,841 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-10-28 23:31:10,861 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 449 states. [2021-10-28 23:31:10,937 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 449 to 449. [2021-10-28 23:31:10,941 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 449 states, 443 states have (on average 1.6794582392776525) internal successors, (744), 448 states have internal predecessors, (744), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:10,944 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 449 states to 449 states and 744 transitions. [2021-10-28 23:31:10,945 INFO L78 Accepts]: Start accepts. Automaton has 449 states and 744 transitions. Word has length 41 [2021-10-28 23:31:10,946 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:10,946 INFO L470 AbstractCegarLoop]: Abstraction has 449 states and 744 transitions. [2021-10-28 23:31:10,946 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 20.5) internal successors, (41), 2 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:10,946 INFO L276 IsEmpty]: Start isEmpty. Operand 449 states and 744 transitions. [2021-10-28 23:31:10,954 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2021-10-28 23:31:10,954 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:10,954 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:10,955 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-10-28 23:31:10,955 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:10,971 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:10,972 INFO L85 PathProgramCache]: Analyzing trace with hash 1990434142, now seen corresponding path program 1 times [2021-10-28 23:31:10,972 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:10,972 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [56174354] [2021-10-28 23:31:10,973 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:10,973 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:11,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:11,167 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 23:31:11,167 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:11,167 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [56174354] [2021-10-28 23:31:11,168 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [56174354] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:11,168 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:11,168 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 23:31:11,168 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1736715495] [2021-10-28 23:31:11,170 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 23:31:11,170 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:11,171 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 23:31:11,171 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:31:11,172 INFO L87 Difference]: Start difference. First operand 449 states and 744 transitions. Second operand has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:11,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:11,295 INFO L93 Difference]: Finished difference Result 1320 states and 2190 transitions. [2021-10-28 23:31:11,296 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 23:31:11,296 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2021-10-28 23:31:11,296 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:11,304 INFO L225 Difference]: With dead ends: 1320 [2021-10-28 23:31:11,304 INFO L226 Difference]: Without dead ends: 882 [2021-10-28 23:31:11,308 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:31:11,310 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 882 states. [2021-10-28 23:31:11,328 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 882 to 448. [2021-10-28 23:31:11,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 448 states, 442 states have (on average 1.6742081447963801) internal successors, (740), 447 states have internal predecessors, (740), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:11,332 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 740 transitions. [2021-10-28 23:31:11,333 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 740 transitions. Word has length 42 [2021-10-28 23:31:11,333 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:11,333 INFO L470 AbstractCegarLoop]: Abstraction has 448 states and 740 transitions. [2021-10-28 23:31:11,334 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:11,334 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 740 transitions. [2021-10-28 23:31:11,336 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2021-10-28 23:31:11,336 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:11,337 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:11,337 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-10-28 23:31:11,337 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:11,338 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:11,338 INFO L85 PathProgramCache]: Analyzing trace with hash -1205522101, now seen corresponding path program 1 times [2021-10-28 23:31:11,338 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:11,339 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [915224921] [2021-10-28 23:31:11,339 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:11,339 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:11,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:11,493 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 23:31:11,495 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:11,497 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [915224921] [2021-10-28 23:31:11,498 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [915224921] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:11,499 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:11,499 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 23:31:11,499 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1702199131] [2021-10-28 23:31:11,500 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 23:31:11,502 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:11,502 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 23:31:11,504 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:31:11,508 INFO L87 Difference]: Start difference. First operand 448 states and 740 transitions. Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:11,548 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:11,549 INFO L93 Difference]: Finished difference Result 882 states and 1460 transitions. [2021-10-28 23:31:11,549 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 23:31:11,549 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2021-10-28 23:31:11,550 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:11,553 INFO L225 Difference]: With dead ends: 882 [2021-10-28 23:31:11,553 INFO L226 Difference]: Without dead ends: 449 [2021-10-28 23:31:11,554 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:31:11,555 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 449 states. [2021-10-28 23:31:11,575 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 449 to 448. [2021-10-28 23:31:11,576 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 448 states, 442 states have (on average 1.667420814479638) internal successors, (737), 447 states have internal predecessors, (737), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:11,580 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 737 transitions. [2021-10-28 23:31:11,580 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 737 transitions. Word has length 43 [2021-10-28 23:31:11,581 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:11,581 INFO L470 AbstractCegarLoop]: Abstraction has 448 states and 737 transitions. [2021-10-28 23:31:11,581 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:11,581 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 737 transitions. [2021-10-28 23:31:11,586 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2021-10-28 23:31:11,586 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:11,586 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:11,587 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-10-28 23:31:11,587 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:11,588 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:11,588 INFO L85 PathProgramCache]: Analyzing trace with hash 945994064, now seen corresponding path program 1 times [2021-10-28 23:31:11,588 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:11,589 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1667187625] [2021-10-28 23:31:11,589 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:11,589 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:11,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:11,735 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 23:31:11,735 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:11,736 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1667187625] [2021-10-28 23:31:11,738 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1667187625] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:11,739 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:11,739 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 23:31:11,739 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [721026910] [2021-10-28 23:31:11,740 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 23:31:11,740 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:11,740 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 23:31:11,741 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:31:11,741 INFO L87 Difference]: Start difference. First operand 448 states and 737 transitions. Second operand has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:11,764 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:11,764 INFO L93 Difference]: Finished difference Result 806 states and 1314 transitions. [2021-10-28 23:31:11,765 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 23:31:11,765 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2021-10-28 23:31:11,765 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:11,771 INFO L225 Difference]: With dead ends: 806 [2021-10-28 23:31:11,771 INFO L226 Difference]: Without dead ends: 451 [2021-10-28 23:31:11,773 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:31:11,775 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 451 states. [2021-10-28 23:31:11,788 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 451 to 450. [2021-10-28 23:31:11,789 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 450 states, 444 states have (on average 1.6644144144144144) internal successors, (739), 449 states have internal predecessors, (739), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:11,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 450 states to 450 states and 739 transitions. [2021-10-28 23:31:11,792 INFO L78 Accepts]: Start accepts. Automaton has 450 states and 739 transitions. Word has length 45 [2021-10-28 23:31:11,792 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:11,792 INFO L470 AbstractCegarLoop]: Abstraction has 450 states and 739 transitions. [2021-10-28 23:31:11,792 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:11,793 INFO L276 IsEmpty]: Start isEmpty. Operand 450 states and 739 transitions. [2021-10-28 23:31:11,793 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2021-10-28 23:31:11,794 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:11,794 INFO L513 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:11,795 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-10-28 23:31:11,795 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:11,797 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:11,797 INFO L85 PathProgramCache]: Analyzing trace with hash -1740183871, now seen corresponding path program 1 times [2021-10-28 23:31:11,798 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:11,798 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [403648351] [2021-10-28 23:31:11,798 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:11,798 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:11,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:11,914 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 23:31:11,914 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:11,915 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [403648351] [2021-10-28 23:31:11,915 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [403648351] provided 0 perfect and 1 imperfect interpolant sequences [2021-10-28 23:31:11,915 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [545383725] [2021-10-28 23:31:11,915 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:11,916 INFO L170 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-10-28 23:31:11,916 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 23:31:11,918 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-10-28 23:31:11,932 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-10-28 23:31:12,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:12,198 INFO L263 TraceCheckSpWp]: Trace formula consists of 802 conjuncts, 3 conjunts are in the unsatisfiable core [2021-10-28 23:31:12,205 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-10-28 23:31:12,364 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 23:31:12,364 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [545383725] provided 0 perfect and 1 imperfect interpolant sequences [2021-10-28 23:31:12,365 INFO L186 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2021-10-28 23:31:12,365 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4] total 5 [2021-10-28 23:31:12,365 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2010634936] [2021-10-28 23:31:12,366 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 23:31:12,366 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:12,367 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 23:31:12,367 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2021-10-28 23:31:12,367 INFO L87 Difference]: Start difference. First operand 450 states and 739 transitions. Second operand has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:12,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:12,501 INFO L93 Difference]: Finished difference Result 1237 states and 2030 transitions. [2021-10-28 23:31:12,501 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-10-28 23:31:12,502 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2021-10-28 23:31:12,502 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:12,507 INFO L225 Difference]: With dead ends: 1237 [2021-10-28 23:31:12,508 INFO L226 Difference]: Without dead ends: 882 [2021-10-28 23:31:12,509 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2021-10-28 23:31:12,510 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 882 states. [2021-10-28 23:31:12,530 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 882 to 526. [2021-10-28 23:31:12,531 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 526 states, 520 states have (on average 1.6961538461538461) internal successors, (882), 525 states have internal predecessors, (882), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:12,534 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 526 states to 526 states and 882 transitions. [2021-10-28 23:31:12,534 INFO L78 Accepts]: Start accepts. Automaton has 526 states and 882 transitions. Word has length 50 [2021-10-28 23:31:12,534 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:12,535 INFO L470 AbstractCegarLoop]: Abstraction has 526 states and 882 transitions. [2021-10-28 23:31:12,535 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:12,535 INFO L276 IsEmpty]: Start isEmpty. Operand 526 states and 882 transitions. [2021-10-28 23:31:12,536 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-10-28 23:31:12,536 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:12,537 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:12,576 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-10-28 23:31:12,746 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-10-28 23:31:12,746 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:12,747 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:12,747 INFO L85 PathProgramCache]: Analyzing trace with hash 298481648, now seen corresponding path program 2 times [2021-10-28 23:31:12,747 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:12,747 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1927719018] [2021-10-28 23:31:12,747 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:12,748 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:12,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:12,839 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 23:31:12,839 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:12,840 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1927719018] [2021-10-28 23:31:12,840 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1927719018] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:12,843 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:12,843 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 23:31:12,843 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1428382284] [2021-10-28 23:31:12,844 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 23:31:12,844 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:12,844 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 23:31:12,845 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:31:12,845 INFO L87 Difference]: Start difference. First operand 526 states and 882 transitions. Second operand has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:12,900 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:12,901 INFO L93 Difference]: Finished difference Result 1389 states and 2316 transitions. [2021-10-28 23:31:12,901 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 23:31:12,902 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2021-10-28 23:31:12,902 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:12,909 INFO L225 Difference]: With dead ends: 1389 [2021-10-28 23:31:12,910 INFO L226 Difference]: Without dead ends: 958 [2021-10-28 23:31:12,911 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:31:12,913 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 958 states. [2021-10-28 23:31:12,936 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 958 to 603. [2021-10-28 23:31:12,938 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 603 states, 597 states have (on average 1.7169179229480738) internal successors, (1025), 602 states have internal predecessors, (1025), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:12,941 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 603 states to 603 states and 1025 transitions. [2021-10-28 23:31:12,941 INFO L78 Accepts]: Start accepts. Automaton has 603 states and 1025 transitions. Word has length 55 [2021-10-28 23:31:12,943 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:12,943 INFO L470 AbstractCegarLoop]: Abstraction has 603 states and 1025 transitions. [2021-10-28 23:31:12,943 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.333333333333332) internal successors, (55), 3 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:12,943 INFO L276 IsEmpty]: Start isEmpty. Operand 603 states and 1025 transitions. [2021-10-28 23:31:12,944 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-10-28 23:31:12,945 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:12,945 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:12,945 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-10-28 23:31:12,946 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:12,946 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:12,946 INFO L85 PathProgramCache]: Analyzing trace with hash -226823759, now seen corresponding path program 1 times [2021-10-28 23:31:12,948 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:12,949 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1411074330] [2021-10-28 23:31:12,949 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:12,949 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:12,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:13,034 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2021-10-28 23:31:13,034 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:13,034 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1411074330] [2021-10-28 23:31:13,035 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1411074330] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:13,035 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:13,035 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 23:31:13,035 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [621873900] [2021-10-28 23:31:13,036 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 23:31:13,036 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:13,037 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 23:31:13,037 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:31:13,038 INFO L87 Difference]: Start difference. First operand 603 states and 1025 transitions. Second operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:13,088 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:13,088 INFO L93 Difference]: Finished difference Result 1537 states and 2594 transitions. [2021-10-28 23:31:13,089 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 23:31:13,089 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2021-10-28 23:31:13,091 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:13,114 INFO L225 Difference]: With dead ends: 1537 [2021-10-28 23:31:13,114 INFO L226 Difference]: Without dead ends: 958 [2021-10-28 23:31:13,115 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:31:13,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 958 states. [2021-10-28 23:31:13,150 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 958 to 603. [2021-10-28 23:31:13,152 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 603 states, 597 states have (on average 1.7135678391959799) internal successors, (1023), 602 states have internal predecessors, (1023), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:13,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 603 states to 603 states and 1023 transitions. [2021-10-28 23:31:13,155 INFO L78 Accepts]: Start accepts. Automaton has 603 states and 1023 transitions. Word has length 57 [2021-10-28 23:31:13,155 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:13,155 INFO L470 AbstractCegarLoop]: Abstraction has 603 states and 1023 transitions. [2021-10-28 23:31:13,156 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:13,156 INFO L276 IsEmpty]: Start isEmpty. Operand 603 states and 1023 transitions. [2021-10-28 23:31:13,158 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-10-28 23:31:13,159 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:13,159 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:13,159 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-10-28 23:31:13,159 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:13,160 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:13,160 INFO L85 PathProgramCache]: Analyzing trace with hash -1735157297, now seen corresponding path program 2 times [2021-10-28 23:31:13,160 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:13,160 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [773615509] [2021-10-28 23:31:13,160 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:13,161 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:13,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:13,251 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-28 23:31:13,251 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:13,252 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [773615509] [2021-10-28 23:31:13,252 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [773615509] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:13,252 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:13,252 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 23:31:13,252 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1854353801] [2021-10-28 23:31:13,253 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 23:31:13,253 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:13,254 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 23:31:13,254 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:31:13,254 INFO L87 Difference]: Start difference. First operand 603 states and 1023 transitions. Second operand has 3 states, 3 states have (on average 18.0) internal successors, (54), 3 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:13,309 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:13,309 INFO L93 Difference]: Finished difference Result 1674 states and 2848 transitions. [2021-10-28 23:31:13,309 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 23:31:13,310 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.0) internal successors, (54), 3 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2021-10-28 23:31:13,311 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:13,318 INFO L225 Difference]: With dead ends: 1674 [2021-10-28 23:31:13,318 INFO L226 Difference]: Without dead ends: 1101 [2021-10-28 23:31:13,320 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:31:13,322 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1101 states. [2021-10-28 23:31:13,353 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1101 to 746. [2021-10-28 23:31:13,355 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 746 states, 740 states have (on average 1.7405405405405405) internal successors, (1288), 745 states have internal predecessors, (1288), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:13,359 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 746 states to 746 states and 1288 transitions. [2021-10-28 23:31:13,360 INFO L78 Accepts]: Start accepts. Automaton has 746 states and 1288 transitions. Word has length 57 [2021-10-28 23:31:13,360 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:13,360 INFO L470 AbstractCegarLoop]: Abstraction has 746 states and 1288 transitions. [2021-10-28 23:31:13,361 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.0) internal successors, (54), 3 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:13,361 INFO L276 IsEmpty]: Start isEmpty. Operand 746 states and 1288 transitions. [2021-10-28 23:31:13,371 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-10-28 23:31:13,371 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:13,371 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:13,371 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-10-28 23:31:13,372 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:13,374 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:13,374 INFO L85 PathProgramCache]: Analyzing trace with hash 1243815331, now seen corresponding path program 1 times [2021-10-28 23:31:13,374 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:13,374 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1357153146] [2021-10-28 23:31:13,375 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:13,375 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:13,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:13,469 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-28 23:31:13,469 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:13,470 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1357153146] [2021-10-28 23:31:13,470 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1357153146] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:13,470 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:13,471 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-28 23:31:13,471 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [279426741] [2021-10-28 23:31:13,472 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 23:31:13,473 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:13,474 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 23:31:13,474 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 23:31:13,474 INFO L87 Difference]: Start difference. First operand 746 states and 1288 transitions. Second operand has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:13,895 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:13,895 INFO L93 Difference]: Finished difference Result 1894 states and 3253 transitions. [2021-10-28 23:31:13,896 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-28 23:31:13,896 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2021-10-28 23:31:13,896 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:13,904 INFO L225 Difference]: With dead ends: 1894 [2021-10-28 23:31:13,905 INFO L226 Difference]: Without dead ends: 1244 [2021-10-28 23:31:13,907 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-10-28 23:31:13,909 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1244 states. [2021-10-28 23:31:13,951 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1244 to 746. [2021-10-28 23:31:13,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 746 states, 740 states have (on average 1.7364864864864864) internal successors, (1285), 745 states have internal predecessors, (1285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:13,956 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 746 states to 746 states and 1285 transitions. [2021-10-28 23:31:13,957 INFO L78 Accepts]: Start accepts. Automaton has 746 states and 1285 transitions. Word has length 58 [2021-10-28 23:31:13,958 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:13,959 INFO L470 AbstractCegarLoop]: Abstraction has 746 states and 1285 transitions. [2021-10-28 23:31:13,959 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:13,959 INFO L276 IsEmpty]: Start isEmpty. Operand 746 states and 1285 transitions. [2021-10-28 23:31:13,961 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-10-28 23:31:13,961 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:13,961 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:13,961 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-10-28 23:31:13,962 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:13,962 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:13,962 INFO L85 PathProgramCache]: Analyzing trace with hash -462083701, now seen corresponding path program 1 times [2021-10-28 23:31:13,962 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:13,963 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [980102818] [2021-10-28 23:31:13,963 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:13,963 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:13,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:14,080 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-28 23:31:14,081 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:14,081 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [980102818] [2021-10-28 23:31:14,081 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [980102818] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:14,081 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:14,081 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-10-28 23:31:14,082 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [544641052] [2021-10-28 23:31:14,085 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-10-28 23:31:14,085 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:14,086 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-10-28 23:31:14,087 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2021-10-28 23:31:14,087 INFO L87 Difference]: Start difference. First operand 746 states and 1285 transitions. Second operand has 10 states, 10 states have (on average 5.4) internal successors, (54), 10 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:16,055 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:16,055 INFO L93 Difference]: Finished difference Result 3388 states and 5518 transitions. [2021-10-28 23:31:16,056 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-10-28 23:31:16,056 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 10 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2021-10-28 23:31:16,056 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:16,074 INFO L225 Difference]: With dead ends: 3388 [2021-10-28 23:31:16,075 INFO L226 Difference]: Without dead ends: 3094 [2021-10-28 23:31:16,077 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 208 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=290, Invalid=766, Unknown=0, NotChecked=0, Total=1056 [2021-10-28 23:31:16,081 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3094 states. [2021-10-28 23:31:16,162 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3094 to 1013. [2021-10-28 23:31:16,165 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1013 states, 1007 states have (on average 1.6971201588877856) internal successors, (1709), 1012 states have internal predecessors, (1709), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:16,169 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1013 states to 1013 states and 1709 transitions. [2021-10-28 23:31:16,170 INFO L78 Accepts]: Start accepts. Automaton has 1013 states and 1709 transitions. Word has length 58 [2021-10-28 23:31:16,170 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:16,170 INFO L470 AbstractCegarLoop]: Abstraction has 1013 states and 1709 transitions. [2021-10-28 23:31:16,170 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 10 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:16,171 INFO L276 IsEmpty]: Start isEmpty. Operand 1013 states and 1709 transitions. [2021-10-28 23:31:16,172 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-10-28 23:31:16,173 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:16,173 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:16,173 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-10-28 23:31:16,173 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:16,174 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:16,174 INFO L85 PathProgramCache]: Analyzing trace with hash -1190675934, now seen corresponding path program 1 times [2021-10-28 23:31:16,174 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:16,174 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1553323383] [2021-10-28 23:31:16,174 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:16,175 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:16,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:16,300 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-28 23:31:16,300 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:16,300 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1553323383] [2021-10-28 23:31:16,300 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1553323383] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:16,300 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:16,300 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-10-28 23:31:16,301 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [282705563] [2021-10-28 23:31:16,301 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-10-28 23:31:16,301 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:16,302 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-10-28 23:31:16,302 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2021-10-28 23:31:16,302 INFO L87 Difference]: Start difference. First operand 1013 states and 1709 transitions. Second operand has 10 states, 10 states have (on average 5.5) internal successors, (55), 10 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:18,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:18,314 INFO L93 Difference]: Finished difference Result 3650 states and 5919 transitions. [2021-10-28 23:31:18,315 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-10-28 23:31:18,315 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.5) internal successors, (55), 10 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2021-10-28 23:31:18,316 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:18,335 INFO L225 Difference]: With dead ends: 3650 [2021-10-28 23:31:18,336 INFO L226 Difference]: Without dead ends: 3154 [2021-10-28 23:31:18,338 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 205 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=290, Invalid=766, Unknown=0, NotChecked=0, Total=1056 [2021-10-28 23:31:18,343 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3154 states. [2021-10-28 23:31:18,475 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3154 to 1124. [2021-10-28 23:31:18,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1124 states, 1118 states have (on average 1.684257602862254) internal successors, (1883), 1123 states have internal predecessors, (1883), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:18,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1124 states to 1124 states and 1883 transitions. [2021-10-28 23:31:18,483 INFO L78 Accepts]: Start accepts. Automaton has 1124 states and 1883 transitions. Word has length 59 [2021-10-28 23:31:18,484 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:18,484 INFO L470 AbstractCegarLoop]: Abstraction has 1124 states and 1883 transitions. [2021-10-28 23:31:18,484 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.5) internal successors, (55), 10 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:18,484 INFO L276 IsEmpty]: Start isEmpty. Operand 1124 states and 1883 transitions. [2021-10-28 23:31:18,486 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-10-28 23:31:18,486 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:18,486 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:18,486 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-10-28 23:31:18,487 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:18,487 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:18,487 INFO L85 PathProgramCache]: Analyzing trace with hash -1608706913, now seen corresponding path program 1 times [2021-10-28 23:31:18,487 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:18,487 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1841787731] [2021-10-28 23:31:18,487 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:18,488 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:18,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:18,583 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-28 23:31:18,583 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:18,584 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1841787731] [2021-10-28 23:31:18,584 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1841787731] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:18,584 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:18,584 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-10-28 23:31:18,584 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [933629399] [2021-10-28 23:31:18,585 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-10-28 23:31:18,585 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:18,586 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-10-28 23:31:18,586 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-10-28 23:31:18,586 INFO L87 Difference]: Start difference. First operand 1124 states and 1883 transitions. Second operand has 7 states, 7 states have (on average 7.857142857142857) internal successors, (55), 7 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:18,916 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:18,916 INFO L93 Difference]: Finished difference Result 2109 states and 3448 transitions. [2021-10-28 23:31:18,916 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-10-28 23:31:18,917 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.857142857142857) internal successors, (55), 7 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2021-10-28 23:31:18,917 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:18,925 INFO L225 Difference]: With dead ends: 2109 [2021-10-28 23:31:18,925 INFO L226 Difference]: Without dead ends: 1399 [2021-10-28 23:31:18,927 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=74, Invalid=136, Unknown=0, NotChecked=0, Total=210 [2021-10-28 23:31:18,930 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1399 states. [2021-10-28 23:31:19,045 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1399 to 1046. [2021-10-28 23:31:19,049 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1046 states, 1040 states have (on average 1.6836538461538462) internal successors, (1751), 1045 states have internal predecessors, (1751), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:19,053 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1046 states to 1046 states and 1751 transitions. [2021-10-28 23:31:19,053 INFO L78 Accepts]: Start accepts. Automaton has 1046 states and 1751 transitions. Word has length 59 [2021-10-28 23:31:19,053 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:19,053 INFO L470 AbstractCegarLoop]: Abstraction has 1046 states and 1751 transitions. [2021-10-28 23:31:19,054 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.857142857142857) internal successors, (55), 7 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:19,054 INFO L276 IsEmpty]: Start isEmpty. Operand 1046 states and 1751 transitions. [2021-10-28 23:31:19,061 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-10-28 23:31:19,061 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:19,061 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:19,061 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-10-28 23:31:19,062 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:19,062 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:19,062 INFO L85 PathProgramCache]: Analyzing trace with hash 1160689309, now seen corresponding path program 1 times [2021-10-28 23:31:19,062 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:19,063 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2136391595] [2021-10-28 23:31:19,063 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:19,063 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:19,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:19,167 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-28 23:31:19,167 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:19,167 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2136391595] [2021-10-28 23:31:19,167 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2136391595] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:19,167 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:19,167 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 23:31:19,168 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [75871640] [2021-10-28 23:31:19,168 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 23:31:19,168 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:19,169 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 23:31:19,169 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 23:31:19,169 INFO L87 Difference]: Start difference. First operand 1046 states and 1751 transitions. Second operand has 5 states, 5 states have (on average 11.2) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:19,685 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:19,685 INFO L93 Difference]: Finished difference Result 3655 states and 6060 transitions. [2021-10-28 23:31:19,685 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-10-28 23:31:19,686 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.2) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 60 [2021-10-28 23:31:19,686 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:19,704 INFO L225 Difference]: With dead ends: 3655 [2021-10-28 23:31:19,704 INFO L226 Difference]: Without dead ends: 3116 [2021-10-28 23:31:19,706 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-10-28 23:31:19,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3116 states. [2021-10-28 23:31:19,905 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3116 to 2000. [2021-10-28 23:31:19,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2000 states, 1994 states have (on average 1.6745235707121364) internal successors, (3339), 1999 states have internal predecessors, (3339), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:19,919 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2000 states to 2000 states and 3339 transitions. [2021-10-28 23:31:19,919 INFO L78 Accepts]: Start accepts. Automaton has 2000 states and 3339 transitions. Word has length 60 [2021-10-28 23:31:19,919 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:19,919 INFO L470 AbstractCegarLoop]: Abstraction has 2000 states and 3339 transitions. [2021-10-28 23:31:19,920 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.2) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:19,920 INFO L276 IsEmpty]: Start isEmpty. Operand 2000 states and 3339 transitions. [2021-10-28 23:31:19,923 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-10-28 23:31:19,923 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:19,923 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:19,923 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-10-28 23:31:19,923 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:19,924 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:19,924 INFO L85 PathProgramCache]: Analyzing trace with hash 1162684893, now seen corresponding path program 1 times [2021-10-28 23:31:19,924 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:19,924 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [247260805] [2021-10-28 23:31:19,925 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:19,925 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:19,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:20,054 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-28 23:31:20,054 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:20,054 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [247260805] [2021-10-28 23:31:20,055 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [247260805] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:20,055 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:20,055 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-10-28 23:31:20,055 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1819051492] [2021-10-28 23:31:20,056 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-10-28 23:31:20,057 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:20,057 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-10-28 23:31:20,057 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2021-10-28 23:31:20,058 INFO L87 Difference]: Start difference. First operand 2000 states and 3339 transitions. Second operand has 9 states, 9 states have (on average 6.333333333333333) internal successors, (57), 9 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:21,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:21,747 INFO L93 Difference]: Finished difference Result 6190 states and 9970 transitions. [2021-10-28 23:31:21,748 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-10-28 23:31:21,748 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 6.333333333333333) internal successors, (57), 9 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 61 [2021-10-28 23:31:21,748 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:21,777 INFO L225 Difference]: With dead ends: 6190 [2021-10-28 23:31:21,777 INFO L226 Difference]: Without dead ends: 5030 [2021-10-28 23:31:21,780 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 186 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=268, Invalid=662, Unknown=0, NotChecked=0, Total=930 [2021-10-28 23:31:21,786 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5030 states. [2021-10-28 23:31:22,052 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5030 to 2639. [2021-10-28 23:31:22,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2639 states, 2633 states have (on average 1.645271553361185) internal successors, (4332), 2638 states have internal predecessors, (4332), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:22,066 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2639 states to 2639 states and 4332 transitions. [2021-10-28 23:31:22,066 INFO L78 Accepts]: Start accepts. Automaton has 2639 states and 4332 transitions. Word has length 61 [2021-10-28 23:31:22,066 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:22,066 INFO L470 AbstractCegarLoop]: Abstraction has 2639 states and 4332 transitions. [2021-10-28 23:31:22,066 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 6.333333333333333) internal successors, (57), 9 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:22,067 INFO L276 IsEmpty]: Start isEmpty. Operand 2639 states and 4332 transitions. [2021-10-28 23:31:22,069 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2021-10-28 23:31:22,070 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:22,070 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:22,070 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2021-10-28 23:31:22,070 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:22,071 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:22,071 INFO L85 PathProgramCache]: Analyzing trace with hash 1212942047, now seen corresponding path program 1 times [2021-10-28 23:31:22,071 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:22,071 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1642337540] [2021-10-28 23:31:22,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:22,071 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:22,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:22,125 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-28 23:31:22,126 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:22,126 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1642337540] [2021-10-28 23:31:22,126 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1642337540] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:22,126 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:22,126 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 23:31:22,127 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1162422537] [2021-10-28 23:31:22,127 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-10-28 23:31:22,127 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:22,128 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-28 23:31:22,128 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-28 23:31:22,128 INFO L87 Difference]: Start difference. First operand 2639 states and 4332 transitions. Second operand has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:22,415 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:22,416 INFO L93 Difference]: Finished difference Result 3927 states and 6332 transitions. [2021-10-28 23:31:22,416 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-10-28 23:31:22,416 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 62 [2021-10-28 23:31:22,416 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:22,426 INFO L225 Difference]: With dead ends: 3927 [2021-10-28 23:31:22,426 INFO L226 Difference]: Without dead ends: 2623 [2021-10-28 23:31:22,429 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-10-28 23:31:22,432 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2623 states. [2021-10-28 23:31:22,660 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2623 to 1982. [2021-10-28 23:31:22,665 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1982 states, 1976 states have (on average 1.6634615384615385) internal successors, (3287), 1981 states have internal predecessors, (3287), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:22,671 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1982 states to 1982 states and 3287 transitions. [2021-10-28 23:31:22,671 INFO L78 Accepts]: Start accepts. Automaton has 1982 states and 3287 transitions. Word has length 62 [2021-10-28 23:31:22,671 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:22,671 INFO L470 AbstractCegarLoop]: Abstraction has 1982 states and 3287 transitions. [2021-10-28 23:31:22,671 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:22,672 INFO L276 IsEmpty]: Start isEmpty. Operand 1982 states and 3287 transitions. [2021-10-28 23:31:22,674 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-10-28 23:31:22,675 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:22,675 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:22,675 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2021-10-28 23:31:22,675 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:22,676 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:22,676 INFO L85 PathProgramCache]: Analyzing trace with hash 737410204, now seen corresponding path program 1 times [2021-10-28 23:31:22,676 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:22,676 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [850894723] [2021-10-28 23:31:22,676 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:22,676 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:22,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:22,739 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-28 23:31:22,740 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:22,740 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [850894723] [2021-10-28 23:31:22,740 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [850894723] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:22,740 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:22,740 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 23:31:22,740 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [221150800] [2021-10-28 23:31:22,741 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 23:31:22,741 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:22,741 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 23:31:22,741 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 23:31:22,742 INFO L87 Difference]: Start difference. First operand 1982 states and 3287 transitions. Second operand has 5 states, 5 states have (on average 12.4) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:23,209 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:23,209 INFO L93 Difference]: Finished difference Result 5624 states and 9108 transitions. [2021-10-28 23:31:23,209 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-10-28 23:31:23,210 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 66 [2021-10-28 23:31:23,210 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:23,221 INFO L225 Difference]: With dead ends: 5624 [2021-10-28 23:31:23,221 INFO L226 Difference]: Without dead ends: 4452 [2021-10-28 23:31:23,224 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-10-28 23:31:23,229 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4452 states. [2021-10-28 23:31:23,528 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4452 to 3216. [2021-10-28 23:31:23,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3216 states, 3210 states have (on average 1.6763239875389409) internal successors, (5381), 3215 states have internal predecessors, (5381), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:23,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3216 states to 3216 states and 5381 transitions. [2021-10-28 23:31:23,545 INFO L78 Accepts]: Start accepts. Automaton has 3216 states and 5381 transitions. Word has length 66 [2021-10-28 23:31:23,545 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:23,545 INFO L470 AbstractCegarLoop]: Abstraction has 3216 states and 5381 transitions. [2021-10-28 23:31:23,546 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.4) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:23,546 INFO L276 IsEmpty]: Start isEmpty. Operand 3216 states and 5381 transitions. [2021-10-28 23:31:23,550 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2021-10-28 23:31:23,550 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:23,550 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:23,550 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2021-10-28 23:31:23,551 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:23,551 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:23,551 INFO L85 PathProgramCache]: Analyzing trace with hash -2115831750, now seen corresponding path program 1 times [2021-10-28 23:31:23,551 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:23,551 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1728914941] [2021-10-28 23:31:23,551 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:23,552 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:23,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:23,601 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-28 23:31:23,601 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:23,602 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1728914941] [2021-10-28 23:31:23,602 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1728914941] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:23,602 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:23,602 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 23:31:23,602 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [976429818] [2021-10-28 23:31:23,603 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 23:31:23,603 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:23,603 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 23:31:23,604 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:31:23,604 INFO L87 Difference]: Start difference. First operand 3216 states and 5381 transitions. Second operand has 3 states, 3 states have (on average 21.0) internal successors, (63), 3 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:24,025 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:24,025 INFO L93 Difference]: Finished difference Result 9456 states and 15823 transitions. [2021-10-28 23:31:24,025 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 23:31:24,025 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.0) internal successors, (63), 3 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 66 [2021-10-28 23:31:24,026 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:24,039 INFO L225 Difference]: With dead ends: 9456 [2021-10-28 23:31:24,039 INFO L226 Difference]: Without dead ends: 6274 [2021-10-28 23:31:24,044 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:31:24,051 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6274 states. [2021-10-28 23:31:24,469 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6274 to 4370. [2021-10-28 23:31:24,480 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4370 states, 4364 states have (on average 1.722731439046746) internal successors, (7518), 4369 states have internal predecessors, (7518), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:24,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4370 states to 4370 states and 7518 transitions. [2021-10-28 23:31:24,493 INFO L78 Accepts]: Start accepts. Automaton has 4370 states and 7518 transitions. Word has length 66 [2021-10-28 23:31:24,493 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:24,493 INFO L470 AbstractCegarLoop]: Abstraction has 4370 states and 7518 transitions. [2021-10-28 23:31:24,494 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.0) internal successors, (63), 3 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:24,494 INFO L276 IsEmpty]: Start isEmpty. Operand 4370 states and 7518 transitions. [2021-10-28 23:31:24,501 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-10-28 23:31:24,501 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:24,501 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:24,502 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2021-10-28 23:31:24,502 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:24,502 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:24,502 INFO L85 PathProgramCache]: Analyzing trace with hash -245114945, now seen corresponding path program 1 times [2021-10-28 23:31:24,503 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:24,503 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [330073554] [2021-10-28 23:31:24,503 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:24,503 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:24,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:24,574 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-28 23:31:24,574 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:24,574 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [330073554] [2021-10-28 23:31:24,575 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [330073554] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:24,575 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:24,575 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-28 23:31:24,575 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1001940284] [2021-10-28 23:31:24,577 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 23:31:24,577 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:24,578 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 23:31:24,578 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 23:31:24,578 INFO L87 Difference]: Start difference. First operand 4370 states and 7518 transitions. Second operand has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:25,122 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:25,123 INFO L93 Difference]: Finished difference Result 6478 states and 10803 transitions. [2021-10-28 23:31:25,123 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-28 23:31:25,124 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 67 [2021-10-28 23:31:25,124 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:25,134 INFO L225 Difference]: With dead ends: 6478 [2021-10-28 23:31:25,134 INFO L226 Difference]: Without dead ends: 4606 [2021-10-28 23:31:25,137 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-10-28 23:31:25,144 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4606 states. [2021-10-28 23:31:25,398 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4606 to 3908. [2021-10-28 23:31:25,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3908 states, 3902 states have (on average 1.7391081496668375) internal successors, (6786), 3907 states have internal predecessors, (6786), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:25,430 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3908 states to 3908 states and 6786 transitions. [2021-10-28 23:31:25,430 INFO L78 Accepts]: Start accepts. Automaton has 3908 states and 6786 transitions. Word has length 67 [2021-10-28 23:31:25,430 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:25,430 INFO L470 AbstractCegarLoop]: Abstraction has 3908 states and 6786 transitions. [2021-10-28 23:31:25,431 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:25,431 INFO L276 IsEmpty]: Start isEmpty. Operand 3908 states and 6786 transitions. [2021-10-28 23:31:25,437 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-10-28 23:31:25,437 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:25,438 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:25,438 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2021-10-28 23:31:25,438 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:25,438 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:25,439 INFO L85 PathProgramCache]: Analyzing trace with hash 167071917, now seen corresponding path program 1 times [2021-10-28 23:31:25,439 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:25,439 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1748921370] [2021-10-28 23:31:25,439 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:25,439 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:25,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:25,488 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-28 23:31:25,488 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:25,488 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1748921370] [2021-10-28 23:31:25,489 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1748921370] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:25,489 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:25,489 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 23:31:25,489 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [781860181] [2021-10-28 23:31:25,490 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 23:31:25,491 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:25,491 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 23:31:25,491 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:31:25,492 INFO L87 Difference]: Start difference. First operand 3908 states and 6786 transitions. Second operand has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:25,915 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:25,915 INFO L93 Difference]: Finished difference Result 11510 states and 20000 transitions. [2021-10-28 23:31:25,915 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 23:31:25,916 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 67 [2021-10-28 23:31:25,916 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:25,934 INFO L225 Difference]: With dead ends: 11510 [2021-10-28 23:31:25,934 INFO L226 Difference]: Without dead ends: 7640 [2021-10-28 23:31:25,940 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:31:25,949 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7640 states. [2021-10-28 23:31:26,314 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7640 to 6198. [2021-10-28 23:31:26,322 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6198 states, 6192 states have (on average 1.7782622739018088) internal successors, (11011), 6197 states have internal predecessors, (11011), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:26,336 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6198 states to 6198 states and 11011 transitions. [2021-10-28 23:31:26,336 INFO L78 Accepts]: Start accepts. Automaton has 6198 states and 11011 transitions. Word has length 67 [2021-10-28 23:31:26,336 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:26,336 INFO L470 AbstractCegarLoop]: Abstraction has 6198 states and 11011 transitions. [2021-10-28 23:31:26,337 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:26,337 INFO L276 IsEmpty]: Start isEmpty. Operand 6198 states and 11011 transitions. [2021-10-28 23:31:26,346 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2021-10-28 23:31:26,346 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:26,346 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:26,347 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2021-10-28 23:31:26,347 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:26,347 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:26,347 INFO L85 PathProgramCache]: Analyzing trace with hash -268562696, now seen corresponding path program 1 times [2021-10-28 23:31:26,348 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:26,348 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2091342990] [2021-10-28 23:31:26,348 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:26,348 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:26,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:26,393 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2021-10-28 23:31:26,393 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:26,394 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2091342990] [2021-10-28 23:31:26,394 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2091342990] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:26,394 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:26,394 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 23:31:26,394 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2141216875] [2021-10-28 23:31:26,395 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 23:31:26,395 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:26,396 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 23:31:26,396 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:31:26,396 INFO L87 Difference]: Start difference. First operand 6198 states and 11011 transitions. Second operand has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:27,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:27,149 INFO L93 Difference]: Finished difference Result 18342 states and 32605 transitions. [2021-10-28 23:31:27,150 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 23:31:27,150 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2021-10-28 23:31:27,150 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:27,180 INFO L225 Difference]: With dead ends: 18342 [2021-10-28 23:31:27,181 INFO L226 Difference]: Without dead ends: 12186 [2021-10-28 23:31:27,190 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 23:31:27,204 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12186 states. [2021-10-28 23:31:27,820 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12186 to 10744. [2021-10-28 23:31:27,828 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10744 states, 10738 states have (on average 1.8033153287390575) internal successors, (19364), 10743 states have internal predecessors, (19364), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:27,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10744 states to 10744 states and 19364 transitions. [2021-10-28 23:31:27,854 INFO L78 Accepts]: Start accepts. Automaton has 10744 states and 19364 transitions. Word has length 68 [2021-10-28 23:31:27,855 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:27,855 INFO L470 AbstractCegarLoop]: Abstraction has 10744 states and 19364 transitions. [2021-10-28 23:31:27,855 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:27,855 INFO L276 IsEmpty]: Start isEmpty. Operand 10744 states and 19364 transitions. [2021-10-28 23:31:27,870 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-10-28 23:31:27,870 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 23:31:27,870 INFO L513 BasicCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:31:27,870 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2021-10-28 23:31:27,871 INFO L402 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 3 more)] === [2021-10-28 23:31:27,871 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 23:31:27,871 INFO L85 PathProgramCache]: Analyzing trace with hash -552890897, now seen corresponding path program 1 times [2021-10-28 23:31:27,871 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 23:31:27,872 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [606318989] [2021-10-28 23:31:27,873 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 23:31:27,873 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 23:31:27,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 23:31:27,950 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-10-28 23:31:27,951 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 23:31:27,951 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [606318989] [2021-10-28 23:31:27,951 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [606318989] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 23:31:27,951 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 23:31:27,951 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 23:31:27,952 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1255708911] [2021-10-28 23:31:27,952 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-10-28 23:31:27,952 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 23:31:27,953 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-28 23:31:27,953 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-28 23:31:27,953 INFO L87 Difference]: Start difference. First operand 10744 states and 19364 transitions. Second operand has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:28,494 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 23:31:28,494 INFO L93 Difference]: Finished difference Result 11460 states and 20513 transitions. [2021-10-28 23:31:28,494 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-10-28 23:31:28,495 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 69 [2021-10-28 23:31:28,495 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 23:31:28,495 INFO L225 Difference]: With dead ends: 11460 [2021-10-28 23:31:28,495 INFO L226 Difference]: Without dead ends: 0 [2021-10-28 23:31:28,505 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-10-28 23:31:28,506 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-10-28 23:31:28,506 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-10-28 23:31:28,506 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:28,506 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-10-28 23:31:28,507 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 69 [2021-10-28 23:31:28,507 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 23:31:28,507 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-28 23:31:28,507 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 16.25) internal successors, (65), 4 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 23:31:28,507 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-10-28 23:31:28,507 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-10-28 23:31:28,510 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION [2021-10-28 23:31:28,510 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION [2021-10-28 23:31:28,511 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION [2021-10-28 23:31:28,511 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION [2021-10-28 23:31:28,511 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION [2021-10-28 23:31:28,511 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION [2021-10-28 23:31:28,511 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2021-10-28 23:31:28,514 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-10-28 23:31:28,523 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:28,661 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:28,872 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:28,901 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:28,903 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:29,688 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:29,765 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:30,435 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:30,465 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:30,852 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:31,157 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:31,560 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:31,733 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:31,810 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:31,877 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:31,878 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:32,062 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:32,128 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:32,168 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:32,215 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:32,595 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:32,675 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:33,122 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:33,123 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:33,230 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:33,535 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:33,687 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:33,822 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:33,984 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:34,087 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:34,177 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:34,246 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:34,398 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:34,557 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:34,803 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:34,879 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:34,959 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:35,019 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:35,041 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:35,102 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:35,375 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:35,375 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:35,466 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:35,468 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:35,530 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:35,943 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:36,025 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:36,130 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:36,130 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:36,131 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:36,245 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:36,263 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:36,587 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:36,588 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:36,604 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:36,642 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:37,016 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:37,107 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:37,216 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:37,330 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:37,455 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:37,487 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:37,585 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:37,586 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:37,625 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:37,729 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:37,730 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:38,006 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:38,329 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:38,442 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:38,542 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:38,966 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:39,013 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:39,304 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:39,305 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:39,749 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:39,799 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:39,799 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:39,859 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:40,197 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:40,210 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:40,230 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:40,463 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:40,563 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:40,778 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:40,858 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:41,104 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:41,167 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:41,316 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:41,425 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:41,469 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:41,503 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:41,585 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:41,597 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:42,058 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:42,227 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:42,228 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:42,475 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:42,539 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:42,540 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:42,540 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:42,560 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:42,583 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:42,779 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:42,976 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:43,027 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:43,123 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:43,172 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:43,173 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:43,173 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:43,381 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:43,381 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:43,427 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:43,487 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:43,546 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:43,647 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:44,013 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:44,063 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:44,162 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:44,211 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:44,317 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:44,437 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:44,667 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:44,900 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:45,359 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:45,464 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:45,529 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:45,719 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:45,720 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:45,769 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:45,820 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:45,849 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:46,013 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:46,096 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:46,158 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:46,196 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:46,299 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:46,300 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:46,361 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:46,398 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:46,515 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:46,615 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:46,654 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:46,979 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:47,011 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:47,112 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:47,288 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:47,311 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:47,414 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:47,620 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:31:47,790 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 23:32:28,182 INFO L857 garLoopResultBuilder]: For program point L1026-3(lines 1026 1030) no Hoare annotation was computed. [2021-10-28 23:32:28,183 INFO L857 garLoopResultBuilder]: For program point L1557(lines 1557 1565) no Hoare annotation was computed. [2021-10-28 23:32:28,183 INFO L857 garLoopResultBuilder]: For program point L1557-2(lines 1557 1565) no Hoare annotation was computed. [2021-10-28 23:32:28,183 INFO L857 garLoopResultBuilder]: For program point L2482(lines 2482 2486) no Hoare annotation was computed. [2021-10-28 23:32:28,183 INFO L857 garLoopResultBuilder]: For program point L1557-4(lines 1557 1565) no Hoare annotation was computed. [2021-10-28 23:32:28,184 INFO L853 garLoopResultBuilder]: At program point L2482-1(lines 2351 2500) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 23:32:28,184 INFO L853 garLoopResultBuilder]: At program point L1822(lines 1817 1825) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,184 INFO L857 garLoopResultBuilder]: For program point L2616(lines 2616 2623) no Hoare annotation was computed. [2021-10-28 23:32:28,184 INFO L860 garLoopResultBuilder]: At program point L2616-1(lines 2616 2623) the Hoare annotation is: true [2021-10-28 23:32:28,184 INFO L857 garLoopResultBuilder]: For program point L2352(lines 2351 2500) no Hoare annotation was computed. [2021-10-28 23:32:28,184 INFO L857 garLoopResultBuilder]: For program point L1560(lines 1560 1564) no Hoare annotation was computed. [2021-10-28 23:32:28,185 INFO L853 garLoopResultBuilder]: At program point L1560-2(lines 1 2659) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (not (= ~rjh~0 1)) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (not (= ~__ste_email_to0~0 1))) [2021-10-28 23:32:28,185 INFO L857 garLoopResultBuilder]: For program point L1560-3(lines 1560 1564) no Hoare annotation was computed. [2021-10-28 23:32:28,185 INFO L853 garLoopResultBuilder]: At program point L1560-5(lines 1 2659) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1)) (= ULTIMATE.start_setClientId_~handle 2)) [2021-10-28 23:32:28,185 INFO L857 garLoopResultBuilder]: For program point L1560-6(lines 1560 1564) no Hoare annotation was computed. [2021-10-28 23:32:28,185 INFO L853 garLoopResultBuilder]: At program point L1560-8(lines 1 2659) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle 3) (= ~__ste_ClientAddressBook_size0~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1))) [2021-10-28 23:32:28,185 INFO L857 garLoopResultBuilder]: For program point L2353(lines 2353 2357) no Hoare annotation was computed. [2021-10-28 23:32:28,186 INFO L857 garLoopResultBuilder]: For program point L1957(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 23:32:28,186 INFO L857 garLoopResultBuilder]: For program point L1957-1(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 23:32:28,186 INFO L857 garLoopResultBuilder]: For program point L1957-2(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 23:32:28,186 INFO L857 garLoopResultBuilder]: For program point L1957-3(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 23:32:28,186 INFO L857 garLoopResultBuilder]: For program point L1957-4(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 23:32:28,186 INFO L857 garLoopResultBuilder]: For program point L1957-5(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 23:32:28,186 INFO L857 garLoopResultBuilder]: For program point L1957-6(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 23:32:28,187 INFO L857 garLoopResultBuilder]: For program point L1957-7(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 23:32:28,187 INFO L857 garLoopResultBuilder]: For program point L1957-8(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 23:32:28,187 INFO L857 garLoopResultBuilder]: For program point L1957-9(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 23:32:28,187 INFO L857 garLoopResultBuilder]: For program point L1957-10(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 23:32:28,187 INFO L857 garLoopResultBuilder]: For program point L1957-11(lines 1957 1968) no Hoare annotation was computed. [2021-10-28 23:32:28,187 INFO L857 garLoopResultBuilder]: For program point L639(lines 639 655) no Hoare annotation was computed. [2021-10-28 23:32:28,188 INFO L857 garLoopResultBuilder]: For program point L639-1(lines 639 655) no Hoare annotation was computed. [2021-10-28 23:32:28,188 INFO L857 garLoopResultBuilder]: For program point L1961(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 23:32:28,188 INFO L857 garLoopResultBuilder]: For program point L1961-1(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 23:32:28,188 INFO L857 garLoopResultBuilder]: For program point L1961-2(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 23:32:28,188 INFO L857 garLoopResultBuilder]: For program point L1961-3(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 23:32:28,188 INFO L857 garLoopResultBuilder]: For program point L1961-4(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 23:32:28,188 INFO L857 garLoopResultBuilder]: For program point L1961-5(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 23:32:28,188 INFO L857 garLoopResultBuilder]: For program point L1961-6(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 23:32:28,188 INFO L857 garLoopResultBuilder]: For program point L1961-7(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 23:32:28,188 INFO L857 garLoopResultBuilder]: For program point L1697(lines 1697 1716) no Hoare annotation was computed. [2021-10-28 23:32:28,189 INFO L857 garLoopResultBuilder]: For program point L1961-8(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 23:32:28,189 INFO L857 garLoopResultBuilder]: For program point L1697-1(lines 1697 1716) no Hoare annotation was computed. [2021-10-28 23:32:28,189 INFO L857 garLoopResultBuilder]: For program point L1961-9(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 23:32:28,189 INFO L857 garLoopResultBuilder]: For program point L1961-10(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 23:32:28,189 INFO L857 garLoopResultBuilder]: For program point L1961-11(lines 1961 1967) no Hoare annotation was computed. [2021-10-28 23:32:28,189 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2021-10-28 23:32:28,189 INFO L857 garLoopResultBuilder]: For program point L2359(lines 2359 2499) no Hoare annotation was computed. [2021-10-28 23:32:28,189 INFO L853 garLoopResultBuilder]: At program point L1831(lines 1826 1834) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,189 INFO L860 garLoopResultBuilder]: At program point L2624(lines 2606 2626) the Hoare annotation is: true [2021-10-28 23:32:28,189 INFO L857 garLoopResultBuilder]: For program point L643(lines 643 654) no Hoare annotation was computed. [2021-10-28 23:32:28,190 INFO L857 garLoopResultBuilder]: For program point L643-1(lines 643 654) no Hoare annotation was computed. [2021-10-28 23:32:28,190 INFO L853 garLoopResultBuilder]: At program point L1966(lines 1953 1971) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10) (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-28 23:32:28,190 INFO L853 garLoopResultBuilder]: At program point L1966-1(lines 1953 1971) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,190 INFO L853 garLoopResultBuilder]: At program point L1966-2(lines 1953 1971) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,191 INFO L853 garLoopResultBuilder]: At program point L1966-3(lines 1953 1971) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,191 INFO L853 garLoopResultBuilder]: At program point L1966-4(lines 1953 1971) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= 2 ULTIMATE.start_incoming_~client)) [2021-10-28 23:32:28,191 INFO L853 garLoopResultBuilder]: At program point L1966-5(lines 1953 1971) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,191 INFO L853 garLoopResultBuilder]: At program point L1966-6(lines 1953 1971) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,191 INFO L853 garLoopResultBuilder]: At program point L1966-7(lines 1953 1971) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,192 INFO L853 garLoopResultBuilder]: At program point L1966-8(lines 1953 1971) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-28 23:32:28,192 INFO L860 garLoopResultBuilder]: At program point L1966-9(lines 1953 1971) the Hoare annotation is: true [2021-10-28 23:32:28,192 INFO L853 garLoopResultBuilder]: At program point L1966-10(lines 1953 1971) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-28 23:32:28,192 INFO L860 garLoopResultBuilder]: At program point L1966-11(lines 1953 1971) the Hoare annotation is: true [2021-10-28 23:32:28,192 INFO L857 garLoopResultBuilder]: For program point L2363(lines 2363 2367) no Hoare annotation was computed. [2021-10-28 23:32:28,193 INFO L857 garLoopResultBuilder]: For program point L647(lines 647 653) no Hoare annotation was computed. [2021-10-28 23:32:28,193 INFO L857 garLoopResultBuilder]: For program point L647-1(lines 647 653) no Hoare annotation was computed. [2021-10-28 23:32:28,193 INFO L853 garLoopResultBuilder]: At program point L1840(lines 1835 1843) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,193 INFO L853 garLoopResultBuilder]: At program point L2501(lines 2350 2502) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle 3) (= ~bob~0 1) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1))) [2021-10-28 23:32:28,193 INFO L853 garLoopResultBuilder]: At program point L2369(lines 2359 2499) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 23:32:28,193 INFO L857 garLoopResultBuilder]: For program point L1048(lines 1048 1064) no Hoare annotation was computed. [2021-10-28 23:32:28,193 INFO L857 garLoopResultBuilder]: For program point L1048-1(lines 1048 1064) no Hoare annotation was computed. [2021-10-28 23:32:28,193 INFO L857 garLoopResultBuilder]: For program point L1048-2(lines 1048 1064) no Hoare annotation was computed. [2021-10-28 23:32:28,193 INFO L857 garLoopResultBuilder]: For program point L1048-3(lines 1048 1064) no Hoare annotation was computed. [2021-10-28 23:32:28,193 INFO L857 garLoopResultBuilder]: For program point L1048-4(lines 1048 1064) no Hoare annotation was computed. [2021-10-28 23:32:28,193 INFO L857 garLoopResultBuilder]: For program point L1048-5(lines 1048 1064) no Hoare annotation was computed. [2021-10-28 23:32:28,194 INFO L853 garLoopResultBuilder]: At program point L652(lines 635 658) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,194 INFO L853 garLoopResultBuilder]: At program point L652-1(lines 635 658) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,194 INFO L857 garLoopResultBuilder]: For program point L1976(lines 1976 1984) no Hoare annotation was computed. [2021-10-28 23:32:28,194 INFO L857 garLoopResultBuilder]: For program point L1976-2(lines 1976 1984) no Hoare annotation was computed. [2021-10-28 23:32:28,194 INFO L857 garLoopResultBuilder]: For program point L1976-4(lines 1976 1984) no Hoare annotation was computed. [2021-10-28 23:32:28,194 INFO L857 garLoopResultBuilder]: For program point L1976-6(lines 1976 1984) no Hoare annotation was computed. [2021-10-28 23:32:28,194 INFO L857 garLoopResultBuilder]: For program point L1976-8(lines 1976 1984) no Hoare annotation was computed. [2021-10-28 23:32:28,194 INFO L857 garLoopResultBuilder]: For program point L1976-10(lines 1976 1984) no Hoare annotation was computed. [2021-10-28 23:32:28,194 INFO L857 garLoopResultBuilder]: For program point L1976-12(lines 1976 1984) no Hoare annotation was computed. [2021-10-28 23:32:28,194 INFO L857 garLoopResultBuilder]: For program point L1052(lines 1052 1063) no Hoare annotation was computed. [2021-10-28 23:32:28,194 INFO L857 garLoopResultBuilder]: For program point L1052-1(lines 1052 1063) no Hoare annotation was computed. [2021-10-28 23:32:28,194 INFO L857 garLoopResultBuilder]: For program point L1052-2(lines 1052 1063) no Hoare annotation was computed. [2021-10-28 23:32:28,194 INFO L857 garLoopResultBuilder]: For program point L1052-3(lines 1052 1063) no Hoare annotation was computed. [2021-10-28 23:32:28,195 INFO L857 garLoopResultBuilder]: For program point L920(lines 920 981) no Hoare annotation was computed. [2021-10-28 23:32:28,195 INFO L857 garLoopResultBuilder]: For program point L1052-4(lines 1052 1063) no Hoare annotation was computed. [2021-10-28 23:32:28,195 INFO L857 garLoopResultBuilder]: For program point L920-1(lines 920 981) no Hoare annotation was computed. [2021-10-28 23:32:28,195 INFO L857 garLoopResultBuilder]: For program point L1052-5(lines 1052 1063) no Hoare annotation was computed. [2021-10-28 23:32:28,195 INFO L857 garLoopResultBuilder]: For program point L920-2(lines 920 981) no Hoare annotation was computed. [2021-10-28 23:32:28,195 INFO L857 garLoopResultBuilder]: For program point L920-3(lines 920 981) no Hoare annotation was computed. [2021-10-28 23:32:28,195 INFO L857 garLoopResultBuilder]: For program point L2374(lines 2374 2381) no Hoare annotation was computed. [2021-10-28 23:32:28,195 INFO L857 garLoopResultBuilder]: For program point L921(lines 921 937) no Hoare annotation was computed. [2021-10-28 23:32:28,195 INFO L857 garLoopResultBuilder]: For program point L921-1(lines 921 937) no Hoare annotation was computed. [2021-10-28 23:32:28,196 INFO L857 garLoopResultBuilder]: For program point L921-2(lines 921 937) no Hoare annotation was computed. [2021-10-28 23:32:28,196 INFO L857 garLoopResultBuilder]: For program point L921-3(lines 921 937) no Hoare annotation was computed. [2021-10-28 23:32:28,196 INFO L857 garLoopResultBuilder]: For program point L1979(lines 1979 1983) no Hoare annotation was computed. [2021-10-28 23:32:28,196 INFO L853 garLoopResultBuilder]: At program point L1979-2(lines 1972 1987) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1)) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,196 INFO L857 garLoopResultBuilder]: For program point L1979-3(lines 1979 1983) no Hoare annotation was computed. [2021-10-28 23:32:28,196 INFO L853 garLoopResultBuilder]: At program point L1979-5(lines 1972 1987) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-10-28 23:32:28,196 INFO L857 garLoopResultBuilder]: For program point L1979-6(lines 1979 1983) no Hoare annotation was computed. [2021-10-28 23:32:28,196 INFO L853 garLoopResultBuilder]: At program point L1979-8(lines 1972 1987) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,197 INFO L857 garLoopResultBuilder]: For program point L1979-9(lines 1979 1983) no Hoare annotation was computed. [2021-10-28 23:32:28,197 INFO L853 garLoopResultBuilder]: At program point L1979-11(lines 1972 1987) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,197 INFO L857 garLoopResultBuilder]: For program point L1979-12(lines 1979 1983) no Hoare annotation was computed. [2021-10-28 23:32:28,197 INFO L853 garLoopResultBuilder]: At program point L1979-14(lines 1972 1987) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,197 INFO L857 garLoopResultBuilder]: For program point L1979-15(lines 1979 1983) no Hoare annotation was computed. [2021-10-28 23:32:28,197 INFO L853 garLoopResultBuilder]: At program point L1979-17(lines 1972 1987) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,198 INFO L857 garLoopResultBuilder]: For program point L1979-18(lines 1979 1983) no Hoare annotation was computed. [2021-10-28 23:32:28,198 INFO L853 garLoopResultBuilder]: At program point L1979-20(lines 1972 1987) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,198 INFO L857 garLoopResultBuilder]: For program point L1056(lines 1056 1062) no Hoare annotation was computed. [2021-10-28 23:32:28,198 INFO L857 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-10-28 23:32:28,198 INFO L857 garLoopResultBuilder]: For program point L1056-1(lines 1056 1062) no Hoare annotation was computed. [2021-10-28 23:32:28,198 INFO L857 garLoopResultBuilder]: For program point L1056-2(lines 1056 1062) no Hoare annotation was computed. [2021-10-28 23:32:28,199 INFO L857 garLoopResultBuilder]: For program point L1056-3(lines 1056 1062) no Hoare annotation was computed. [2021-10-28 23:32:28,199 INFO L857 garLoopResultBuilder]: For program point L1056-4(lines 1056 1062) no Hoare annotation was computed. [2021-10-28 23:32:28,199 INFO L857 garLoopResultBuilder]: For program point L1056-5(lines 1056 1062) no Hoare annotation was computed. [2021-10-28 23:32:28,199 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2021-10-28 23:32:28,199 INFO L857 garLoopResultBuilder]: For program point L925(lines 925 936) no Hoare annotation was computed. [2021-10-28 23:32:28,199 INFO L857 garLoopResultBuilder]: For program point L925-1(lines 925 936) no Hoare annotation was computed. [2021-10-28 23:32:28,199 INFO L857 garLoopResultBuilder]: For program point L925-2(lines 925 936) no Hoare annotation was computed. [2021-10-28 23:32:28,200 INFO L857 garLoopResultBuilder]: For program point L925-3(lines 925 936) no Hoare annotation was computed. [2021-10-28 23:32:28,200 INFO L857 garLoopResultBuilder]: For program point L663(lines 663 675) no Hoare annotation was computed. [2021-10-28 23:32:28,200 INFO L853 garLoopResultBuilder]: At program point L1061(lines 1044 1067) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10) (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-28 23:32:28,200 INFO L853 garLoopResultBuilder]: At program point L1061-1(lines 1044 1067) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,200 INFO L853 garLoopResultBuilder]: At program point L1061-2(lines 1044 1067) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= 2 ULTIMATE.start_incoming_~client)) [2021-10-28 23:32:28,201 INFO L853 garLoopResultBuilder]: At program point L1061-3(lines 1044 1067) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,201 INFO L857 garLoopResultBuilder]: For program point L929(lines 929 935) no Hoare annotation was computed. [2021-10-28 23:32:28,201 INFO L853 garLoopResultBuilder]: At program point L1061-4(lines 1044 1067) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-28 23:32:28,201 INFO L857 garLoopResultBuilder]: For program point L929-1(lines 929 935) no Hoare annotation was computed. [2021-10-28 23:32:28,201 INFO L853 garLoopResultBuilder]: At program point L1061-5(lines 1044 1067) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-28 23:32:28,202 INFO L857 garLoopResultBuilder]: For program point L929-2(lines 929 935) no Hoare annotation was computed. [2021-10-28 23:32:28,202 INFO L857 garLoopResultBuilder]: For program point L929-3(lines 929 935) no Hoare annotation was computed. [2021-10-28 23:32:28,202 INFO L853 garLoopResultBuilder]: At program point L2383(lines 2370 2498) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 23:32:28,202 INFO L857 garLoopResultBuilder]: For program point L666(lines 666 674) no Hoare annotation was computed. [2021-10-28 23:32:28,202 INFO L857 garLoopResultBuilder]: For program point L669(lines 669 673) no Hoare annotation was computed. [2021-10-28 23:32:28,202 INFO L853 garLoopResultBuilder]: At program point L669-2(lines 659 678) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 23:32:28,203 INFO L853 garLoopResultBuilder]: At program point L1727(lines 1 2659) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (= 2 ULTIMATE.start_incoming_~client)) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-10-28 23:32:28,203 INFO L853 garLoopResultBuilder]: At program point L1727-1(lines 1 2659) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,203 INFO L853 garLoopResultBuilder]: At program point L1727-2(lines 1 2659) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= 2 ULTIMATE.start_incoming_~client)) [2021-10-28 23:32:28,203 INFO L853 garLoopResultBuilder]: At program point L1727-3(lines 1 2659) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,204 INFO L853 garLoopResultBuilder]: At program point L1727-4(lines 1 2659) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-28 23:32:28,204 INFO L853 garLoopResultBuilder]: At program point L1727-5(lines 1 2659) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (not (= ULTIMATE.start_incoming__wrappee__AddressBook_~client 1)) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-28 23:32:28,204 INFO L857 garLoopResultBuilder]: For program point L2388(lines 2388 2392) no Hoare annotation was computed. [2021-10-28 23:32:28,204 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2021-10-28 23:32:28,204 INFO L857 garLoopResultBuilder]: For program point L1994(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 23:32:28,204 INFO L857 garLoopResultBuilder]: For program point L1994-1(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 23:32:28,205 INFO L857 garLoopResultBuilder]: For program point L1994-2(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 23:32:28,205 INFO L857 garLoopResultBuilder]: For program point L1994-3(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 23:32:28,205 INFO L857 garLoopResultBuilder]: For program point L1994-4(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 23:32:28,205 INFO L857 garLoopResultBuilder]: For program point L1994-5(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 23:32:28,205 INFO L857 garLoopResultBuilder]: For program point L1994-6(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 23:32:28,205 INFO L857 garLoopResultBuilder]: For program point L1994-7(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 23:32:28,205 INFO L857 garLoopResultBuilder]: For program point L1994-8(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 23:32:28,206 INFO L857 garLoopResultBuilder]: For program point L1994-9(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 23:32:28,206 INFO L857 garLoopResultBuilder]: For program point L1994-10(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 23:32:28,206 INFO L857 garLoopResultBuilder]: For program point L1994-11(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 23:32:28,206 INFO L857 garLoopResultBuilder]: For program point L1994-12(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 23:32:28,206 INFO L857 garLoopResultBuilder]: For program point L1994-13(lines 1994 2005) no Hoare annotation was computed. [2021-10-28 23:32:28,206 INFO L853 garLoopResultBuilder]: At program point L1863(lines 1859 1865) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,207 INFO L853 garLoopResultBuilder]: At program point L1863-1(lines 1859 1865) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,207 INFO L857 garLoopResultBuilder]: For program point L939(lines 939 980) no Hoare annotation was computed. [2021-10-28 23:32:28,207 INFO L857 garLoopResultBuilder]: For program point L939-1(lines 939 980) no Hoare annotation was computed. [2021-10-28 23:32:28,207 INFO L857 garLoopResultBuilder]: For program point L939-2(lines 939 980) no Hoare annotation was computed. [2021-10-28 23:32:28,207 INFO L857 garLoopResultBuilder]: For program point L939-3(lines 939 980) no Hoare annotation was computed. [2021-10-28 23:32:28,207 INFO L857 garLoopResultBuilder]: For program point L1072(lines 1072 1084) no Hoare annotation was computed. [2021-10-28 23:32:28,208 INFO L857 garLoopResultBuilder]: For program point L940(lines 940 956) no Hoare annotation was computed. [2021-10-28 23:32:28,208 INFO L857 garLoopResultBuilder]: For program point L940-1(lines 940 956) no Hoare annotation was computed. [2021-10-28 23:32:28,208 INFO L857 garLoopResultBuilder]: For program point L940-2(lines 940 956) no Hoare annotation was computed. [2021-10-28 23:32:28,208 INFO L857 garLoopResultBuilder]: For program point L940-3(lines 940 956) no Hoare annotation was computed. [2021-10-28 23:32:28,208 INFO L853 garLoopResultBuilder]: At program point L2394(lines 2384 2497) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 23:32:28,208 INFO L857 garLoopResultBuilder]: For program point L1998(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 23:32:28,209 INFO L857 garLoopResultBuilder]: For program point L1998-1(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 23:32:28,209 INFO L857 garLoopResultBuilder]: For program point L1998-2(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 23:32:28,209 INFO L857 garLoopResultBuilder]: For program point L1998-3(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 23:32:28,209 INFO L857 garLoopResultBuilder]: For program point L1998-4(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 23:32:28,209 INFO L857 garLoopResultBuilder]: For program point L1998-5(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 23:32:28,209 INFO L857 garLoopResultBuilder]: For program point L1998-6(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 23:32:28,209 INFO L857 garLoopResultBuilder]: For program point L1998-7(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 23:32:28,210 INFO L857 garLoopResultBuilder]: For program point L1998-8(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 23:32:28,210 INFO L857 garLoopResultBuilder]: For program point L1998-9(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 23:32:28,210 INFO L857 garLoopResultBuilder]: For program point L1998-10(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 23:32:28,210 INFO L857 garLoopResultBuilder]: For program point L1998-11(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 23:32:28,210 INFO L857 garLoopResultBuilder]: For program point L1998-12(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 23:32:28,210 INFO L857 garLoopResultBuilder]: For program point L1998-13(lines 1998 2004) no Hoare annotation was computed. [2021-10-28 23:32:28,210 INFO L857 garLoopResultBuilder]: For program point L1075(lines 1075 1083) no Hoare annotation was computed. [2021-10-28 23:32:28,211 INFO L857 garLoopResultBuilder]: For program point L944(lines 944 955) no Hoare annotation was computed. [2021-10-28 23:32:28,211 INFO L857 garLoopResultBuilder]: For program point L944-1(lines 944 955) no Hoare annotation was computed. [2021-10-28 23:32:28,211 INFO L857 garLoopResultBuilder]: For program point L944-2(lines 944 955) no Hoare annotation was computed. [2021-10-28 23:32:28,211 INFO L857 garLoopResultBuilder]: For program point L944-3(lines 944 955) no Hoare annotation was computed. [2021-10-28 23:32:28,211 INFO L853 garLoopResultBuilder]: At program point L1605(lines 1580 1607) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,212 INFO L853 garLoopResultBuilder]: At program point L1605-1(lines 1580 1607) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,212 INFO L853 garLoopResultBuilder]: At program point L1605-2(lines 1580 1607) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,212 INFO L853 garLoopResultBuilder]: At program point L1605-3(lines 1580 1607) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,212 INFO L860 garLoopResultBuilder]: At program point L1605-4(lines 1580 1607) the Hoare annotation is: true [2021-10-28 23:32:28,212 INFO L860 garLoopResultBuilder]: At program point L1605-5(lines 1580 1607) the Hoare annotation is: true [2021-10-28 23:32:28,212 INFO L857 garLoopResultBuilder]: For program point L2399(lines 2399 2403) no Hoare annotation was computed. [2021-10-28 23:32:28,213 INFO L857 garLoopResultBuilder]: For program point L1078(lines 1078 1082) no Hoare annotation was computed. [2021-10-28 23:32:28,213 INFO L853 garLoopResultBuilder]: At program point L1078-2(lines 1 2659) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (not (= ~__ste_email_to0~0 1))) (.cse4 (= ULTIMATE.start_test_~op2~0 0)) (.cse5 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 (= ULTIMATE.start_test_~op1~0 0) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 (= ULTIMATE.start_test_~op1~0 1) .cse3 .cse4 .cse5))) [2021-10-28 23:32:28,213 INFO L853 garLoopResultBuilder]: At program point L2003(lines 1990 2008) the Hoare annotation is: (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,213 INFO L853 garLoopResultBuilder]: At program point L2003-1(lines 1990 2008) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-10-28 23:32:28,213 INFO L853 garLoopResultBuilder]: At program point L2003-2(lines 1990 2008) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,214 INFO L853 garLoopResultBuilder]: At program point L2003-3(lines 1990 2008) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,214 INFO L853 garLoopResultBuilder]: At program point L2003-4(lines 1990 2008) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,214 INFO L853 garLoopResultBuilder]: At program point L2003-5(lines 1990 2008) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,214 INFO L853 garLoopResultBuilder]: At program point L2003-6(lines 1990 2008) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,215 INFO L853 garLoopResultBuilder]: At program point L2003-7(lines 1990 2008) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,215 INFO L853 garLoopResultBuilder]: At program point L2003-8(lines 1990 2008) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,215 INFO L853 garLoopResultBuilder]: At program point L2003-9(lines 1990 2008) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,215 INFO L853 garLoopResultBuilder]: At program point L2003-10(lines 1990 2008) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4))) [2021-10-28 23:32:28,215 INFO L860 garLoopResultBuilder]: At program point L2003-11(lines 1990 2008) the Hoare annotation is: true [2021-10-28 23:32:28,215 INFO L853 garLoopResultBuilder]: At program point L2003-12(lines 1990 2008) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 (= ~__ste_email_to0~0 2) .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-28 23:32:28,216 INFO L860 garLoopResultBuilder]: At program point L2003-13(lines 1990 2008) the Hoare annotation is: true [2021-10-28 23:32:28,216 INFO L857 garLoopResultBuilder]: For program point L948(lines 948 954) no Hoare annotation was computed. [2021-10-28 23:32:28,216 INFO L857 garLoopResultBuilder]: For program point L948-1(lines 948 954) no Hoare annotation was computed. [2021-10-28 23:32:28,216 INFO L857 garLoopResultBuilder]: For program point L948-2(lines 948 954) no Hoare annotation was computed. [2021-10-28 23:32:28,216 INFO L857 garLoopResultBuilder]: For program point L948-3(lines 948 954) no Hoare annotation was computed. [2021-10-28 23:32:28,216 INFO L853 garLoopResultBuilder]: At program point L2405(lines 2395 2496) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 23:32:28,217 INFO L853 garLoopResultBuilder]: At program point L1613(lines 1608 1616) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,217 INFO L853 garLoopResultBuilder]: At program point L1613-1(lines 1608 1616) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,217 INFO L853 garLoopResultBuilder]: At program point L1613-2(lines 1608 1616) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,217 INFO L853 garLoopResultBuilder]: At program point L1613-3(lines 1608 1616) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,218 INFO L853 garLoopResultBuilder]: At program point L1613-4(lines 1608 1616) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,218 INFO L853 garLoopResultBuilder]: At program point L1613-5(lines 1608 1616) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,218 INFO L853 garLoopResultBuilder]: At program point L1613-6(lines 1608 1616) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,218 INFO L853 garLoopResultBuilder]: At program point L1613-7(lines 1608 1616) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,218 INFO L853 garLoopResultBuilder]: At program point L1613-8(lines 1608 1616) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,218 INFO L860 garLoopResultBuilder]: At program point L1613-9(lines 1608 1616) the Hoare annotation is: true [2021-10-28 23:32:28,219 INFO L853 garLoopResultBuilder]: At program point L1613-10(lines 1608 1616) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,219 INFO L860 garLoopResultBuilder]: At program point L1613-11(lines 1608 1616) the Hoare annotation is: true [2021-10-28 23:32:28,219 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-10-28 23:32:28,219 INFO L857 garLoopResultBuilder]: For program point L1483(lines 1483 1499) no Hoare annotation was computed. [2021-10-28 23:32:28,219 INFO L857 garLoopResultBuilder]: For program point L1483-1(lines 1483 1499) no Hoare annotation was computed. [2021-10-28 23:32:28,219 INFO L857 garLoopResultBuilder]: For program point L1483-2(lines 1483 1499) no Hoare annotation was computed. [2021-10-28 23:32:28,220 INFO L857 garLoopResultBuilder]: For program point L1483-3(lines 1483 1499) no Hoare annotation was computed. [2021-10-28 23:32:28,220 INFO L857 garLoopResultBuilder]: For program point L1483-4(lines 1483 1499) no Hoare annotation was computed. [2021-10-28 23:32:28,220 INFO L857 garLoopResultBuilder]: For program point L1483-5(lines 1483 1499) no Hoare annotation was computed. [2021-10-28 23:32:28,220 INFO L857 garLoopResultBuilder]: For program point L1748(lines 1748 1754) no Hoare annotation was computed. [2021-10-28 23:32:28,220 INFO L853 garLoopResultBuilder]: At program point L1748-1(lines 1740 1757) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,220 INFO L857 garLoopResultBuilder]: For program point L1748-2(lines 1748 1754) no Hoare annotation was computed. [2021-10-28 23:32:28,221 INFO L853 garLoopResultBuilder]: At program point L1748-3(lines 1740 1757) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,221 INFO L857 garLoopResultBuilder]: For program point L1748-4(lines 1748 1754) no Hoare annotation was computed. [2021-10-28 23:32:28,221 INFO L853 garLoopResultBuilder]: At program point L1748-5(lines 1740 1757) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= 2 |ULTIMATE.start_getEmailTo_#res|)) (.cse2 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse3 (= ULTIMATE.start_setClientId_~handle 3)) (.cse4 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse5 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse6 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse7 (= 2 ULTIMATE.start_createEmail_~to)) (.cse8 (= ~bob~0 1)) (.cse9 (= ~rjh~0 2)) (.cse10 (= ULTIMATE.start_outgoing_~size~2 0)) (.cse11 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse12 (= ULTIMATE.start_outgoing_~msg 1)) (.cse13 (= 2 ULTIMATE.start_incoming_~client))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= ULTIMATE.start_setEmailTo_~handle 1) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~__ste_email_to0~0 2) .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13))) [2021-10-28 23:32:28,221 INFO L857 garLoopResultBuilder]: For program point L1748-6(lines 1748 1754) no Hoare annotation was computed. [2021-10-28 23:32:28,221 INFO L853 garLoopResultBuilder]: At program point L1748-7(lines 1740 1757) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,222 INFO L857 garLoopResultBuilder]: For program point L1748-8(lines 1748 1754) no Hoare annotation was computed. [2021-10-28 23:32:28,222 INFO L853 garLoopResultBuilder]: At program point L1748-9(lines 1740 1757) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-28 23:32:28,222 INFO L857 garLoopResultBuilder]: For program point L1748-10(lines 1748 1754) no Hoare annotation was computed. [2021-10-28 23:32:28,222 INFO L853 garLoopResultBuilder]: At program point L1748-11(lines 1740 1757) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-28 23:32:28,222 INFO L857 garLoopResultBuilder]: For program point L2013(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 23:32:28,222 INFO L857 garLoopResultBuilder]: For program point L2013-2(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 23:32:28,223 INFO L857 garLoopResultBuilder]: For program point L2013-4(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 23:32:28,223 INFO L857 garLoopResultBuilder]: For program point L2013-6(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 23:32:28,223 INFO L857 garLoopResultBuilder]: For program point L2013-8(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 23:32:28,223 INFO L857 garLoopResultBuilder]: For program point L2013-10(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 23:32:28,223 INFO L857 garLoopResultBuilder]: For program point L2013-12(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 23:32:28,223 INFO L857 garLoopResultBuilder]: For program point L2013-14(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 23:32:28,223 INFO L857 garLoopResultBuilder]: For program point L2013-16(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 23:32:28,224 INFO L857 garLoopResultBuilder]: For program point L2410(lines 2410 2414) no Hoare annotation was computed. [2021-10-28 23:32:28,224 INFO L857 garLoopResultBuilder]: For program point L2013-18(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 23:32:28,224 INFO L857 garLoopResultBuilder]: For program point L2013-20(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 23:32:28,224 INFO L857 garLoopResultBuilder]: For program point L2013-22(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 23:32:28,224 INFO L857 garLoopResultBuilder]: For program point L2013-24(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 23:32:28,224 INFO L857 garLoopResultBuilder]: For program point L2013-26(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 23:32:28,225 INFO L857 garLoopResultBuilder]: For program point L2013-28(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 23:32:28,225 INFO L857 garLoopResultBuilder]: For program point L2013-30(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 23:32:28,225 INFO L857 garLoopResultBuilder]: For program point L2013-32(lines 2013 2021) no Hoare annotation was computed. [2021-10-28 23:32:28,225 INFO L857 garLoopResultBuilder]: For program point L958(lines 958 979) no Hoare annotation was computed. [2021-10-28 23:32:28,225 INFO L857 garLoopResultBuilder]: For program point L958-1(lines 958 979) no Hoare annotation was computed. [2021-10-28 23:32:28,225 INFO L857 garLoopResultBuilder]: For program point L958-2(lines 958 979) no Hoare annotation was computed. [2021-10-28 23:32:28,225 INFO L857 garLoopResultBuilder]: For program point L958-3(lines 958 979) no Hoare annotation was computed. [2021-10-28 23:32:28,226 INFO L857 garLoopResultBuilder]: For program point L1487(lines 1487 1498) no Hoare annotation was computed. [2021-10-28 23:32:28,226 INFO L857 garLoopResultBuilder]: For program point L1487-1(lines 1487 1498) no Hoare annotation was computed. [2021-10-28 23:32:28,226 INFO L857 garLoopResultBuilder]: For program point L1487-2(lines 1487 1498) no Hoare annotation was computed. [2021-10-28 23:32:28,226 INFO L857 garLoopResultBuilder]: For program point L1487-3(lines 1487 1498) no Hoare annotation was computed. [2021-10-28 23:32:28,226 INFO L857 garLoopResultBuilder]: For program point L1487-4(lines 1487 1498) no Hoare annotation was computed. [2021-10-28 23:32:28,226 INFO L857 garLoopResultBuilder]: For program point L1487-5(lines 1487 1498) no Hoare annotation was computed. [2021-10-28 23:32:28,226 INFO L857 garLoopResultBuilder]: For program point L2016(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 23:32:28,227 INFO L857 garLoopResultBuilder]: For program point L959(lines 959 975) no Hoare annotation was computed. [2021-10-28 23:32:28,227 INFO L853 garLoopResultBuilder]: At program point L2016-2(lines 2009 2024) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,227 INFO L857 garLoopResultBuilder]: For program point L959-1(lines 959 975) no Hoare annotation was computed. [2021-10-28 23:32:28,227 INFO L857 garLoopResultBuilder]: For program point L2016-3(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 23:32:28,227 INFO L857 garLoopResultBuilder]: For program point L959-2(lines 959 975) no Hoare annotation was computed. [2021-10-28 23:32:28,227 INFO L857 garLoopResultBuilder]: For program point L959-3(lines 959 975) no Hoare annotation was computed. [2021-10-28 23:32:28,228 INFO L853 garLoopResultBuilder]: At program point L2016-5(lines 2009 2024) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse1 (= ULTIMATE.start_setClientId_~handle 3)) (.cse2 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse3 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse4 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse5 (= 2 ULTIMATE.start_createEmail_~to)) (.cse6 (= ~bob~0 1)) (.cse7 (= ~rjh~0 2)) (.cse8 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse9 (= ULTIMATE.start_outgoing_~msg 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 .cse3 (= ~__ste_email_to0~0 2) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ULTIMATE.start_setEmailTo_~handle 1) .cse6 .cse7 .cse8 .cse9))) [2021-10-28 23:32:28,228 INFO L857 garLoopResultBuilder]: For program point L2016-6(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 23:32:28,228 INFO L853 garLoopResultBuilder]: At program point L2016-8(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,228 INFO L857 garLoopResultBuilder]: For program point L2016-9(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 23:32:28,228 INFO L853 garLoopResultBuilder]: At program point L2016-11(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,228 INFO L857 garLoopResultBuilder]: For program point L2016-12(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 23:32:28,229 INFO L853 garLoopResultBuilder]: At program point L2016-14(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,229 INFO L857 garLoopResultBuilder]: For program point L2016-15(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 23:32:28,229 INFO L853 garLoopResultBuilder]: At program point L2016-17(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,229 INFO L857 garLoopResultBuilder]: For program point L2016-18(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 23:32:28,229 INFO L853 garLoopResultBuilder]: At program point L2016-20(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,229 INFO L857 garLoopResultBuilder]: For program point L2016-21(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 23:32:28,230 INFO L853 garLoopResultBuilder]: At program point L2016-23(lines 2009 2024) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= 2 |ULTIMATE.start_getEmailTo_#res|)) (.cse2 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse3 (= ULTIMATE.start_setClientId_~handle 3)) (.cse4 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse5 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse6 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse7 (= 2 ULTIMATE.start_createEmail_~to)) (.cse8 (= ~bob~0 1)) (.cse9 (= ~rjh~0 2)) (.cse10 (= ULTIMATE.start_outgoing_~size~2 0)) (.cse11 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse12 (= ULTIMATE.start_outgoing_~msg 1)) (.cse13 (= 2 ULTIMATE.start_incoming_~client))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= ULTIMATE.start_setEmailTo_~handle 1) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~__ste_email_to0~0 2) .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13))) [2021-10-28 23:32:28,230 INFO L857 garLoopResultBuilder]: For program point L2016-24(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 23:32:28,230 INFO L853 garLoopResultBuilder]: At program point L2016-26(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,230 INFO L857 garLoopResultBuilder]: For program point L2016-27(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 23:32:28,230 INFO L853 garLoopResultBuilder]: At program point L2016-29(lines 2009 2024) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,231 INFO L857 garLoopResultBuilder]: For program point L2016-30(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 23:32:28,231 INFO L853 garLoopResultBuilder]: At program point L2016-32(lines 2009 2024) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,231 INFO L857 garLoopResultBuilder]: For program point L2016-33(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 23:32:28,231 INFO L853 garLoopResultBuilder]: At program point L2016-35(lines 2009 2024) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,231 INFO L857 garLoopResultBuilder]: For program point L2016-36(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 23:32:28,231 INFO L853 garLoopResultBuilder]: At program point L2016-38(lines 2009 2024) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,232 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2021-10-28 23:32:28,232 INFO L857 garLoopResultBuilder]: For program point L2016-39(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 23:32:28,232 INFO L853 garLoopResultBuilder]: At program point L2016-41(lines 2009 2024) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 .cse4) (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-28 23:32:28,232 INFO L857 garLoopResultBuilder]: For program point L2016-42(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 23:32:28,232 INFO L853 garLoopResultBuilder]: At program point L2016-44(lines 2009 2024) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,232 INFO L857 garLoopResultBuilder]: For program point L2016-45(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 23:32:28,233 INFO L853 garLoopResultBuilder]: At program point L2016-47(lines 2009 2024) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= 2 ULTIMATE.start_createEmail_~to)) (.cse3 (= ~rjh~0 2)) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse0 .cse1 .cse2 (= ~__ste_client_forwardReceiver1~0 0) (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse3 .cse4 (= 2 ULTIMATE.start_incoming_~client)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= ~bob~0 1) .cse3 (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-28 23:32:28,233 INFO L857 garLoopResultBuilder]: For program point L2016-48(lines 2016 2020) no Hoare annotation was computed. [2021-10-28 23:32:28,233 INFO L853 garLoopResultBuilder]: At program point L2016-50(lines 2009 2024) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,233 INFO L857 garLoopResultBuilder]: For program point L1491(lines 1491 1497) no Hoare annotation was computed. [2021-10-28 23:32:28,233 INFO L857 garLoopResultBuilder]: For program point L1491-1(lines 1491 1497) no Hoare annotation was computed. [2021-10-28 23:32:28,233 INFO L853 garLoopResultBuilder]: At program point L2416(lines 2406 2495) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 23:32:28,234 INFO L857 garLoopResultBuilder]: For program point L1491-2(lines 1491 1497) no Hoare annotation was computed. [2021-10-28 23:32:28,234 INFO L857 garLoopResultBuilder]: For program point L1491-3(lines 1491 1497) no Hoare annotation was computed. [2021-10-28 23:32:28,234 INFO L857 garLoopResultBuilder]: For program point L1491-4(lines 1491 1497) no Hoare annotation was computed. [2021-10-28 23:32:28,234 INFO L857 garLoopResultBuilder]: For program point L1491-5(lines 1491 1497) no Hoare annotation was computed. [2021-10-28 23:32:28,234 INFO L857 garLoopResultBuilder]: For program point L963(lines 963 974) no Hoare annotation was computed. [2021-10-28 23:32:28,234 INFO L857 garLoopResultBuilder]: For program point L963-1(lines 963 974) no Hoare annotation was computed. [2021-10-28 23:32:28,235 INFO L857 garLoopResultBuilder]: For program point L963-2(lines 963 974) no Hoare annotation was computed. [2021-10-28 23:32:28,235 INFO L857 garLoopResultBuilder]: For program point L963-3(lines 963 974) no Hoare annotation was computed. [2021-10-28 23:32:28,235 INFO L857 garLoopResultBuilder]: For program point L967(lines 967 973) no Hoare annotation was computed. [2021-10-28 23:32:28,235 INFO L857 garLoopResultBuilder]: For program point L967-1(lines 967 973) no Hoare annotation was computed. [2021-10-28 23:32:28,235 INFO L857 garLoopResultBuilder]: For program point L967-2(lines 967 973) no Hoare annotation was computed. [2021-10-28 23:32:28,235 INFO L857 garLoopResultBuilder]: For program point L967-3(lines 967 973) no Hoare annotation was computed. [2021-10-28 23:32:28,235 INFO L853 garLoopResultBuilder]: At program point L1496(lines 1479 1502) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,236 INFO L853 garLoopResultBuilder]: At program point L1496-1(lines 1479 1502) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,236 INFO L853 garLoopResultBuilder]: At program point L1496-2(lines 1479 1502) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_outgoing_~size~2 0)) (.cse10 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse11 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 (= 2 ULTIMATE.start_getClientForwardReceiver_~handle) .cse8 .cse9 .cse10 .cse11 (= 2 ULTIMATE.start_incoming_~client)))) [2021-10-28 23:32:28,236 INFO L853 garLoopResultBuilder]: At program point L1496-3(lines 1479 1502) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,236 INFO L857 garLoopResultBuilder]: For program point L2421(lines 2421 2428) no Hoare annotation was computed. [2021-10-28 23:32:28,237 INFO L853 garLoopResultBuilder]: At program point L1496-4(lines 1479 1502) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse2 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) .cse2) (and .cse0 (not (= ~rjh~0 1)) .cse1 (not (= ULTIMATE.start_createEmail_~to 1)) .cse2 (= |ULTIMATE.start_getClientForwardReceiver_#res| 0)))) [2021-10-28 23:32:28,237 INFO L853 garLoopResultBuilder]: At program point L1496-5(lines 1479 1502) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (not (= ~rjh~0 1))) (.cse2 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse3 (not (= ULTIMATE.start_createEmail_~to 1))) (.cse4 (= ULTIMATE.start_createEmail_~msg~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= |ULTIMATE.start_getClientForwardReceiver_#res| 0)) (and (= ULTIMATE.start_sendEmail_~sender 1) .cse0 .cse1 .cse2 (= 2 ULTIMATE.start_createEmail_~to) .cse3 (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) .cse4))) [2021-10-28 23:32:28,237 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2021-10-28 23:32:28,237 INFO L857 garLoopResultBuilder]: For program point L2560(lines 2560 2568) no Hoare annotation was computed. [2021-10-28 23:32:28,237 INFO L857 garLoopResultBuilder]: For program point L1768(lines 1768 1775) no Hoare annotation was computed. [2021-10-28 23:32:28,237 INFO L853 garLoopResultBuilder]: At program point L1768-1(lines 1671 1682) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,238 INFO L857 garLoopResultBuilder]: For program point L1768-2(lines 1768 1775) no Hoare annotation was computed. [2021-10-28 23:32:28,238 INFO L857 garLoopResultBuilder]: For program point L1768-4(lines 1768 1775) no Hoare annotation was computed. [2021-10-28 23:32:28,238 INFO L853 garLoopResultBuilder]: At program point L1768-5(lines 1794 1806) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,238 INFO L857 garLoopResultBuilder]: For program point L1768-6(lines 1768 1775) no Hoare annotation was computed. [2021-10-28 23:32:28,238 INFO L853 garLoopResultBuilder]: At program point L1768-7(lines 1671 1682) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,238 INFO L857 garLoopResultBuilder]: For program point L1768-8(lines 1768 1775) no Hoare annotation was computed. [2021-10-28 23:32:28,239 INFO L857 garLoopResultBuilder]: For program point L1768-10(lines 1768 1775) no Hoare annotation was computed. [2021-10-28 23:32:28,239 INFO L857 garLoopResultBuilder]: For program point L2297(lines 2297 2303) no Hoare annotation was computed. [2021-10-28 23:32:28,239 INFO L857 garLoopResultBuilder]: For program point L2297-2(lines 2297 2303) no Hoare annotation was computed. [2021-10-28 23:32:28,239 INFO L857 garLoopResultBuilder]: For program point L2297-4(lines 2297 2303) no Hoare annotation was computed. [2021-10-28 23:32:28,239 INFO L857 garLoopResultBuilder]: For program point L2297-6(lines 2297 2303) no Hoare annotation was computed. [2021-10-28 23:32:28,239 INFO L857 garLoopResultBuilder]: For program point L2297-8(lines 2297 2303) no Hoare annotation was computed. [2021-10-28 23:32:28,239 INFO L857 garLoopResultBuilder]: For program point L2297-10(lines 2297 2303) no Hoare annotation was computed. [2021-10-28 23:32:28,240 INFO L853 garLoopResultBuilder]: At program point L1637(lines 1626 1640) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,240 INFO L853 garLoopResultBuilder]: At program point L2430(lines 2417 2494) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 23:32:28,240 INFO L853 garLoopResultBuilder]: At program point L978(lines 916 984) the Hoare annotation is: (and (= 2 |ULTIMATE.start_getEmailTo_#res|) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,240 INFO L853 garLoopResultBuilder]: At program point L978-1(lines 916 984) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,240 INFO L853 garLoopResultBuilder]: At program point L978-2(lines 916 984) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,241 INFO L853 garLoopResultBuilder]: At program point L978-3(lines 916 984) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,241 INFO L857 garLoopResultBuilder]: For program point L1507(lines 1507 1519) no Hoare annotation was computed. [2021-10-28 23:32:28,241 INFO L857 garLoopResultBuilder]: For program point L1510(lines 1510 1518) no Hoare annotation was computed. [2021-10-28 23:32:28,241 INFO L857 garLoopResultBuilder]: For program point L2435(lines 2435 2439) no Hoare annotation was computed. [2021-10-28 23:32:28,241 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-10-28 23:32:28,241 INFO L857 garLoopResultBuilder]: For program point L1513(lines 1513 1517) no Hoare annotation was computed. [2021-10-28 23:32:28,242 INFO L853 garLoopResultBuilder]: At program point L1513-2(lines 1 2659) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 23:32:28,242 INFO L857 garLoopResultBuilder]: For program point L855(lines 855 903) no Hoare annotation was computed. [2021-10-28 23:32:28,242 INFO L853 garLoopResultBuilder]: At program point L2441(lines 2431 2493) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 23:32:28,242 INFO L857 garLoopResultBuilder]: For program point L856(lines 856 868) no Hoare annotation was computed. [2021-10-28 23:32:28,242 INFO L857 garLoopResultBuilder]: For program point L989(lines 989 1037) no Hoare annotation was computed. [2021-10-28 23:32:28,242 INFO L857 garLoopResultBuilder]: For program point L989-1(lines 989 1037) no Hoare annotation was computed. [2021-10-28 23:32:28,242 INFO L857 garLoopResultBuilder]: For program point L990(lines 990 1002) no Hoare annotation was computed. [2021-10-28 23:32:28,243 INFO L857 garLoopResultBuilder]: For program point L990-2(lines 990 1002) no Hoare annotation was computed. [2021-10-28 23:32:28,243 INFO L857 garLoopResultBuilder]: For program point L859(lines 859 867) no Hoare annotation was computed. [2021-10-28 23:32:28,243 INFO L857 garLoopResultBuilder]: For program point L2446(lines 2446 2453) no Hoare annotation was computed. [2021-10-28 23:32:28,243 INFO L857 garLoopResultBuilder]: For program point L993(lines 993 1001) no Hoare annotation was computed. [2021-10-28 23:32:28,243 INFO L857 garLoopResultBuilder]: For program point L993-2(lines 993 1001) no Hoare annotation was computed. [2021-10-28 23:32:28,243 INFO L857 garLoopResultBuilder]: For program point L862(lines 862 866) no Hoare annotation was computed. [2021-10-28 23:32:28,243 INFO L857 garLoopResultBuilder]: For program point L1920(lines 1920 1931) no Hoare annotation was computed. [2021-10-28 23:32:28,244 INFO L857 garLoopResultBuilder]: For program point L1920-1(lines 1920 1931) no Hoare annotation was computed. [2021-10-28 23:32:28,244 INFO L857 garLoopResultBuilder]: For program point L1920-2(lines 1920 1931) no Hoare annotation was computed. [2021-10-28 23:32:28,244 INFO L857 garLoopResultBuilder]: For program point L1920-3(lines 1920 1931) no Hoare annotation was computed. [2021-10-28 23:32:28,244 INFO L857 garLoopResultBuilder]: For program point L1920-4(lines 1920 1931) no Hoare annotation was computed. [2021-10-28 23:32:28,244 INFO L857 garLoopResultBuilder]: For program point L1920-5(lines 1920 1931) no Hoare annotation was computed. [2021-10-28 23:32:28,244 INFO L857 garLoopResultBuilder]: For program point L996(lines 996 1000) no Hoare annotation was computed. [2021-10-28 23:32:28,245 INFO L857 garLoopResultBuilder]: For program point L996-3(lines 996 1000) no Hoare annotation was computed. [2021-10-28 23:32:28,245 INFO L857 garLoopResultBuilder]: For program point L1924(lines 1924 1930) no Hoare annotation was computed. [2021-10-28 23:32:28,245 INFO L857 garLoopResultBuilder]: For program point L1924-1(lines 1924 1930) no Hoare annotation was computed. [2021-10-28 23:32:28,245 INFO L857 garLoopResultBuilder]: For program point L1924-2(lines 1924 1930) no Hoare annotation was computed. [2021-10-28 23:32:28,245 INFO L857 garLoopResultBuilder]: For program point L1924-3(lines 1924 1930) no Hoare annotation was computed. [2021-10-28 23:32:28,245 INFO L857 garLoopResultBuilder]: For program point L1924-4(lines 1924 1930) no Hoare annotation was computed. [2021-10-28 23:32:28,245 INFO L857 garLoopResultBuilder]: For program point L1924-5(lines 1924 1930) no Hoare annotation was computed. [2021-10-28 23:32:28,246 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 486) no Hoare annotation was computed. [2021-10-28 23:32:28,246 INFO L857 garLoopResultBuilder]: For program point L1530(lines 1530 1546) no Hoare annotation was computed. [2021-10-28 23:32:28,246 INFO L857 garLoopResultBuilder]: For program point L1530-1(lines 1530 1546) no Hoare annotation was computed. [2021-10-28 23:32:28,246 INFO L857 garLoopResultBuilder]: For program point L1530-2(lines 1530 1546) no Hoare annotation was computed. [2021-10-28 23:32:28,246 INFO L857 garLoopResultBuilder]: For program point L1530-3(lines 1530 1546) no Hoare annotation was computed. [2021-10-28 23:32:28,246 INFO L853 garLoopResultBuilder]: At program point L2455(lines 2442 2492) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 23:32:28,247 INFO L857 garLoopResultBuilder]: For program point L1530-4(lines 1530 1546) no Hoare annotation was computed. [2021-10-28 23:32:28,247 INFO L857 garLoopResultBuilder]: For program point L1530-5(lines 1530 1546) no Hoare annotation was computed. [2021-10-28 23:32:28,247 INFO L857 garLoopResultBuilder]: For program point L870(lines 870 902) no Hoare annotation was computed. [2021-10-28 23:32:28,247 INFO L857 garLoopResultBuilder]: For program point L871(lines 871 883) no Hoare annotation was computed. [2021-10-28 23:32:28,247 INFO L857 garLoopResultBuilder]: For program point L1004(lines 1004 1036) no Hoare annotation was computed. [2021-10-28 23:32:28,247 INFO L857 garLoopResultBuilder]: For program point L1004-1(lines 1004 1036) no Hoare annotation was computed. [2021-10-28 23:32:28,247 INFO L853 garLoopResultBuilder]: At program point L1929(lines 1916 1934) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,248 INFO L853 garLoopResultBuilder]: At program point L1929-1(lines 1916 1934) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,248 INFO L853 garLoopResultBuilder]: At program point L1929-2(lines 1916 1934) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,248 INFO L853 garLoopResultBuilder]: At program point L1929-3(lines 1916 1934) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,248 INFO L860 garLoopResultBuilder]: At program point L1929-4(lines 1916 1934) the Hoare annotation is: true [2021-10-28 23:32:28,248 INFO L860 garLoopResultBuilder]: At program point L1929-5(lines 1916 1934) the Hoare annotation is: true [2021-10-28 23:32:28,248 INFO L857 garLoopResultBuilder]: For program point L1005(lines 1005 1017) no Hoare annotation was computed. [2021-10-28 23:32:28,249 INFO L857 garLoopResultBuilder]: For program point L1005-2(lines 1005 1017) no Hoare annotation was computed. [2021-10-28 23:32:28,249 INFO L857 garLoopResultBuilder]: For program point L1534(lines 1534 1545) no Hoare annotation was computed. [2021-10-28 23:32:28,249 INFO L857 garLoopResultBuilder]: For program point L1534-1(lines 1534 1545) no Hoare annotation was computed. [2021-10-28 23:32:28,249 INFO L857 garLoopResultBuilder]: For program point L1534-2(lines 1534 1545) no Hoare annotation was computed. [2021-10-28 23:32:28,249 INFO L857 garLoopResultBuilder]: For program point L1534-3(lines 1534 1545) no Hoare annotation was computed. [2021-10-28 23:32:28,249 INFO L857 garLoopResultBuilder]: For program point L1534-4(lines 1534 1545) no Hoare annotation was computed. [2021-10-28 23:32:28,249 INFO L857 garLoopResultBuilder]: For program point L1534-5(lines 1534 1545) no Hoare annotation was computed. [2021-10-28 23:32:28,250 INFO L857 garLoopResultBuilder]: For program point L874(lines 874 882) no Hoare annotation was computed. [2021-10-28 23:32:28,250 INFO L857 garLoopResultBuilder]: For program point L2460(lines 2460 2464) no Hoare annotation was computed. [2021-10-28 23:32:28,250 INFO L857 garLoopResultBuilder]: For program point L1008(lines 1008 1016) no Hoare annotation was computed. [2021-10-28 23:32:28,250 INFO L857 garLoopResultBuilder]: For program point L1008-2(lines 1008 1016) no Hoare annotation was computed. [2021-10-28 23:32:28,250 INFO L857 garLoopResultBuilder]: For program point L877(lines 877 881) no Hoare annotation was computed. [2021-10-28 23:32:28,250 INFO L857 garLoopResultBuilder]: For program point L1538(lines 1538 1544) no Hoare annotation was computed. [2021-10-28 23:32:28,250 INFO L857 garLoopResultBuilder]: For program point L1538-1(lines 1538 1544) no Hoare annotation was computed. [2021-10-28 23:32:28,251 INFO L857 garLoopResultBuilder]: For program point L1538-2(lines 1538 1544) no Hoare annotation was computed. [2021-10-28 23:32:28,251 INFO L857 garLoopResultBuilder]: For program point L1538-3(lines 1538 1544) no Hoare annotation was computed. [2021-10-28 23:32:28,251 INFO L857 garLoopResultBuilder]: For program point L1538-4(lines 1538 1544) no Hoare annotation was computed. [2021-10-28 23:32:28,251 INFO L857 garLoopResultBuilder]: For program point L1538-5(lines 1538 1544) no Hoare annotation was computed. [2021-10-28 23:32:28,251 INFO L853 garLoopResultBuilder]: At program point L85(lines 1 2659) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (not (= ~rjh~0 1)) (= ~__ste_client_forwardReceiver1~0 0) (not (= ~__ste_email_to0~0 1))) [2021-10-28 23:32:28,251 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-10-28 23:32:28,252 INFO L857 garLoopResultBuilder]: For program point L1011(lines 1011 1015) no Hoare annotation was computed. [2021-10-28 23:32:28,252 INFO L857 garLoopResultBuilder]: For program point L1011-3(lines 1011 1015) no Hoare annotation was computed. [2021-10-28 23:32:28,252 INFO L853 garLoopResultBuilder]: At program point L2466(lines 2456 2491) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 23:32:28,252 INFO L853 garLoopResultBuilder]: At program point L1543(lines 1526 1549) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg)) (.cse1 (= ULTIMATE.start_sendEmail_~sender 1)) (.cse2 (= ULTIMATE.start_setClientId_~handle 3)) (.cse3 (= ULTIMATE.start_getEmailTo_~handle 1)) (.cse4 (= |ULTIMATE.start_createEmail_#res| 1)) (.cse5 (= 1 ULTIMATE.start_getClientAddressBookSize_~handle)) (.cse6 (= 2 ULTIMATE.start_createEmail_~to)) (.cse7 (= ~bob~0 1)) (.cse8 (= ~rjh~0 2)) (.cse9 (= ULTIMATE.start_createEmail_~msg~0 1)) (.cse10 (= ULTIMATE.start_outgoing_~msg 1))) (or (and .cse0 (= 2 |ULTIMATE.start_getEmailTo_#res|) .cse1 .cse2 .cse3 .cse4 (= ~__ste_email_to0~0 2) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= ULTIMATE.start_setEmailTo_~handle 1) .cse7 .cse8 .cse9 .cse10))) [2021-10-28 23:32:28,252 INFO L857 garLoopResultBuilder]: For program point L486(line 486) no Hoare annotation was computed. [2021-10-28 23:32:28,252 INFO L853 garLoopResultBuilder]: At program point L1543-1(lines 1526 1549) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,253 INFO L857 garLoopResultBuilder]: For program point L486-1(line 486) no Hoare annotation was computed. [2021-10-28 23:32:28,253 INFO L853 garLoopResultBuilder]: At program point L1543-2(lines 1526 1549) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= ~__ste_email_to0~0 2) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= ULTIMATE.start_setEmailTo_~value 2) (= 2 ULTIMATE.start_createEmail_~to) (= ULTIMATE.start_setEmailTo_~handle 1) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1)) [2021-10-28 23:32:28,253 INFO L857 garLoopResultBuilder]: For program point L486-2(line 486) no Hoare annotation was computed. [2021-10-28 23:32:28,253 INFO L853 garLoopResultBuilder]: At program point L1543-3(lines 1526 1549) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,253 INFO L857 garLoopResultBuilder]: For program point L486-3(line 486) no Hoare annotation was computed. [2021-10-28 23:32:28,253 INFO L853 garLoopResultBuilder]: At program point L1543-4(lines 1526 1549) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,254 INFO L857 garLoopResultBuilder]: For program point L486-4(line 486) no Hoare annotation was computed. [2021-10-28 23:32:28,254 INFO L853 garLoopResultBuilder]: At program point L1543-5(lines 1526 1549) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1)) [2021-10-28 23:32:28,254 INFO L857 garLoopResultBuilder]: For program point L486-5(line 486) no Hoare annotation was computed. [2021-10-28 23:32:28,254 INFO L853 garLoopResultBuilder]: At program point L487(lines 2289 2306) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,254 INFO L853 garLoopResultBuilder]: At program point L487-1(lines 2289 2306) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,254 INFO L853 garLoopResultBuilder]: At program point L487-2(lines 2289 2306) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__AutoResponder_~msg) (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= ULTIMATE.start_getEmailTo_~handle 1) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 1 ULTIMATE.start_getClientAddressBookSize_~handle) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_outgoing_~size~2 0) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start_outgoing_~msg 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,255 INFO L853 garLoopResultBuilder]: At program point L487-3(lines 2289 2306) the Hoare annotation is: (and (= ULTIMATE.start_sendEmail_~sender 1) (= ULTIMATE.start_setClientId_~handle 3) (= |ULTIMATE.start_createEmail_#res| 1) (= |ULTIMATE.start_isReadable_#res| 1) (= 2 ULTIMATE.start_createEmail_~to) (= ~bob~0 1) (= ~rjh~0 2) (= ULTIMATE.start_createEmail_~msg~0 1) (= ULTIMATE.start___utac_acc__DecryptForward_spec__1_~tmp~14 1)) [2021-10-28 23:32:28,255 INFO L860 garLoopResultBuilder]: At program point L487-4(lines 2289 2306) the Hoare annotation is: true [2021-10-28 23:32:28,255 INFO L860 garLoopResultBuilder]: At program point L487-5(lines 2289 2306) the Hoare annotation is: true [2021-10-28 23:32:28,255 INFO L857 garLoopResultBuilder]: For program point L885(lines 885 901) no Hoare annotation was computed. [2021-10-28 23:32:28,255 INFO L853 garLoopResultBuilder]: At program point L885-1(lines 851 906) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 23:32:28,255 INFO L853 garLoopResultBuilder]: At program point L2603(lines 2583 2605) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle 3) (= ~__ste_ClientAddressBook_size0~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~rjh~0 2) (not (= ~__ste_email_to0~0 1))) [2021-10-28 23:32:28,256 INFO L857 garLoopResultBuilder]: For program point L2471(lines 2471 2475) no Hoare annotation was computed. [2021-10-28 23:32:28,256 INFO L853 garLoopResultBuilder]: At program point L93(lines 88 96) the Hoare annotation is: (and (= ~__ste_ClientAddressBook_size0~0 0) (not (= ~rjh~0 1)) (= ~__ste_client_forwardReceiver1~0 0) (not (= ~__ste_email_to0~0 1))) [2021-10-28 23:32:28,256 INFO L857 garLoopResultBuilder]: For program point L886(lines 886 898) no Hoare annotation was computed. [2021-10-28 23:32:28,256 INFO L857 garLoopResultBuilder]: For program point L1019(lines 1019 1035) no Hoare annotation was computed. [2021-10-28 23:32:28,256 INFO L853 garLoopResultBuilder]: At program point L1019-1(lines 985 1040) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 23:32:28,256 INFO L857 garLoopResultBuilder]: For program point L1019-2(lines 1019 1035) no Hoare annotation was computed. [2021-10-28 23:32:28,257 INFO L853 garLoopResultBuilder]: At program point L1019-3(lines 1 2659) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 23:32:28,257 INFO L857 garLoopResultBuilder]: For program point L1020(lines 1020 1032) no Hoare annotation was computed. [2021-10-28 23:32:28,257 INFO L857 garLoopResultBuilder]: For program point L1020-2(lines 1020 1032) no Hoare annotation was computed. [2021-10-28 23:32:28,257 INFO L857 garLoopResultBuilder]: For program point L889(lines 889 897) no Hoare annotation was computed. [2021-10-28 23:32:28,257 INFO L857 garLoopResultBuilder]: For program point L1023(lines 1023 1031) no Hoare annotation was computed. [2021-10-28 23:32:28,257 INFO L857 garLoopResultBuilder]: For program point L1023-2(lines 1023 1031) no Hoare annotation was computed. [2021-10-28 23:32:28,258 INFO L853 garLoopResultBuilder]: At program point L2477(lines 2467 2490) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_test_~op2~0 0)) (.cse6 (= ULTIMATE.start_test_~op1~0 0)) (.cse0 (= ULTIMATE.start_setClientId_~handle 3)) (.cse1 (= ~bob~0 1)) (.cse2 (= ~rjh~0 2)) (.cse3 (= ULTIMATE.start_test_~op1~0 1)) (.cse4 (not (= ~__ste_email_to0~0 1))) (.cse7 (not (= ULTIMATE.start_setClientAutoResponse_~handle 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse7))) [2021-10-28 23:32:28,258 INFO L857 garLoopResultBuilder]: For program point L892(lines 892 896) no Hoare annotation was computed. [2021-10-28 23:32:28,258 INFO L857 garLoopResultBuilder]: For program point L1554(lines 1554 1566) no Hoare annotation was computed. [2021-10-28 23:32:28,258 INFO L857 garLoopResultBuilder]: For program point L1554-2(lines 1554 1566) no Hoare annotation was computed. [2021-10-28 23:32:28,258 INFO L857 garLoopResultBuilder]: For program point L1554-4(lines 1554 1566) no Hoare annotation was computed. [2021-10-28 23:32:28,258 INFO L857 garLoopResultBuilder]: For program point L1026(lines 1026 1030) no Hoare annotation was computed. [2021-10-28 23:32:28,261 INFO L731 BasicCegarLoop]: Path program histogram: [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 23:32:28,263 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-10-28 23:32:28,351 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.10 11:32:28 BoogieIcfgContainer [2021-10-28 23:32:28,352 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-10-28 23:32:28,352 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-10-28 23:32:28,353 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-10-28 23:32:28,353 INFO L275 PluginConnector]: Witness Printer initialized [2021-10-28 23:32:28,353 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.10 11:31:10" (3/4) ... [2021-10-28 23:32:28,356 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-10-28 23:32:28,401 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 208 nodes and edges [2021-10-28 23:32:28,407 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 114 nodes and edges [2021-10-28 23:32:28,412 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-10-28 23:32:28,417 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2021-10-28 23:32:28,422 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-10-28 23:32:28,427 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-10-28 23:32:28,461 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,462 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,462 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,463 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-28 23:32:28,463 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,463 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-28 23:32:28,464 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,464 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-28 23:32:28,465 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || ((((((((((sender == 1 && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-28 23:32:28,465 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-28 23:32:28,465 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client [2021-10-28 23:32:28,465 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-28 23:32:28,466 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client [2021-10-28 23:32:28,466 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) [2021-10-28 23:32:28,466 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) || (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && 2 == handle) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) [2021-10-28 23:32:28,467 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-28 23:32:28,467 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,467 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client [2021-10-28 23:32:28,467 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-28 23:32:28,467 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,468 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) [2021-10-28 23:32:28,468 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) [2021-10-28 23:32:28,468 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,468 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) [2021-10-28 23:32:28,468 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 [2021-10-28 23:32:28,469 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,469 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,469 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,469 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,470 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,470 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) [2021-10-28 23:32:28,470 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,470 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,470 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,471 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,471 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,471 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,471 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,472 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,472 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,472 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-10-28 23:32:28,472 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,472 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,472 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,473 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-10-28 23:32:28,473 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,473 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,473 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,474 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-28 23:32:28,474 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,474 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,474 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,475 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,475 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,475 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,475 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,475 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) || ((((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) [2021-10-28 23:32:28,476 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,476 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,476 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-28 23:32:28,476 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,477 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,477 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-28 23:32:28,477 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,477 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) || (((((((((sender == 1 && handle == 3) && !(rjh == 1)) && \result == 1) && 2 == to) && !(to == 1)) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-28 23:32:28,477 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,478 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,478 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,478 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-28 23:32:28,478 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,478 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-10-28 23:32:28,479 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,479 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,479 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) [2021-10-28 23:32:28,479 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,480 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,480 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,480 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 [2021-10-28 23:32:28,480 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 [2021-10-28 23:32:28,480 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,481 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,481 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,481 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,481 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,481 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,482 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,482 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,482 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,483 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,483 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,483 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,483 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,483 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,484 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,484 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,484 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,484 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) [2021-10-28 23:32:28,485 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,485 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,485 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,485 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-28 23:32:28,485 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,486 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-28 23:32:28,486 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-28 23:32:28,486 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,486 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) [2021-10-28 23:32:28,486 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 [2021-10-28 23:32:28,487 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-28 23:32:28,487 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,487 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) [2021-10-28 23:32:28,487 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 [2021-10-28 23:32:28,693 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/witness.graphml [2021-10-28 23:32:28,694 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-10-28 23:32:28,695 INFO L168 Benchmark]: Toolchain (without parser) took 81776.60 ms. Allocated memory was 94.4 MB in the beginning and 1.3 GB in the end (delta: 1.3 GB). Free memory was 58.0 MB in the beginning and 716.9 MB in the end (delta: -658.8 MB). Peak memory consumption was 594.8 MB. Max. memory is 16.1 GB. [2021-10-28 23:32:28,696 INFO L168 Benchmark]: CDTParser took 0.26 ms. Allocated memory is still 94.4 MB. Free memory was 66.2 MB in the beginning and 66.2 MB in the end (delta: 21.4 kB). There was no memory consumed. Max. memory is 16.1 GB. [2021-10-28 23:32:28,697 INFO L168 Benchmark]: CACSL2BoogieTranslator took 811.17 ms. Allocated memory is still 94.4 MB. Free memory was 57.8 MB in the beginning and 44.3 MB in the end (delta: 13.5 MB). Peak memory consumption was 12.6 MB. Max. memory is 16.1 GB. [2021-10-28 23:32:28,697 INFO L168 Benchmark]: Boogie Procedure Inliner took 174.40 ms. Allocated memory was 94.4 MB in the beginning and 113.2 MB in the end (delta: 18.9 MB). Free memory was 44.3 MB in the beginning and 82.9 MB in the end (delta: -38.7 MB). Peak memory consumption was 15.1 MB. Max. memory is 16.1 GB. [2021-10-28 23:32:28,698 INFO L168 Benchmark]: Boogie Preprocessor took 109.41 ms. Allocated memory is still 113.2 MB. Free memory was 82.9 MB in the beginning and 75.4 MB in the end (delta: 7.6 MB). Peak memory consumption was 8.4 MB. Max. memory is 16.1 GB. [2021-10-28 23:32:28,698 INFO L168 Benchmark]: RCFGBuilder took 2285.34 ms. Allocated memory is still 113.2 MB. Free memory was 75.4 MB in the beginning and 74.8 MB in the end (delta: 596.2 kB). Peak memory consumption was 51.2 MB. Max. memory is 16.1 GB. [2021-10-28 23:32:28,698 INFO L168 Benchmark]: TraceAbstraction took 78047.43 ms. Allocated memory was 113.2 MB in the beginning and 1.3 GB in the end (delta: 1.2 GB). Free memory was 74.0 MB in the beginning and 763.5 MB in the end (delta: -689.5 MB). Peak memory consumption was 862.8 MB. Max. memory is 16.1 GB. [2021-10-28 23:32:28,699 INFO L168 Benchmark]: Witness Printer took 341.39 ms. Allocated memory is still 1.3 GB. Free memory was 763.5 MB in the beginning and 716.9 MB in the end (delta: 46.6 MB). Peak memory consumption was 46.1 MB. Max. memory is 16.1 GB. [2021-10-28 23:32:28,701 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26 ms. Allocated memory is still 94.4 MB. Free memory was 66.2 MB in the beginning and 66.2 MB in the end (delta: 21.4 kB). There was no memory consumed. Max. memory is 16.1 GB. * CACSL2BoogieTranslator took 811.17 ms. Allocated memory is still 94.4 MB. Free memory was 57.8 MB in the beginning and 44.3 MB in the end (delta: 13.5 MB). Peak memory consumption was 12.6 MB. Max. memory is 16.1 GB. * Boogie Procedure Inliner took 174.40 ms. Allocated memory was 94.4 MB in the beginning and 113.2 MB in the end (delta: 18.9 MB). Free memory was 44.3 MB in the beginning and 82.9 MB in the end (delta: -38.7 MB). Peak memory consumption was 15.1 MB. Max. memory is 16.1 GB. * Boogie Preprocessor took 109.41 ms. Allocated memory is still 113.2 MB. Free memory was 82.9 MB in the beginning and 75.4 MB in the end (delta: 7.6 MB). Peak memory consumption was 8.4 MB. Max. memory is 16.1 GB. * RCFGBuilder took 2285.34 ms. Allocated memory is still 113.2 MB. Free memory was 75.4 MB in the beginning and 74.8 MB in the end (delta: 596.2 kB). Peak memory consumption was 51.2 MB. Max. memory is 16.1 GB. * TraceAbstraction took 78047.43 ms. Allocated memory was 113.2 MB in the beginning and 1.3 GB in the end (delta: 1.2 GB). Free memory was 74.0 MB in the beginning and 763.5 MB in the end (delta: -689.5 MB). Peak memory consumption was 862.8 MB. Max. memory is 16.1 GB. * Witness Printer took 341.39 ms. Allocated memory is still 1.3 GB. Free memory was 763.5 MB in the beginning and 716.9 MB in the end (delta: 46.6 MB). Peak memory consumption was 46.1 MB. Max. memory is 16.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 486]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 477 locations, 6 error locations. Started 1 CEGAR loops. OverallTime: 77.8s, OverallIterations: 21, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 11.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 59.6s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 22811 SDtfs, 35759 SDslu, 46310 SDs, 0 SdLazy, 3484 SolverSat, 381 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 3.5s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 236 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 146 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 628 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=10744occurred in iteration=20, InterpolantAutomatonStates: 155, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 3.5s AutomataMinimizationTime, 21 MinimizatonAttempts, 17689 StatesRemovedByMinimization, 19 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 151 LocationsWithAnnotation, 151 PreInvPairs, 3090 NumberOfFragments, 5966 HoareAnnotationTreeSize, 151 FomulaSimplifications, 6277953389 FormulaSimplificationTreeSizeReduction, 19.3s HoareSimplificationTime, 151 FomulaSimplificationsInter, 10700861 FormulaSimplificationTreeSizeReductionInter, 40.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.7s SatisfiabilityAnalysisTime, 1.4s InterpolantComputationTime, 1260 NumberOfCodeBlocks, 1260 NumberOfCodeBlocksAsserted, 22 NumberOfCheckSat, 1238 ConstructedInterpolants, 0 QuantifiedInterpolants, 2082 SizeOfPredicates, 0 NumberOfNonLiveVariables, 802 ConjunctsInSsa, 3 ConjunctsInUnsatCore, 22 InterpolantComputations, 20 PerfectInterpolantSequences, 129/133 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 6 specifications checked. All of them hold - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1859]: Loop Invariant Derived loop invariant: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((__ste_ClientAddressBook_size0 == 0 && bob == 1) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && !(__ste_email_to0 == 1)) && handle == 2 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client - InvariantResult [Line: 1826]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 635]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2395]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1044]: Loop Invariant Derived loop invariant: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((handle == 3 && __ste_ClientAddressBook_size0 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && !(__ste_email_to0 == 1) - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 1526]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1044]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1671]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2359]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1916]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2351]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1479]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1626]: Loop Invariant Derived loop invariant: ((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 88]: Loop Invariant Derived loop invariant: ((__ste_ClientAddressBook_size0 == 0 && !(rjh == 1)) && __ste_client_forwardReceiver1 == 0) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) - InvariantResult [Line: 1580]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((__ste_ClientAddressBook_size0 == 0 && !(rjh == 1)) && __ste_client_forwardReceiver1 == 0) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1916]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1916]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2606]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1479]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1916]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && 2 == to) && bob == 1) && rjh == 2) && !(__ste_email_to0 == 1)) && msg == 1 - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1580]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 659]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1817]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1580]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 2456]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((__ste_ClientAddressBook_size0 == 0 && !(rjh == 1)) && bob == 1) && __ste_client_forwardReceiver1 == 0) && !(__ste_email_to0 == 1) - InvariantResult [Line: 2406]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1916]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1580]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 1044]: Loop Invariant Derived loop invariant: (((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1794]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2616]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2350]: Loop Invariant Derived loop invariant: ((handle == 3 && bob == 1) && rjh == 2) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1044]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || ((((((((2 == \result && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && tmp == 1 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) || ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((((((((2 == \result && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || ((((((((((sender == 1 && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1479]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0) && !(handle == 1)) || ((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) && !(handle == 1)) - InvariantResult [Line: 1526]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) || (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1044]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1916]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && __ste_email_to0 == 2) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && !(client == 1)) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1526]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1740]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2583]: Loop Invariant Derived loop invariant: ((((handle == 3 && __ste_ClientAddressBook_size0 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && !(__ste_email_to0 == 1) - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1580]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 2384]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1835]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1479]: Loop Invariant Derived loop invariant: (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) || (((((((((sender == 1 && handle == 3) && !(rjh == 1)) && \result == 1) && 2 == to) && !(to == 1)) && bob == 1) && rjh == 2) && size == 0) && msg == 1) - InvariantResult [Line: 1479]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((handle == 3 && !(rjh == 1)) && \result == 1) && !(to == 1)) && msg == 1) && \result == 0) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1671]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1526]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) || (((((((2 == \result && handle == 3) && \result == 1) && 2 == to) && __ste_client_forwardReceiver1 == 0) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 2442]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1580]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1953]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1 - InvariantResult [Line: 1044]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: (((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: (((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 1972]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 2431]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 2289]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) && tmp == 1 - InvariantResult [Line: 1990]: Loop Invariant Derived loop invariant: ((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1 - InvariantResult [Line: 1526]: Loop Invariant Derived loop invariant: ((((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2370]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1608]: Loop Invariant Derived loop invariant: ((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && \result == 1) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 851]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1526]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) || (((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((sender == 1 && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && size == 0) && msg == 1) || ((((((((((2 == \result && !(client == 1)) && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 2 == to) && __ste_client_forwardReceiver1 == 0) && 2 == handle) && rjh == 2) && msg == 1) && 2 == client) - InvariantResult [Line: 2009]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 635]: Loop Invariant Derived loop invariant: ((((((((((sender == 1 && handle == 3) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && value == 2) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && msg == 1) && msg == 1 - InvariantResult [Line: 2417]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) - InvariantResult [Line: 1859]: Loop Invariant Derived loop invariant: ((((((1 == msg && sender == 1) && handle == 3) && \result == 1) && 2 == to) && bob == 1) && rjh == 2) && msg == 1 - InvariantResult [Line: 1479]: Loop Invariant Derived loop invariant: ((((((((((((1 == msg && sender == 1) && handle == 3) && handle == 1) && \result == 1) && 1 == handle) && 2 == to) && handle == 1) && bob == 1) && rjh == 2) && size == 0) && msg == 1) && msg == 1) || (((((((((((((((1 == msg && 2 == \result) && sender == 1) && handle == 3) && handle == 1) && \result == 1) && __ste_email_to0 == 2) && 1 == handle) && 2 == to) && bob == 1) && 2 == handle) && rjh == 2) && size == 0) && msg == 1) && msg == 1) && 2 == client) - InvariantResult [Line: 2467]: Loop Invariant Derived loop invariant: (((((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && op2 == 0) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && op2 == 0)) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 0) && !(__ste_email_to0 == 1)) && !(handle == 1))) || (((((handle == 3 && bob == 1) && rjh == 2) && op1 == 1) && !(__ste_email_to0 == 1)) && !(handle == 1)) RESULT: Ultimate proved your program to be correct! [2021-10-28 23:32:28,831 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7a46ec0f-0175-4625-bcd8-c8fdb62f2ed2/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...