./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/email_spec11_product07.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/email_spec11_product07.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ca488828ecb96ea32a61c8f7cc33f9cc148887f4e62691829b51b0a2976db03e --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-03 02:40:53,523 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-03 02:40:53,526 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-03 02:40:53,582 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-03 02:40:53,582 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-03 02:40:53,586 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-03 02:40:53,589 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-03 02:40:53,595 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-03 02:40:53,600 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-03 02:40:53,603 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-03 02:40:53,605 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-03 02:40:53,608 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-03 02:40:53,608 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-03 02:40:53,614 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-03 02:40:53,615 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-03 02:40:53,617 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-03 02:40:53,619 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-03 02:40:53,620 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-03 02:40:53,623 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-03 02:40:53,627 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-03 02:40:53,629 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-03 02:40:53,630 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-03 02:40:53,633 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-03 02:40:53,634 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-03 02:40:53,638 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-03 02:40:53,638 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-03 02:40:53,638 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-03 02:40:53,639 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-03 02:40:53,640 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-03 02:40:53,641 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-03 02:40:53,641 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-03 02:40:53,642 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-03 02:40:53,650 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-03 02:40:53,652 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-03 02:40:53,654 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-03 02:40:53,655 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-03 02:40:53,655 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-03 02:40:53,656 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-03 02:40:53,656 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-03 02:40:53,657 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-03 02:40:53,657 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-03 02:40:53,658 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-03 02:40:53,706 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-03 02:40:53,706 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-03 02:40:53,707 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-03 02:40:53,707 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-03 02:40:53,708 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-03 02:40:53,709 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-03 02:40:53,709 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-03 02:40:53,709 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-03 02:40:53,710 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-03 02:40:53,710 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-03 02:40:53,711 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-03 02:40:53,711 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-03 02:40:53,712 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-03 02:40:53,712 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-03 02:40:53,712 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-03 02:40:53,712 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-03 02:40:53,713 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-03 02:40:53,713 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-03 02:40:53,714 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-03 02:40:53,714 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-03 02:40:53,714 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-03 02:40:53,714 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-03 02:40:53,715 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-03 02:40:53,716 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-03 02:40:53,717 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-03 02:40:53,717 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-03 02:40:53,717 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-03 02:40:53,718 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-03 02:40:53,718 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-03 02:40:53,718 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-03 02:40:53,718 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-03 02:40:53,719 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-03 02:40:53,719 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:40:53,719 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-03 02:40:53,720 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-03 02:40:53,720 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-03 02:40:53,720 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-03 02:40:53,720 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-03 02:40:53,720 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-03 02:40:53,721 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-03 02:40:53,721 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-03 02:40:53,721 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ca488828ecb96ea32a61c8f7cc33f9cc148887f4e62691829b51b0a2976db03e [2022-11-03 02:40:54,068 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-03 02:40:54,108 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-03 02:40:54,111 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-03 02:40:54,113 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-03 02:40:54,114 INFO L275 PluginConnector]: CDTParser initialized [2022-11-03 02:40:54,115 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/../../sv-benchmarks/c/product-lines/email_spec11_product07.cil.c [2022-11-03 02:40:54,197 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/data/849be9e71/2470efb1e08c4014951a97c5d08fbbb7/FLAG55b42d781 [2022-11-03 02:40:54,921 INFO L306 CDTParser]: Found 1 translation units. [2022-11-03 02:40:54,922 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/sv-benchmarks/c/product-lines/email_spec11_product07.cil.c [2022-11-03 02:40:54,943 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/data/849be9e71/2470efb1e08c4014951a97c5d08fbbb7/FLAG55b42d781 [2022-11-03 02:40:55,142 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/data/849be9e71/2470efb1e08c4014951a97c5d08fbbb7 [2022-11-03 02:40:55,145 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-03 02:40:55,147 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-03 02:40:55,149 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-03 02:40:55,149 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-03 02:40:55,156 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-03 02:40:55,157 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:40:55" (1/1) ... [2022-11-03 02:40:55,159 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@673929aa and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:40:55, skipping insertion in model container [2022-11-03 02:40:55,160 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 03.11 02:40:55" (1/1) ... [2022-11-03 02:40:55,168 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-03 02:40:55,266 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-03 02:40:55,867 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/sv-benchmarks/c/product-lines/email_spec11_product07.cil.c[47468,47481] [2022-11-03 02:40:55,950 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:40:55,970 INFO L203 MainTranslator]: Completed pre-run [2022-11-03 02:40:56,108 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/sv-benchmarks/c/product-lines/email_spec11_product07.cil.c[47468,47481] [2022-11-03 02:40:56,128 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-03 02:40:56,169 INFO L208 MainTranslator]: Completed translation [2022-11-03 02:40:56,169 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:40:56 WrapperNode [2022-11-03 02:40:56,170 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-03 02:40:56,170 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-03 02:40:56,170 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-03 02:40:56,171 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-03 02:40:56,178 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:40:56" (1/1) ... [2022-11-03 02:40:56,206 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:40:56" (1/1) ... [2022-11-03 02:40:56,284 INFO L138 Inliner]: procedures = 110, calls = 144, calls flagged for inlining = 36, calls inlined = 30, statements flattened = 601 [2022-11-03 02:40:56,285 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-03 02:40:56,285 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-03 02:40:56,286 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-03 02:40:56,286 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-03 02:40:56,306 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:40:56" (1/1) ... [2022-11-03 02:40:56,306 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:40:56" (1/1) ... [2022-11-03 02:40:56,323 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:40:56" (1/1) ... [2022-11-03 02:40:56,329 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:40:56" (1/1) ... [2022-11-03 02:40:56,342 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:40:56" (1/1) ... [2022-11-03 02:40:56,366 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:40:56" (1/1) ... [2022-11-03 02:40:56,390 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:40:56" (1/1) ... [2022-11-03 02:40:56,393 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:40:56" (1/1) ... [2022-11-03 02:40:56,398 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-03 02:40:56,399 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-03 02:40:56,399 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-03 02:40:56,399 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-03 02:40:56,400 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:40:56" (1/1) ... [2022-11-03 02:40:56,415 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-03 02:40:56,425 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:40:56,439 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-03 02:40:56,444 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-03 02:40:56,502 INFO L130 BoogieDeclarations]: Found specification of procedure getClientAddressBookSize [2022-11-03 02:40:56,503 INFO L138 BoogieDeclarations]: Found implementation of procedure getClientAddressBookSize [2022-11-03 02:40:56,503 INFO L130 BoogieDeclarations]: Found specification of procedure setClientAddressBookAddress [2022-11-03 02:40:56,504 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientAddressBookAddress [2022-11-03 02:40:56,504 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailTo [2022-11-03 02:40:56,504 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailTo [2022-11-03 02:40:56,504 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing__wrappee__AutoResponder [2022-11-03 02:40:56,504 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing__wrappee__AutoResponder [2022-11-03 02:40:56,504 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailFrom [2022-11-03 02:40:56,505 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailFrom [2022-11-03 02:40:56,505 INFO L130 BoogieDeclarations]: Found specification of procedure isReadable [2022-11-03 02:40:56,505 INFO L138 BoogieDeclarations]: Found implementation of procedure isReadable [2022-11-03 02:40:56,505 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2022-11-03 02:40:56,505 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailFrom [2022-11-03 02:40:56,506 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailFrom [2022-11-03 02:40:56,506 INFO L130 BoogieDeclarations]: Found specification of procedure setClientId [2022-11-03 02:40:56,507 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientId [2022-11-03 02:40:56,507 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-03 02:40:56,507 INFO L130 BoogieDeclarations]: Found specification of procedure setClientAddressBookSize [2022-11-03 02:40:56,508 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientAddressBookSize [2022-11-03 02:40:56,508 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing [2022-11-03 02:40:56,508 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing [2022-11-03 02:40:56,508 INFO L130 BoogieDeclarations]: Found specification of procedure sendEmail [2022-11-03 02:40:56,508 INFO L138 BoogieDeclarations]: Found implementation of procedure sendEmail [2022-11-03 02:40:56,508 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailTo [2022-11-03 02:40:56,508 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailTo [2022-11-03 02:40:56,509 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-03 02:40:56,509 INFO L130 BoogieDeclarations]: Found specification of procedure getClientAddressBookAddress [2022-11-03 02:40:56,509 INFO L138 BoogieDeclarations]: Found implementation of procedure getClientAddressBookAddress [2022-11-03 02:40:56,509 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-03 02:40:56,509 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-03 02:40:56,804 INFO L235 CfgBuilder]: Building ICFG [2022-11-03 02:40:56,806 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-03 02:40:57,494 INFO L276 CfgBuilder]: Performing block encoding [2022-11-03 02:40:57,876 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-03 02:40:57,876 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-11-03 02:40:57,879 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:40:57 BoogieIcfgContainer [2022-11-03 02:40:57,879 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-03 02:40:57,882 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-03 02:40:57,882 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-03 02:40:57,886 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-03 02:40:57,886 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 03.11 02:40:55" (1/3) ... [2022-11-03 02:40:57,887 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@34767a34 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:40:57, skipping insertion in model container [2022-11-03 02:40:57,887 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 03.11 02:40:56" (2/3) ... [2022-11-03 02:40:57,888 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@34767a34 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 03.11 02:40:57, skipping insertion in model container [2022-11-03 02:40:57,888 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:40:57" (3/3) ... [2022-11-03 02:40:57,890 INFO L112 eAbstractionObserver]: Analyzing ICFG email_spec11_product07.cil.c [2022-11-03 02:40:57,911 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-03 02:40:57,912 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-03 02:40:57,980 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-03 02:40:57,997 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5ea306f6, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-03 02:40:58,001 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-03 02:40:58,007 INFO L276 IsEmpty]: Start isEmpty. Operand has 107 states, 67 states have (on average 1.4477611940298507) internal successors, (97), 70 states have internal predecessors, (97), 25 states have call successors, (25), 13 states have call predecessors, (25), 13 states have return successors, (25), 24 states have call predecessors, (25), 25 states have call successors, (25) [2022-11-03 02:40:58,022 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-03 02:40:58,023 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:40:58,024 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:40:58,025 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:40:58,034 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:40:58,034 INFO L85 PathProgramCache]: Analyzing trace with hash -2044846263, now seen corresponding path program 1 times [2022-11-03 02:40:58,046 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:40:58,048 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [914114062] [2022-11-03 02:40:58,048 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:40:58,049 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:40:58,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:40:58,537 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 02:40:58,538 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:40:58,538 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [914114062] [2022-11-03 02:40:58,539 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [914114062] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:40:58,539 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:40:58,540 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-03 02:40:58,542 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [952870776] [2022-11-03 02:40:58,543 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:40:58,549 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-03 02:40:58,550 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:40:58,589 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-03 02:40:58,590 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 02:40:58,595 INFO L87 Difference]: Start difference. First operand has 107 states, 67 states have (on average 1.4477611940298507) internal successors, (97), 70 states have internal predecessors, (97), 25 states have call successors, (25), 13 states have call predecessors, (25), 13 states have return successors, (25), 24 states have call predecessors, (25), 25 states have call successors, (25) Second operand has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-03 02:40:58,735 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:40:58,736 INFO L93 Difference]: Finished difference Result 171 states and 229 transitions. [2022-11-03 02:40:58,737 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-03 02:40:58,738 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 49 [2022-11-03 02:40:58,739 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:40:58,755 INFO L225 Difference]: With dead ends: 171 [2022-11-03 02:40:58,756 INFO L226 Difference]: Without dead ends: 104 [2022-11-03 02:40:58,761 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-03 02:40:58,766 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:40:58,775 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 120 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:40:58,796 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2022-11-03 02:40:58,827 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 104. [2022-11-03 02:40:58,829 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 104 states, 65 states have (on average 1.4) internal successors, (91), 67 states have internal predecessors, (91), 25 states have call successors, (25), 13 states have call predecessors, (25), 13 states have return successors, (24), 23 states have call predecessors, (24), 24 states have call successors, (24) [2022-11-03 02:40:58,831 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 104 states to 104 states and 140 transitions. [2022-11-03 02:40:58,833 INFO L78 Accepts]: Start accepts. Automaton has 104 states and 140 transitions. Word has length 49 [2022-11-03 02:40:58,835 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:40:58,835 INFO L495 AbstractCegarLoop]: Abstraction has 104 states and 140 transitions. [2022-11-03 02:40:58,836 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-03 02:40:58,836 INFO L276 IsEmpty]: Start isEmpty. Operand 104 states and 140 transitions. [2022-11-03 02:40:58,838 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-03 02:40:58,838 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:40:58,839 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:40:58,839 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-03 02:40:58,839 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:40:58,840 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:40:58,840 INFO L85 PathProgramCache]: Analyzing trace with hash -382086431, now seen corresponding path program 1 times [2022-11-03 02:40:58,840 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:40:58,841 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [491624402] [2022-11-03 02:40:58,841 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:40:58,841 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:40:58,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:40:59,148 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 02:40:59,148 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:40:59,149 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [491624402] [2022-11-03 02:40:59,149 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [491624402] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:40:59,150 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:40:59,151 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:40:59,151 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [964961521] [2022-11-03 02:40:59,152 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:40:59,154 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:40:59,161 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:40:59,162 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:40:59,162 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:40:59,162 INFO L87 Difference]: Start difference. First operand 104 states and 140 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-03 02:40:59,320 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:40:59,320 INFO L93 Difference]: Finished difference Result 167 states and 214 transitions. [2022-11-03 02:40:59,322 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:40:59,322 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 50 [2022-11-03 02:40:59,323 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:40:59,325 INFO L225 Difference]: With dead ends: 167 [2022-11-03 02:40:59,326 INFO L226 Difference]: Without dead ends: 106 [2022-11-03 02:40:59,327 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:40:59,328 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 0 mSDsluCounter, 137 mSDsCounter, 0 mSdLazyCounter, 46 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 46 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:40:59,329 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 233 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 46 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:40:59,330 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106 states. [2022-11-03 02:40:59,349 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106 to 106. [2022-11-03 02:40:59,350 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 106 states, 67 states have (on average 1.3880597014925373) internal successors, (93), 69 states have internal predecessors, (93), 25 states have call successors, (25), 13 states have call predecessors, (25), 13 states have return successors, (24), 23 states have call predecessors, (24), 24 states have call successors, (24) [2022-11-03 02:40:59,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106 states to 106 states and 142 transitions. [2022-11-03 02:40:59,356 INFO L78 Accepts]: Start accepts. Automaton has 106 states and 142 transitions. Word has length 50 [2022-11-03 02:40:59,357 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:40:59,358 INFO L495 AbstractCegarLoop]: Abstraction has 106 states and 142 transitions. [2022-11-03 02:40:59,358 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-03 02:40:59,359 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 142 transitions. [2022-11-03 02:40:59,367 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-03 02:40:59,367 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:40:59,368 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:40:59,368 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-03 02:40:59,368 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:40:59,369 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:40:59,369 INFO L85 PathProgramCache]: Analyzing trace with hash -155289936, now seen corresponding path program 1 times [2022-11-03 02:40:59,369 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:40:59,369 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1129924423] [2022-11-03 02:40:59,370 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:40:59,370 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:40:59,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:40:59,527 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 02:40:59,528 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:40:59,528 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1129924423] [2022-11-03 02:40:59,528 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1129924423] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:40:59,528 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1790539494] [2022-11-03 02:40:59,529 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:40:59,529 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:40:59,529 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:40:59,531 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:40:59,544 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-03 02:40:59,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:40:59,973 INFO L263 TraceCheckSpWp]: Trace formula consists of 821 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-03 02:40:59,985 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:41:00,075 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 02:41:00,075 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:41:00,176 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 02:41:00,177 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1790539494] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:41:00,183 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1058064320] [2022-11-03 02:41:00,209 INFO L159 IcfgInterpreter]: Started Sifa with 47 locations of interest [2022-11-03 02:41:00,210 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:41:00,216 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:41:00,222 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:41:00,222 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:41:09,279 INFO L197 IcfgInterpreter]: Interpreting procedure setClientId with input of size 451 for LOIs [2022-11-03 02:41:09,634 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:41:55,866 WARN L234 SmtUtils]: Spent 25.39s on a formula simplification. DAG size of input: 573 DAG size of output: 442 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:42:09,283 WARN L234 SmtUtils]: Spent 12.90s on a formula simplification. DAG size of input: 564 DAG size of output: 375 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:42:10,520 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1058064320] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:42:10,521 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:42:10,521 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [4, 4, 4] total 19 [2022-11-03 02:42:10,522 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1353880497] [2022-11-03 02:42:10,522 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:42:10,523 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-03 02:42:10,523 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:42:10,524 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-03 02:42:10,524 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=58, Invalid=284, Unknown=0, NotChecked=0, Total=342 [2022-11-03 02:42:10,525 INFO L87 Difference]: Start difference. First operand 106 states and 142 transitions. Second operand has 14 states, 10 states have (on average 2.9) internal successors, (29), 9 states have internal predecessors, (29), 4 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) [2022-11-03 02:42:15,952 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:42:15,952 INFO L93 Difference]: Finished difference Result 277 states and 419 transitions. [2022-11-03 02:42:15,952 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-03 02:42:15,953 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 10 states have (on average 2.9) internal successors, (29), 9 states have internal predecessors, (29), 4 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) Word has length 54 [2022-11-03 02:42:15,953 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:42:15,955 INFO L225 Difference]: With dead ends: 277 [2022-11-03 02:42:15,955 INFO L226 Difference]: Without dead ends: 183 [2022-11-03 02:42:15,956 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 147 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 84 ImplicationChecksByTransitivity, 60.9s TimeCoverageRelationStatistics Valid=58, Invalid=284, Unknown=0, NotChecked=0, Total=342 [2022-11-03 02:42:15,957 INFO L413 NwaCegarLoop]: 164 mSDtfsCounter, 102 mSDsluCounter, 1541 mSDsCounter, 0 mSdLazyCounter, 876 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 102 SdHoareTripleChecker+Valid, 1651 SdHoareTripleChecker+Invalid, 889 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 876 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:42:15,958 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [102 Valid, 1651 Invalid, 889 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [13 Valid, 876 Invalid, 0 Unknown, 0 Unchecked, 5.1s Time] [2022-11-03 02:42:15,959 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 183 states. [2022-11-03 02:42:16,041 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 183 to 127. [2022-11-03 02:42:16,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 127 states, 88 states have (on average 1.4204545454545454) internal successors, (125), 90 states have internal predecessors, (125), 25 states have call successors, (25), 13 states have call predecessors, (25), 13 states have return successors, (24), 23 states have call predecessors, (24), 24 states have call successors, (24) [2022-11-03 02:42:16,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 127 states to 127 states and 174 transitions. [2022-11-03 02:42:16,044 INFO L78 Accepts]: Start accepts. Automaton has 127 states and 174 transitions. Word has length 54 [2022-11-03 02:42:16,044 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:42:16,044 INFO L495 AbstractCegarLoop]: Abstraction has 127 states and 174 transitions. [2022-11-03 02:42:16,045 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 10 states have (on average 2.9) internal successors, (29), 9 states have internal predecessors, (29), 4 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) [2022-11-03 02:42:16,045 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 174 transitions. [2022-11-03 02:42:16,046 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-03 02:42:16,046 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:42:16,047 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:42:16,096 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-03 02:42:16,275 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:42:16,275 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:42:16,276 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:42:16,276 INFO L85 PathProgramCache]: Analyzing trace with hash 1543642642, now seen corresponding path program 1 times [2022-11-03 02:42:16,276 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:42:16,276 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [885273904] [2022-11-03 02:42:16,276 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:42:16,277 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:42:16,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:42:16,395 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 02:42:16,395 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:42:16,395 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [885273904] [2022-11-03 02:42:16,396 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [885273904] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:42:16,396 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:42:16,396 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-03 02:42:16,396 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2138552907] [2022-11-03 02:42:16,397 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:42:16,397 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-03 02:42:16,397 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:42:16,398 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-03 02:42:16,398 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:42:16,398 INFO L87 Difference]: Start difference. First operand 127 states and 174 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-03 02:42:16,608 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:42:16,608 INFO L93 Difference]: Finished difference Result 295 states and 421 transitions. [2022-11-03 02:42:16,610 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-03 02:42:16,611 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 55 [2022-11-03 02:42:16,611 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:42:16,613 INFO L225 Difference]: With dead ends: 295 [2022-11-03 02:42:16,613 INFO L226 Difference]: Without dead ends: 182 [2022-11-03 02:42:16,614 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-03 02:42:16,615 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 48 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 49 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:42:16,616 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 233 Invalid, 49 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:42:16,617 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2022-11-03 02:42:16,746 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 177. [2022-11-03 02:42:16,747 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 177 states, 135 states have (on average 1.4962962962962962) internal successors, (202), 137 states have internal predecessors, (202), 28 states have call successors, (28), 13 states have call predecessors, (28), 13 states have return successors, (27), 26 states have call predecessors, (27), 27 states have call successors, (27) [2022-11-03 02:42:16,748 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 177 states to 177 states and 257 transitions. [2022-11-03 02:42:16,748 INFO L78 Accepts]: Start accepts. Automaton has 177 states and 257 transitions. Word has length 55 [2022-11-03 02:42:16,749 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:42:16,749 INFO L495 AbstractCegarLoop]: Abstraction has 177 states and 257 transitions. [2022-11-03 02:42:16,749 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-03 02:42:16,750 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 257 transitions. [2022-11-03 02:42:16,751 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-03 02:42:16,751 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:42:16,751 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:42:16,751 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-03 02:42:16,752 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:42:16,752 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:42:16,752 INFO L85 PathProgramCache]: Analyzing trace with hash 1194737503, now seen corresponding path program 1 times [2022-11-03 02:42:16,752 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:42:16,753 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1549537870] [2022-11-03 02:42:16,753 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:42:16,753 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:42:16,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:42:16,882 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 02:42:16,883 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:42:16,883 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1549537870] [2022-11-03 02:42:16,883 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1549537870] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:42:16,883 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1975132035] [2022-11-03 02:42:16,884 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:42:16,884 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:42:16,884 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:42:16,885 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:42:16,897 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-03 02:42:17,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:42:17,168 INFO L263 TraceCheckSpWp]: Trace formula consists of 838 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-03 02:42:17,172 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:42:17,194 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 02:42:17,195 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:42:17,252 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 02:42:17,252 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1975132035] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:42:17,252 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1618087317] [2022-11-03 02:42:17,256 INFO L159 IcfgInterpreter]: Started Sifa with 49 locations of interest [2022-11-03 02:42:17,256 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:42:17,257 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:42:17,257 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:42:17,257 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:42:35,813 INFO L197 IcfgInterpreter]: Interpreting procedure setClientId with input of size 451 for LOIs [2022-11-03 02:42:36,158 INFO L197 IcfgInterpreter]: Interpreting procedure sendEmail with input of size 465 for LOIs [2022-11-03 02:43:02,153 INFO L197 IcfgInterpreter]: Interpreting procedure setEmailTo with input of size 455 for LOIs [2022-11-03 02:43:02,439 INFO L197 IcfgInterpreter]: Interpreting procedure outgoing with input of size 463 for LOIs [2022-11-03 02:43:06,104 INFO L197 IcfgInterpreter]: Interpreting procedure outgoing__wrappee__AutoResponder with input of size 254 for LOIs [2022-11-03 02:43:09,487 INFO L197 IcfgInterpreter]: Interpreting procedure isReadable with input of size 242 for LOIs [2022-11-03 02:43:09,520 INFO L197 IcfgInterpreter]: Interpreting procedure getEmailTo with input of size 242 for LOIs [2022-11-03 02:43:09,557 INFO L197 IcfgInterpreter]: Interpreting procedure setEmailFrom with input of size 456 for LOIs [2022-11-03 02:43:10,261 INFO L197 IcfgInterpreter]: Interpreting procedure getClientAddressBookSize with input of size 443 for LOIs [2022-11-03 02:43:10,532 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:43:43,242 WARN L234 SmtUtils]: Spent 14.62s on a formula simplification. DAG size of input: 584 DAG size of output: 331 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:43:48,695 WARN L234 SmtUtils]: Spent 5.10s on a formula simplification. DAG size of input: 559 DAG size of output: 320 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:43:56,493 WARN L234 SmtUtils]: Spent 7.41s on a formula simplification. DAG size of input: 559 DAG size of output: 385 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:44:04,273 WARN L234 SmtUtils]: Spent 7.36s on a formula simplification. DAG size of input: 557 DAG size of output: 383 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:44:13,056 WARN L234 SmtUtils]: Spent 7.23s on a formula simplification. DAG size of input: 577 DAG size of output: 384 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:44:49,589 WARN L234 SmtUtils]: Spent 6.14s on a formula simplification. DAG size of input: 503 DAG size of output: 312 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:44:55,565 WARN L234 SmtUtils]: Spent 5.60s on a formula simplification. DAG size of input: 516 DAG size of output: 314 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:45:29,164 WARN L234 SmtUtils]: Spent 5.36s on a formula simplification. DAG size of input: 501 DAG size of output: 338 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:45:41,697 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1618087317] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:45:41,697 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:45:41,697 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [44] imperfect sequences [4, 4, 4] total 50 [2022-11-03 02:45:41,698 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1778443494] [2022-11-03 02:45:41,698 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:45:41,698 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2022-11-03 02:45:41,699 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:45:41,699 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2022-11-03 02:45:41,700 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=143, Invalid=2307, Unknown=0, NotChecked=0, Total=2450 [2022-11-03 02:45:41,700 INFO L87 Difference]: Start difference. First operand 177 states and 257 transitions. Second operand has 45 states, 29 states have (on average 1.0689655172413792) internal successors, (31), 26 states have internal predecessors, (31), 12 states have call successors, (12), 9 states have call predecessors, (12), 6 states have return successors, (9), 9 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-03 02:46:17,581 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:46:17,582 INFO L93 Difference]: Finished difference Result 457 states and 711 transitions. [2022-11-03 02:46:17,582 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-11-03 02:46:17,583 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 29 states have (on average 1.0689655172413792) internal successors, (31), 26 states have internal predecessors, (31), 12 states have call successors, (12), 9 states have call predecessors, (12), 6 states have return successors, (9), 9 states have call predecessors, (9), 9 states have call successors, (9) Word has length 56 [2022-11-03 02:46:17,583 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:46:17,585 INFO L225 Difference]: With dead ends: 457 [2022-11-03 02:46:17,585 INFO L226 Difference]: Without dead ends: 335 [2022-11-03 02:46:17,587 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 178 GetRequests, 121 SyntacticMatches, 1 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 738 ImplicationChecksByTransitivity, 176.4s TimeCoverageRelationStatistics Valid=197, Invalid=3109, Unknown=0, NotChecked=0, Total=3306 [2022-11-03 02:46:17,588 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 192 mSDsluCounter, 2401 mSDsCounter, 0 mSdLazyCounter, 3029 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 196 SdHoareTripleChecker+Valid, 2433 SdHoareTripleChecker+Invalid, 3056 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 3029 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:46:17,589 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [196 Valid, 2433 Invalid, 3056 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [27 Valid, 3029 Invalid, 0 Unknown, 0 Unchecked, 10.1s Time] [2022-11-03 02:46:17,590 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 335 states. [2022-11-03 02:46:17,802 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 335 to 216. [2022-11-03 02:46:17,802 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 216 states, 160 states have (on average 1.45) internal successors, (232), 162 states have internal predecessors, (232), 37 states have call successors, (37), 21 states have call predecessors, (37), 18 states have return successors, (36), 32 states have call predecessors, (36), 36 states have call successors, (36) [2022-11-03 02:46:17,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 216 states to 216 states and 305 transitions. [2022-11-03 02:46:17,804 INFO L78 Accepts]: Start accepts. Automaton has 216 states and 305 transitions. Word has length 56 [2022-11-03 02:46:17,805 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:46:17,805 INFO L495 AbstractCegarLoop]: Abstraction has 216 states and 305 transitions. [2022-11-03 02:46:17,805 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 29 states have (on average 1.0689655172413792) internal successors, (31), 26 states have internal predecessors, (31), 12 states have call successors, (12), 9 states have call predecessors, (12), 6 states have return successors, (9), 9 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-03 02:46:17,805 INFO L276 IsEmpty]: Start isEmpty. Operand 216 states and 305 transitions. [2022-11-03 02:46:17,807 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-03 02:46:17,807 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:46:17,807 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:46:17,833 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-03 02:46:18,019 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:46:18,019 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:46:18,020 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:46:18,020 INFO L85 PathProgramCache]: Analyzing trace with hash 1361827342, now seen corresponding path program 1 times [2022-11-03 02:46:18,020 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:46:18,020 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1710777384] [2022-11-03 02:46:18,020 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:46:18,020 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:46:18,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:46:18,121 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 02:46:18,121 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:46:18,121 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1710777384] [2022-11-03 02:46:18,122 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1710777384] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-03 02:46:18,122 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1705574653] [2022-11-03 02:46:18,122 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:46:18,122 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:46:18,122 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 [2022-11-03 02:46:18,123 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-03 02:46:18,148 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-03 02:46:18,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:46:18,342 INFO L263 TraceCheckSpWp]: Trace formula consists of 837 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-03 02:46:18,345 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-03 02:46:18,363 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 02:46:18,363 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-03 02:46:18,408 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-03 02:46:18,410 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1705574653] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-03 02:46:18,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [251872850] [2022-11-03 02:46:18,413 INFO L159 IcfgInterpreter]: Started Sifa with 51 locations of interest [2022-11-03 02:46:18,413 INFO L166 IcfgInterpreter]: Building call graph [2022-11-03 02:46:18,414 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-03 02:46:18,414 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-03 02:46:18,414 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-03 02:46:27,709 INFO L197 IcfgInterpreter]: Interpreting procedure setClientId with input of size 451 for LOIs [2022-11-03 02:46:28,073 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-03 02:47:08,715 WARN L234 SmtUtils]: Spent 22.90s on a formula simplification. DAG size of input: 581 DAG size of output: 448 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:47:19,305 WARN L234 SmtUtils]: Spent 10.14s on a formula simplification. DAG size of input: 568 DAG size of output: 328 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:47:28,945 WARN L234 SmtUtils]: Spent 9.14s on a formula simplification. DAG size of input: 568 DAG size of output: 338 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:47:38,705 WARN L234 SmtUtils]: Spent 9.17s on a formula simplification. DAG size of input: 566 DAG size of output: 336 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:47:49,355 WARN L234 SmtUtils]: Spent 10.06s on a formula simplification. DAG size of input: 566 DAG size of output: 362 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:48:00,027 WARN L234 SmtUtils]: Spent 10.03s on a formula simplification. DAG size of input: 564 DAG size of output: 360 (called from [L 360] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-03 02:48:01,248 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [251872850] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:48:01,249 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-03 02:48:01,249 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [17] imperfect sequences [4, 4, 4] total 23 [2022-11-03 02:48:01,249 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [232815243] [2022-11-03 02:48:01,249 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:48:01,250 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-11-03 02:48:01,250 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:48:01,250 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-11-03 02:48:01,251 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=88, Invalid=418, Unknown=0, NotChecked=0, Total=506 [2022-11-03 02:48:01,251 INFO L87 Difference]: Start difference. First operand 216 states and 305 transitions. Second operand has 18 states, 14 states have (on average 2.357142857142857) internal successors, (33), 13 states have internal predecessors, (33), 4 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) [2022-11-03 02:48:04,696 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:48:04,696 INFO L93 Difference]: Finished difference Result 470 states and 723 transitions. [2022-11-03 02:48:04,697 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-03 02:48:04,697 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 14 states have (on average 2.357142857142857) internal successors, (33), 13 states have internal predecessors, (33), 4 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) Word has length 58 [2022-11-03 02:48:04,697 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:48:04,700 INFO L225 Difference]: With dead ends: 470 [2022-11-03 02:48:04,700 INFO L226 Difference]: Without dead ends: 348 [2022-11-03 02:48:04,701 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 176 GetRequests, 155 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 113 ImplicationChecksByTransitivity, 93.2s TimeCoverageRelationStatistics Valid=88, Invalid=418, Unknown=0, NotChecked=0, Total=506 [2022-11-03 02:48:04,702 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 213 mSDsluCounter, 1056 mSDsCounter, 0 mSdLazyCounter, 698 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 213 SdHoareTripleChecker+Valid, 1130 SdHoareTripleChecker+Invalid, 720 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 698 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2022-11-03 02:48:04,702 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [213 Valid, 1130 Invalid, 720 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 698 Invalid, 0 Unknown, 0 Unchecked, 3.0s Time] [2022-11-03 02:48:04,703 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 348 states. [2022-11-03 02:48:04,902 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 348 to 226. [2022-11-03 02:48:04,903 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 226 states, 170 states have (on average 1.4529411764705882) internal successors, (247), 172 states have internal predecessors, (247), 37 states have call successors, (37), 21 states have call predecessors, (37), 18 states have return successors, (36), 32 states have call predecessors, (36), 36 states have call successors, (36) [2022-11-03 02:48:04,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 226 states to 226 states and 320 transitions. [2022-11-03 02:48:04,904 INFO L78 Accepts]: Start accepts. Automaton has 226 states and 320 transitions. Word has length 58 [2022-11-03 02:48:04,905 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:48:04,905 INFO L495 AbstractCegarLoop]: Abstraction has 226 states and 320 transitions. [2022-11-03 02:48:04,905 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 14 states have (on average 2.357142857142857) internal successors, (33), 13 states have internal predecessors, (33), 4 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) [2022-11-03 02:48:04,905 INFO L276 IsEmpty]: Start isEmpty. Operand 226 states and 320 transitions. [2022-11-03 02:48:04,906 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-03 02:48:04,906 INFO L187 NwaCegarLoop]: Found error trace [2022-11-03 02:48:04,906 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:48:04,929 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-03 02:48:05,111 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-03 02:48:05,111 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-03 02:48:05,112 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-03 02:48:05,112 INFO L85 PathProgramCache]: Analyzing trace with hash -1473870941, now seen corresponding path program 1 times [2022-11-03 02:48:05,112 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-03 02:48:05,112 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [431679895] [2022-11-03 02:48:05,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-03 02:48:05,112 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-03 02:48:05,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-03 02:48:05,361 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-03 02:48:05,362 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-03 02:48:05,362 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [431679895] [2022-11-03 02:48:05,362 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [431679895] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-03 02:48:05,362 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-03 02:48:05,362 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-03 02:48:05,362 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [590529518] [2022-11-03 02:48:05,362 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-03 02:48:05,363 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-03 02:48:05,363 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-03 02:48:05,363 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-03 02:48:05,364 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:48:05,364 INFO L87 Difference]: Start difference. First operand 226 states and 320 transitions. Second operand has 6 states, 5 states have (on average 6.4) internal successors, (32), 5 states have internal predecessors, (32), 1 states have call successors, (12), 1 states have call predecessors, (12), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) [2022-11-03 02:48:05,718 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-03 02:48:05,718 INFO L93 Difference]: Finished difference Result 228 states and 324 transitions. [2022-11-03 02:48:05,718 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-03 02:48:05,719 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 6.4) internal successors, (32), 5 states have internal predecessors, (32), 1 states have call successors, (12), 1 states have call predecessors, (12), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) Word has length 59 [2022-11-03 02:48:05,719 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-03 02:48:05,719 INFO L225 Difference]: With dead ends: 228 [2022-11-03 02:48:05,719 INFO L226 Difference]: Without dead ends: 0 [2022-11-03 02:48:05,720 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-03 02:48:05,721 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 61 mSDsluCounter, 475 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 506 SdHoareTripleChecker+Invalid, 121 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-03 02:48:05,721 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 506 Invalid, 121 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-03 02:48:05,722 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-03 02:48:05,722 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-03 02:48:05,723 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-03 02:48:05,723 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-03 02:48:05,723 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 59 [2022-11-03 02:48:05,723 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-03 02:48:05,723 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-03 02:48:05,724 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 6.4) internal successors, (32), 5 states have internal predecessors, (32), 1 states have call successors, (12), 1 states have call predecessors, (12), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) [2022-11-03 02:48:05,724 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-03 02:48:05,724 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-03 02:48:05,726 INFO L805 garLoopResultBuilder]: Registering result SAFE for location outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-03 02:48:05,727 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-03 02:48:05,728 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-03 02:49:25,013 INFO L895 garLoopResultBuilder]: At program point L1760(line 1760) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-11-03 02:49:25,014 INFO L899 garLoopResultBuilder]: For program point L1760-1(line 1760) no Hoare annotation was computed. [2022-11-03 02:49:25,018 INFO L895 garLoopResultBuilder]: At program point L1756(lines 1756 1775) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (and (<= ~queued_message~0 0) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (<= 0 ~queued_message~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (<= 1 |outgoing_~msg#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= |outgoing_~size~2#1| |outgoing_~tmp~6#1|) (= |outgoing_~client#1| |outgoing_#in~client#1|) (<= |outgoing_~msg#1| 1) (<= 0 |outgoing_~tmp~6#1|) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= |outgoing_~tmp~6#1| 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-11-03 02:49:25,021 INFO L895 garLoopResultBuilder]: At program point L1753(line 1753) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |outgoing_#in~msg#1| |outgoing_~msg#1|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= |outgoing_~client#1| |outgoing_#in~client#1|)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-11-03 02:49:25,022 INFO L899 garLoopResultBuilder]: For program point L1753-1(line 1753) no Hoare annotation was computed. [2022-11-03 02:49:25,022 INFO L899 garLoopResultBuilder]: For program point outgoingEXIT(lines 1742 1778) no Hoare annotation was computed. [2022-11-03 02:49:25,025 INFO L895 garLoopResultBuilder]: At program point outgoingENTRY(lines 1742 1778) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-11-03 02:49:25,029 INFO L895 garLoopResultBuilder]: At program point L1773(line 1773) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (and (<= ~queued_message~0 0) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (<= 0 ~queued_message~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (<= 1 |outgoing_~msg#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= |outgoing_~size~2#1| |outgoing_~tmp~6#1|) (= |outgoing_~client#1| |outgoing_#in~client#1|) (<= |outgoing_~msg#1| 1) (<= 0 |outgoing_~tmp~6#1|) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= |outgoing_~tmp~6#1| 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-11-03 02:49:25,030 INFO L899 garLoopResultBuilder]: For program point L1773-1(lines 1742 1778) no Hoare annotation was computed. [2022-11-03 02:49:25,032 INFO L895 garLoopResultBuilder]: At program point L1768(line 1768) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-11-03 02:49:25,033 INFO L899 garLoopResultBuilder]: For program point L1767(line 1767) no Hoare annotation was computed. [2022-11-03 02:49:25,036 INFO L895 garLoopResultBuilder]: At program point L1768-1(line 1768) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-11-03 02:49:25,037 INFO L895 garLoopResultBuilder]: At program point L1766(line 1766) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-11-03 02:49:25,039 INFO L895 garLoopResultBuilder]: At program point L1765(line 1765) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-11-03 02:49:25,042 INFO L895 garLoopResultBuilder]: At program point L1765-1(line 1765) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-11-03 02:49:25,045 INFO L895 garLoopResultBuilder]: At program point L1763(line 1763) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-11-03 02:49:25,046 INFO L899 garLoopResultBuilder]: For program point L1763-1(line 1763) no Hoare annotation was computed. [2022-11-03 02:49:25,046 INFO L899 garLoopResultBuilder]: For program point setEmailToEXIT(lines 181 196) no Hoare annotation was computed. [2022-11-03 02:49:25,049 INFO L895 garLoopResultBuilder]: At program point setEmailToENTRY(lines 181 196) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (= |setEmailTo_#in~value| ~rjh~0)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= ~__ste_email_from0~0 0)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~queued_message~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~queued_client~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= |setEmailTo_#in~handle| 1)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (and (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~queue_empty~0 1)) (not (= ~__ste_client_name1~0.base 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-03 02:49:25,049 INFO L899 garLoopResultBuilder]: For program point getEmailToEXIT(lines 162 180) no Hoare annotation was computed. [2022-11-03 02:49:25,049 INFO L902 garLoopResultBuilder]: At program point getEmailToENTRY(lines 162 180) the Hoare annotation is: true [2022-11-03 02:49:25,049 INFO L902 garLoopResultBuilder]: At program point setClientAddressBookSizeENTRY(lines 629 648) the Hoare annotation is: true [2022-11-03 02:49:25,049 INFO L899 garLoopResultBuilder]: For program point setClientAddressBookSizeEXIT(lines 629 648) no Hoare annotation was computed. [2022-11-03 02:49:25,053 INFO L895 garLoopResultBuilder]: At program point L1968(line 1968) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= |#NULL.offset| 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (and (<= ~queued_message~0 0) (<= |sendEmail_createEmail_#in~from#1| 0) (<= 1 |sendEmail_createEmail_~msg~0#1|) (<= ~queue_empty~0 1) (<= 0 ~__ste_email_from0~0) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (<= |sendEmail_createEmail_~msg~0#1| 1) (<= 1 ~queue_empty~0) (<= |sendEmail_createEmail_~to#1| 2) (<= 0 ~queued_message~0) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (<= 1 |sendEmail_~sender#1|) (<= |sendEmail_~sender#1| 1) (<= ~__ste_email_from0~0 0) (= ~queued_client~0 |old(~queued_client~0)|) (<= |sendEmail_createEmail_#in~to#1| 2) (<= 2 |sendEmail_createEmail_#in~to#1|) (<= 2 ~__ste_email_to0~0) (<= 2 |sendEmail_createEmail_~to#1|) (<= ~__ste_email_to0~0 2) (<= 0 |sendEmail_createEmail_#in~from#1|)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-11-03 02:49:25,057 INFO L895 garLoopResultBuilder]: At program point L1840(line 1840) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= |#NULL.offset| 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (<= ~queue_empty~0 1) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |sendEmail_createEmail_~from#1| ~__ste_email_from0~0) (<= 1 ~queue_empty~0) (= |sendEmail_createEmail_~retValue_acc~35#1| |sendEmail_createEmail_~msg~0#1|) (<= |sendEmail_createEmail_~to#1| 2) (= |sendEmail_createEmail_#res#1| |sendEmail_~tmp~9#1|) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (<= 1 |sendEmail_~sender#1|) (<= |sendEmail_~sender#1| 1) (<= ~__ste_email_from0~0 0) (= ~queued_client~0 |old(~queued_client~0)|) (= |sendEmail_~email~0#1| |sendEmail_~tmp~9#1|) (<= |sendEmail_createEmail_#in~to#1| 2) (<= 2 |sendEmail_createEmail_#in~to#1|) (<= 2 ~__ste_email_to0~0) (<= 2 |sendEmail_createEmail_~to#1|) (<= ~__ste_email_to0~0 2) (= 1 |sendEmail_createEmail_~msg~0#1|) (= |sendEmail_createEmail_#res#1| |sendEmail_createEmail_~retValue_acc~35#1|) (<= 0 |sendEmail_createEmail_#in~from#1|)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-11-03 02:49:25,057 INFO L899 garLoopResultBuilder]: For program point sendEmailEXIT(lines 1832 1844) no Hoare annotation was computed. [2022-11-03 02:49:25,060 INFO L895 garLoopResultBuilder]: At program point L1967(line 1967) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= |sendEmail_createEmail_#in~from#1| 0) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_createEmail_~to#1|) (= |sendEmail_#in~sender#1| |sendEmail_~sender#1|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_~receiver#1|) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= 1 |sendEmail_createEmail_~msg~0#1|)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= |#NULL.offset| 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-11-03 02:49:25,064 INFO L895 garLoopResultBuilder]: At program point L1967-1(line 1967) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= |#NULL.offset| 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= |sendEmail_createEmail_#in~from#1| 0) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_createEmail_~to#1|) (= |sendEmail_#in~sender#1| |sendEmail_~sender#1|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_~receiver#1|) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |sendEmail_createEmail_~from#1| ~__ste_email_from0~0) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= 1 |sendEmail_createEmail_~msg~0#1|)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-11-03 02:49:25,068 INFO L895 garLoopResultBuilder]: At program point sendEmailENTRY(lines 1832 1844) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= |#NULL.offset| 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-11-03 02:49:25,068 INFO L899 garLoopResultBuilder]: For program point sendEmailFINAL(lines 1832 1844) no Hoare annotation was computed. [2022-11-03 02:49:25,068 INFO L902 garLoopResultBuilder]: At program point getClientAddressBookSizeENTRY(lines 605 628) the Hoare annotation is: true [2022-11-03 02:49:25,068 INFO L899 garLoopResultBuilder]: For program point getClientAddressBookSizeEXIT(lines 605 628) no Hoare annotation was computed. [2022-11-03 02:49:25,069 INFO L902 garLoopResultBuilder]: At program point getClientAddressBookAddressENTRY(lines 886 954) the Hoare annotation is: true [2022-11-03 02:49:25,069 INFO L899 garLoopResultBuilder]: For program point getClientAddressBookAddressEXIT(lines 886 954) no Hoare annotation was computed. [2022-11-03 02:49:25,072 INFO L895 garLoopResultBuilder]: At program point L1724(line 1724) the Hoare annotation is: (or (and (<= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| 1) (= |outgoing__wrappee__AutoResponder_mail_#in~client#1| |outgoing__wrappee__AutoResponder_~client#1|) (<= |outgoing__wrappee__AutoResponder_~client#1| 1) (= |outgoing__wrappee__AutoResponder_mail_~client#1| |outgoing__wrappee__AutoResponder_mail_#in~client#1|) (<= ~queued_message~0 0) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~27#1| 2147483648)) (<= ~__ste_email_from0~0 2147483647) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (= |outgoing__wrappee__AutoResponder_mail_~msg#1| |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483647) (<= ~queue_empty~0 1) (<= 1 |outgoing__wrappee__AutoResponder_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (<= ~__ste_client_idCounter0~0 2147483647) (<= |outgoing__wrappee__AutoResponder_~tmp~5#1| 2147483647) (<= 1 ~queue_empty~0) (<= 0 ~queued_message~0) (= |outgoing__wrappee__AutoResponder_~msg#1| |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_~tmp~5#1| 2147483648)) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483648)) (<= 0 ~queued_client~0) (<= |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~27#1| 2147483647) (<= |outgoing__wrappee__AutoResponder_~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_~handle#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= 1 |outgoing__wrappee__AutoResponder_~client#1|) (<= ~queued_client~0 0)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 |old(~queued_message~0)|)) (not (<= 0 |old(~__ste_email_from0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (<= |old(~queued_message~0)| 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (<= |old(~queued_client~0)| 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (<= |old(~__ste_email_to0~0)| 2)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (<= 0 |old(~queued_client~0)|)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= |old(~queue_empty~0)| 1)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 2 |old(~__ste_email_to0~0)|)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1)) (not (<= 1 |old(~queue_empty~0)|)) (not (<= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-03 02:49:25,076 INFO L895 garLoopResultBuilder]: At program point L1724-1(line 1724) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 |old(~queued_message~0)|)) (not (<= 0 |old(~__ste_email_from0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (<= |old(~queued_message~0)| 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (<= |old(~queued_client~0)| 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (<= |old(~__ste_email_to0~0)| 2)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (<= 0 |old(~queued_client~0)|)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (and (<= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| 1) (<= |outgoing__wrappee__AutoResponder_~client#1| 1) (<= 2 |outgoing__wrappee__AutoResponder_mail_#t~ret17#1|) (<= ~queued_message~0 0) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~27#1| 2147483648)) (<= ~__ste_email_from0~0 2147483647) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (<= 1 |outgoing__wrappee__AutoResponder_mail_~client#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483647) (<= ~queue_empty~0 1) (<= |outgoing__wrappee__AutoResponder_mail_#in~client#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (<= ~__ste_client_idCounter0~0 2147483647) (<= |outgoing__wrappee__AutoResponder_mail_~client#1| 1) (<= |outgoing__wrappee__AutoResponder_~tmp~5#1| 2147483647) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~client#1|) (<= 1 ~queue_empty~0) (<= 1 |outgoing__wrappee__AutoResponder_mail_~msg#1|) (<= 0 ~queued_message~0) (<= 0 (+ |outgoing__wrappee__AutoResponder_~tmp~5#1| 2147483648)) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483648)) (<= 0 ~queued_client~0) (<= |outgoing__wrappee__AutoResponder_mail_~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_mail_#in~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~27#1| 2147483647) (<= |outgoing__wrappee__AutoResponder_mail_#t~ret17#1| 2) (<= |outgoing__wrappee__AutoResponder_~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_~handle#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= 1 |outgoing__wrappee__AutoResponder_~client#1|) (<= ~queued_client~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= |old(~queue_empty~0)| 1)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 2 |old(~__ste_email_to0~0)|)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1)) (not (<= 1 |old(~queue_empty~0)|)) (not (<= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-03 02:49:25,076 INFO L899 garLoopResultBuilder]: For program point L2587-1(line 2587) no Hoare annotation was computed. [2022-11-03 02:49:25,080 INFO L895 garLoopResultBuilder]: At program point L2587(line 2587) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 |old(~queued_message~0)|)) (not (<= 0 |old(~__ste_email_from0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (<= |old(~queued_message~0)| 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (<= |old(~queued_client~0)| 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (<= |old(~__ste_email_to0~0)| 2)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (<= 0 |old(~queued_client~0)|)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (and (= |outgoing__wrappee__AutoResponder_incoming__wrappee__Base_#in~client#1| |outgoing__wrappee__AutoResponder_incoming_~client#1|) (= |outgoing__wrappee__AutoResponder_incoming__wrappee__Base_#in~msg#1| |outgoing__wrappee__AutoResponder_incoming__wrappee__Base_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| 1) (= |outgoing__wrappee__AutoResponder_getClientAutoResponse_~retValue_acc~19#1| ~__ste_client_autoResponse1~0) (= |outgoing__wrappee__AutoResponder_autoRespond_#in~client#1| |outgoing__wrappee__AutoResponder_incoming_~client#1|) (= |outgoing__wrappee__AutoResponder_autoRespond_#in~client#1| |outgoing__wrappee__AutoResponder_autoRespond_~client#1|) (<= |outgoing__wrappee__AutoResponder_~client#1| 1) (= |outgoing__wrappee__AutoResponder_incoming__wrappee__Base_#in~client#1| |outgoing__wrappee__AutoResponder_incoming__wrappee__Base_~client#1|) (= |outgoing__wrappee__AutoResponder_autoRespond_#in~msg#1| |outgoing__wrappee__AutoResponder_autoRespond_~msg#1|) (<= ~queued_message~0 0) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~27#1| 2147483648)) (<= ~__ste_email_from0~0 2147483647) (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_~msg#1| |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_#in~msg#1|) (= |outgoing__wrappee__AutoResponder_autoRespond_~__utac__ad__arg2~0#1| |outgoing__wrappee__AutoResponder_autoRespond_~msg#1|) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (= |outgoing__wrappee__AutoResponder_deliver_#in~msg#1| |outgoing__wrappee__AutoResponder_deliver_~msg#1|) (= |outgoing__wrappee__AutoResponder_getClientAutoResponse_#in~handle#1| |outgoing__wrappee__AutoResponder_incoming_~client#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_~client#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483647) (<= ~queue_empty~0 1) (<= |outgoing__wrappee__AutoResponder_mail_#in~client#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (= |outgoing__wrappee__AutoResponder_getClientAutoResponse_~retValue_acc~19#1| |outgoing__wrappee__AutoResponder_getClientAutoResponse_#res#1|) (<= ~__ste_client_idCounter0~0 2147483647) (<= |outgoing__wrappee__AutoResponder_mail_~client#1| 1) (= |outgoing__wrappee__AutoResponder_incoming_#in~msg#1| |outgoing__wrappee__AutoResponder_mail_~msg#1|) (= |outgoing__wrappee__AutoResponder_incoming_#in~msg#1| |outgoing__wrappee__AutoResponder_incoming_~msg#1|) (<= |outgoing__wrappee__AutoResponder_~tmp~5#1| 2147483647) (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_~client#1| |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_#in~client#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~client#1|) (<= 1 ~queue_empty~0) (= |outgoing__wrappee__AutoResponder_deliver_~client#1| |outgoing__wrappee__AutoResponder_deliver_#in~client#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_~msg#1|) (<= 2 |outgoing__wrappee__AutoResponder_mail_~tmp~4#1|) (<= 0 ~queued_message~0) (<= 0 (+ |outgoing__wrappee__AutoResponder_~tmp~5#1| 2147483648)) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483648)) (<= 0 ~queued_client~0) (= |outgoing__wrappee__AutoResponder_getClientAutoResponse_#in~handle#1| |outgoing__wrappee__AutoResponder_getClientAutoResponse_~handle#1|) (= |outgoing__wrappee__AutoResponder_incoming_~client#1| |outgoing__wrappee__AutoResponder_incoming_#in~client#1|) (= |outgoing__wrappee__AutoResponder_incoming_~tmp~7#1| |outgoing__wrappee__AutoResponder_getClientAutoResponse_#res#1|) (= |outgoing__wrappee__AutoResponder_autoRespond_~__utac__ad__arg1~0#1| |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_#in~client#1|) (<= |outgoing__wrappee__AutoResponder_mail_~msg#1| 1) (= |outgoing__wrappee__AutoResponder_mail_~tmp~4#1| |outgoing__wrappee__AutoResponder_incoming_#in~client#1|) (= |outgoing__wrappee__AutoResponder_autoRespond_~__utac__ad__arg1~0#1| |outgoing__wrappee__AutoResponder_autoRespond_~client#1|) (<= |outgoing__wrappee__AutoResponder_mail_#in~msg#1| 1) (= |outgoing__wrappee__AutoResponder_incoming__wrappee__Base_#in~msg#1| |outgoing__wrappee__AutoResponder_incoming_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~27#1| 2147483647) (<= |outgoing__wrappee__AutoResponder_~msg#1| 1) (= |outgoing__wrappee__AutoResponder_incoming__wrappee__Base_~msg#1| |outgoing__wrappee__AutoResponder_deliver_#in~msg#1|) (= |outgoing__wrappee__AutoResponder_autoRespond_#in~msg#1| |outgoing__wrappee__AutoResponder_incoming_~msg#1|) (= |outgoing__wrappee__AutoResponder_autoRespond_~__utac__ad__arg2~0#1| |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_#in~msg#1|) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_~handle#1|) (<= |outgoing__wrappee__AutoResponder_mail_~tmp~4#1| 2) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= 1 |outgoing__wrappee__AutoResponder_~client#1|) (= |outgoing__wrappee__AutoResponder_deliver_#in~client#1| |outgoing__wrappee__AutoResponder_incoming__wrappee__Base_~client#1|) (<= ~queued_client~0 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= |old(~queue_empty~0)| 1)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 2 |old(~__ste_email_to0~0)|)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1)) (not (<= 1 |old(~queue_empty~0)|)) (not (<= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-03 02:49:25,083 INFO L895 garLoopResultBuilder]: At program point outgoing__wrappee__AutoResponderENTRY(lines 1730 1741) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 |old(~queued_message~0)|)) (not (<= 0 |old(~__ste_email_from0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (<= |old(~queued_message~0)| 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (<= |old(~queued_client~0)| 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (<= |old(~__ste_email_to0~0)| 2)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (<= 0 |old(~queued_client~0)|)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= |old(~queue_empty~0)| 1)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 2 |old(~__ste_email_to0~0)|)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1)) (not (<= 1 |old(~queue_empty~0)|)) (not (<= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-03 02:49:25,084 INFO L899 garLoopResultBuilder]: For program point L1807(lines 1807 1813) no Hoare annotation was computed. [2022-11-03 02:49:25,086 INFO L895 garLoopResultBuilder]: At program point L1807-2(lines 1799 1816) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 |old(~queued_message~0)|)) (not (<= 0 |old(~__ste_email_from0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (<= |old(~queued_message~0)| 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (<= |old(~queued_client~0)| 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (<= |old(~__ste_email_to0~0)| 2)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (<= 0 |old(~queued_client~0)|)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_~tmp~16#1| 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= |old(~queue_empty~0)| 1)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 2 |old(~__ste_email_to0~0)|)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1)) (not (<= 1 |old(~queue_empty~0)|)) (not (<= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-03 02:49:25,087 INFO L899 garLoopResultBuilder]: For program point outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION(line 2210) no Hoare annotation was computed. [2022-11-03 02:49:25,087 INFO L899 garLoopResultBuilder]: For program point outgoing__wrappee__AutoResponderEXIT(lines 1730 1741) no Hoare annotation was computed. [2022-11-03 02:49:25,087 INFO L895 garLoopResultBuilder]: At program point L1895(line 1895) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_~tmp~16#1| 0)) [2022-11-03 02:49:25,087 INFO L899 garLoopResultBuilder]: For program point L1895-1(line 1895) no Hoare annotation was computed. [2022-11-03 02:49:25,088 INFO L899 garLoopResultBuilder]: For program point L2589(lines 2589 2595) no Hoare annotation was computed. [2022-11-03 02:49:25,088 INFO L895 garLoopResultBuilder]: At program point L2589-2(lines 2581 2598) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_~tmp~16#1| 0)) [2022-11-03 02:49:25,088 INFO L895 garLoopResultBuilder]: At program point L2210(line 2210) the Hoare annotation is: false [2022-11-03 02:49:25,088 INFO L895 garLoopResultBuilder]: At program point L1897(line 1897) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_~tmp~16#1| 0)) [2022-11-03 02:49:25,091 INFO L895 garLoopResultBuilder]: At program point L1736(line 1736) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 |old(~queued_message~0)|)) (not (<= 0 |old(~__ste_email_from0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (<= |old(~queued_message~0)| 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (<= |old(~queued_client~0)| 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (<= |old(~__ste_email_to0~0)| 2)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (<= 0 |old(~queued_client~0)|)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= |old(~queue_empty~0)| 1)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 2 |old(~__ste_email_to0~0)|)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1)) (not (<= 1 |old(~queue_empty~0)|)) (not (<= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (and (= |outgoing__wrappee__AutoResponder_getClientId_#res#1| |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~27#1|) (= ~queued_message~0 |old(~queued_message~0)|) (= |outgoing__wrappee__AutoResponder_~client#1| |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (<= |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483647) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |outgoing__wrappee__AutoResponder_~client#1| |outgoing__wrappee__AutoResponder_#in~client#1|) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483648)) (= ~queued_client~0 |old(~queued_client~0)|) (= ~__ste_client_idCounter0~0 |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~27#1|) (= |outgoing__wrappee__AutoResponder_~msg#1| |outgoing__wrappee__AutoResponder_#in~msg#1|) (= |outgoing__wrappee__AutoResponder_~tmp~5#1| |outgoing__wrappee__AutoResponder_getClientId_#res#1|)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-11-03 02:49:25,091 INFO L895 garLoopResultBuilder]: At program point L1897-1(line 1897) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_~tmp~16#1| 0)) [2022-11-03 02:49:25,092 INFO L899 garLoopResultBuilder]: For program point L1736-1(line 1736) no Hoare annotation was computed. [2022-11-03 02:49:25,095 INFO L895 garLoopResultBuilder]: At program point setEmailFromENTRY(lines 144 159) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 0 ~queued_client~0)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= ~__ste_email_isEncrypted1~0 0)) (not (<= |setEmailFrom_#in~value| 2147483647)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (<= 0 |old(~__ste_email_from0~0)|)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 ~head~0.base)) (not (<= |setEmailFrom_#in~handle| 1)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= ~queued_message~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (<= 0 ~__ste_email_to0~0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (<= 0 ~__ste_Client_Keyring1_User2~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~__ste_email_to0~0 2)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= 0 ~queued_message~0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (<= 1 |setEmailFrom_#in~handle|)) (and (<= 0 ~__ste_email_from0~0) (<= ~__ste_email_from0~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 (+ |setEmailFrom_#in~value| 2147483648))) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= 1 ~queue_empty~0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (<= 0 ~__ste_email_isEncrypted1~0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~queue_empty~0 1)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= ~queued_client~0 0)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-11-03 02:49:25,095 INFO L899 garLoopResultBuilder]: For program point setEmailFromEXIT(lines 144 159) no Hoare annotation was computed. [2022-11-03 02:49:25,095 INFO L899 garLoopResultBuilder]: For program point L2051(lines 2050 2196) no Hoare annotation was computed. [2022-11-03 02:49:25,095 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-03 02:49:25,096 INFO L899 garLoopResultBuilder]: For program point L2167(lines 2167 2171) no Hoare annotation was computed. [2022-11-03 02:49:25,096 INFO L895 garLoopResultBuilder]: At program point L1622(line 1622) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,096 INFO L902 garLoopResultBuilder]: At program point L1622-1(lines 1605 1627) the Hoare annotation is: true [2022-11-03 02:49:25,096 INFO L895 garLoopResultBuilder]: At program point L2068(lines 2058 2195) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,096 INFO L899 garLoopResultBuilder]: For program point L1672(lines 1672 1679) no Hoare annotation was computed. [2022-11-03 02:49:25,096 INFO L895 garLoopResultBuilder]: At program point L2151(lines 2138 2188) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,097 INFO L902 garLoopResultBuilder]: At program point L1672-2(lines 1672 1679) the Hoare annotation is: true [2022-11-03 02:49:25,098 INFO L895 garLoopResultBuilder]: At program point L1590(line 1590) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| ~rjh~0) (= ~__ste_email_to0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 6) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~28#1| 2147483647) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~37#1|) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= ~__ste_client_idCounter0~0 1) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (<= 1 ~__ste_client_idCounter0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~28#1|)) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-11-03 02:49:25,100 INFO L895 garLoopResultBuilder]: At program point L1590-1(lines 1585 1594) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (= 0 ~__ste_email_subject0~0.base) (<= ~__ste_client_idCounter1~0 2) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 6) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~28#1| 2147483647) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~37#1|) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 2 ~__ste_client_idCounter1~0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~28#1|)) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-11-03 02:49:25,100 INFO L899 garLoopResultBuilder]: For program point L2120(lines 2120 2124) no Hoare annotation was computed. [2022-11-03 02:49:25,100 INFO L899 garLoopResultBuilder]: For program point L2087(lines 2087 2091) no Hoare annotation was computed. [2022-11-03 02:49:25,101 INFO L895 garLoopResultBuilder]: At program point L2104(lines 2094 2192) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,101 INFO L895 garLoopResultBuilder]: At program point L2137(lines 2127 2189) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,101 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-03 02:49:25,101 INFO L895 garLoopResultBuilder]: At program point L2073(lines 2073 2080) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,101 INFO L899 garLoopResultBuilder]: For program point L2156(lines 2156 2160) no Hoare annotation was computed. [2022-11-03 02:49:25,101 INFO L895 garLoopResultBuilder]: At program point L2173(lines 2163 2186) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,102 INFO L899 garLoopResultBuilder]: For program point L2058(lines 2058 2195) no Hoare annotation was computed. [2022-11-03 02:49:25,102 INFO L895 garLoopResultBuilder]: At program point L1613(line 1613) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,105 INFO L895 garLoopResultBuilder]: At program point L1580(line 1580) the Hoare annotation is: (let ((.cse1 (select |#memory_int| 1)) (.cse0 (select |#memory_int| 31))) (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= (select |#valid| 30) 1) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (= ~__ste_Client_counter~0 0) (= ~rjh~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= (select |#length| 8) 11) (= 10 (select |#length| 16)) (= (select |#valid| 26) 1) (= ~__ste_client_autoResponse1~0 0) (= 30 (select |#length| 24)) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (= (select |#valid| 9) 1) (= (select |#length| 6) 9) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= (select |#valid| 11) 1) (= (select |#length| 9) 10) (= ~__ste_Client_AddressBook1_Address2~0 0) (= (select |#length| 15) 12) (= (select |#valid| 27) 1) (= 16 (select |#length| 12)) (= 21 (select |#length| 20)) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= (select |#length| 29) 25) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= |ULTIMATE.start_setup_bob_#in~bob___0#1| ~bob~0) (= ~__ste_ClientAddressBook_size0~0 0) (= 4 (select |#length| 31)) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= 9 (select |#length| 25)) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= (select |#length| 27) 30) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= 2 (select |#length| 1)) (= ~__ste_client_idCounter1~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= (select |#valid| 3) 1) (= ~__ste_email_signKey0~0 0) (= (select |#valid| 7) 1) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~28#1| 2147483647) (= (select |#length| 30) 20) (= ~__SELECTED_FEATURE_Keys~0 0) (= (select |#valid| 18) 1) (= (select |#valid| 22) 1) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= (select |#valid| 24) 1) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~37#1|) (= 30 (select |#length| 11)) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (= (select |#valid| 12) 1) (= (select |#length| 19) 9) (= ~__ste_Client_AddressBook2_Address2~0 0) (= (select .cse0 1) 115) (= (select |#valid| 28) 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= (select |#valid| 4) 1) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_valid_product_~retValue_acc~37#1|) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= (select |#valid| 1) 1) (= 44 (select |#length| 4)) (= ~__ste_client_forwardReceiver0~0 0) (= (select |#valid| 20) 1) (= 10 (select |#length| 14)) (= ~__ste_Client_Keyring2_User0~0 0) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= 22 (select |#length| 13)) (= ~__ste_Client_AddressBook2_Address0~0 0) (= (select |#length| 17) 18) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= (select |#valid| 21) 1) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_idCounter2~0 0) (= (select |#length| 28) 9) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (= (select |#length| 22) 9) (= (select .cse0 2) 10) (= (select |#valid| 14) 1) (= ~__ste_email_subject1~0.base 0) (= (select |#length| 21) 30) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= (select |#valid| 0) 0) (= ~__ste_Client_Keyring2_User2~0 0) (= (select |#valid| 25) 1) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= (select |#valid| 2) 1) (= 25 (select |#length| 26)) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= (select .cse1 0) 48) (= ~__ste_email_subject1~0.offset 0) (= (select |#valid| 23) 1) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= 34 (select |#length| 10)) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= ~__ste_client_idCounter0~0 0) (= 9 (select |#length| 7)) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= 29 (select |#length| 2)) (= ~__ste_client_outbuffer1~0 0) (= (select |#valid| 19) 1) (= (select |#valid| 31) 1) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= (select |#valid| 16) 1) (= (select .cse0 0) 37) (= (select |#valid| 6) 1) (= ~chuck~0 0) (= 30 (select |#length| 18)) (= (select .cse1 1) 0) (= 44 (select |#length| 5)) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= |ULTIMATE.start_setup_bob_#in~bob___0#1| |ULTIMATE.start_setup_bob_~bob___0#1|) (= 21 (select |#length| 23)) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~28#1|)) (= ~__ste_client_outbuffer2~0 0) (= (select |#valid| 29) 1) (= (select .cse0 3) 0) (= ~__ste_ClientAddressBook_size2~0 0) (= (select |#valid| 17) 1) (= (select |#valid| 10) 1) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= (select |#valid| 8) 1) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0))) [2022-11-03 02:49:25,105 INFO L895 garLoopResultBuilder]: At program point L1613-1(line 1613) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,107 INFO L895 garLoopResultBuilder]: At program point L1580-1(lines 1575 1584) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~rjh~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~28#1| 2147483647) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~37#1|) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= ~__ste_client_idCounter0~0 1) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (<= 1 ~__ste_client_idCounter0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~28#1|)) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-11-03 02:49:25,107 INFO L899 garLoopResultBuilder]: For program point L2142(lines 2142 2149) no Hoare annotation was computed. [2022-11-03 02:49:25,107 INFO L899 garLoopResultBuilder]: For program point L2109(lines 2109 2113) no Hoare annotation was computed. [2022-11-03 02:49:25,108 INFO L895 garLoopResultBuilder]: At program point L2126(lines 2116 2190) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,108 INFO L895 garLoopResultBuilder]: At program point L2093(lines 2083 2193) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,108 INFO L895 garLoopResultBuilder]: At program point L1698(line 1698) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,108 INFO L895 garLoopResultBuilder]: At program point L1698-1(line 1698) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,108 INFO L895 garLoopResultBuilder]: At program point L1616(lines 1616 1624) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,108 INFO L899 garLoopResultBuilder]: For program point L2062(lines 2062 2066) no Hoare annotation was computed. [2022-11-03 02:49:25,109 INFO L899 garLoopResultBuilder]: For program point L2178(lines 2178 2182) no Hoare annotation was computed. [2022-11-03 02:49:25,110 INFO L895 garLoopResultBuilder]: At program point L1600(line 1600) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.offset| 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (= 0 ~__ste_email_subject0~0.base) (<= ~__ste_client_idCounter1~0 2) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| ~chuck~0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 6) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~28#1| 2147483647) (= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| |ULTIMATE.start_setup_chuck_~chuck___0#1|) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~37#1|) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= 3 ~chuck~0) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 2 ~__ste_client_idCounter1~0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= 7 |ULTIMATE.start_setup_~__cil_tmp2~0#1.base|) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~28#1|)) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-11-03 02:49:25,111 INFO L895 garLoopResultBuilder]: At program point L2178-1(lines 2050 2196) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,113 INFO L895 garLoopResultBuilder]: At program point L1600-1(lines 1595 1604) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.offset| 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (<= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| 3) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (<= ~__ste_client_idCounter2~0 3) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 6) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~28#1| 2147483647) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~37#1|) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (<= 3 ~__ste_client_idCounter2~0) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= 3 ~chuck~0) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (<= 3 |ULTIMATE.start_setup_chuck_~chuck___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (<= 3 |ULTIMATE.start_setup_chuck_#in~chuck___0#1|) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (<= |ULTIMATE.start_setup_chuck_~chuck___0#1| 3) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= 7 |ULTIMATE.start_setup_~__cil_tmp2~0#1.base|) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~28#1|)) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-11-03 02:49:25,113 INFO L895 garLoopResultBuilder]: At program point L2162(lines 2152 2187) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,113 INFO L895 garLoopResultBuilder]: At program point L1700(line 1700) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,113 INFO L895 garLoopResultBuilder]: At program point L1700-1(line 1700) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,113 INFO L895 garLoopResultBuilder]: At program point L1701(lines 1693 1705) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,114 INFO L895 garLoopResultBuilder]: At program point L2197(lines 2049 2198) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,114 INFO L899 garLoopResultBuilder]: For program point L2098(lines 2098 2102) no Hoare annotation was computed. [2022-11-03 02:49:25,114 INFO L899 garLoopResultBuilder]: For program point L2131(lines 2131 2135) no Hoare annotation was computed. [2022-11-03 02:49:25,114 INFO L895 garLoopResultBuilder]: At program point L2082(lines 2069 2194) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,114 INFO L895 garLoopResultBuilder]: At program point L2115(lines 2105 2191) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-11-03 02:49:25,114 INFO L899 garLoopResultBuilder]: For program point getEmailFromEXIT(lines 125 143) no Hoare annotation was computed. [2022-11-03 02:49:25,115 INFO L902 garLoopResultBuilder]: At program point getEmailFromENTRY(lines 125 143) the Hoare annotation is: true [2022-11-03 02:49:25,115 INFO L902 garLoopResultBuilder]: At program point setClientAddressBookAddressENTRY(lines 955 1010) the Hoare annotation is: true [2022-11-03 02:49:25,115 INFO L899 garLoopResultBuilder]: For program point setClientAddressBookAddressEXIT(lines 955 1010) no Hoare annotation was computed. [2022-11-03 02:49:25,115 INFO L899 garLoopResultBuilder]: For program point isReadableEXIT(lines 1942 1950) no Hoare annotation was computed. [2022-11-03 02:49:25,115 INFO L902 garLoopResultBuilder]: At program point isReadableENTRY(lines 1942 1950) the Hoare annotation is: true [2022-11-03 02:49:25,115 INFO L899 garLoopResultBuilder]: For program point setClientIdEXIT(lines 1520 1539) no Hoare annotation was computed. [2022-11-03 02:49:25,116 INFO L902 garLoopResultBuilder]: At program point setClientIdENTRY(lines 1520 1539) the Hoare annotation is: true [2022-11-03 02:49:25,119 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1] [2022-11-03 02:49:25,121 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-03 02:49:25,208 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 03.11 02:49:25 BoogieIcfgContainer [2022-11-03 02:49:25,208 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-03 02:49:25,209 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-03 02:49:25,209 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-03 02:49:25,209 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-03 02:49:25,210 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 03.11 02:40:57" (3/4) ... [2022-11-03 02:49:25,213 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-03 02:49:25,219 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure outgoing [2022-11-03 02:49:25,220 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure setEmailTo [2022-11-03 02:49:25,220 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure getEmailTo [2022-11-03 02:49:25,220 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientAddressBookSize [2022-11-03 02:49:25,220 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure sendEmail [2022-11-03 02:49:25,220 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure getClientAddressBookSize [2022-11-03 02:49:25,220 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure getClientAddressBookAddress [2022-11-03 02:49:25,221 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure outgoing__wrappee__AutoResponder [2022-11-03 02:49:25,221 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure setEmailFrom [2022-11-03 02:49:25,221 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure getEmailFrom [2022-11-03 02:49:25,221 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientAddressBookAddress [2022-11-03 02:49:25,222 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isReadable [2022-11-03 02:49:25,222 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientId [2022-11-03 02:49:25,236 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 148 nodes and edges [2022-11-03 02:49:25,240 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 43 nodes and edges [2022-11-03 02:49:25,242 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2022-11-03 02:49:25,243 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2022-11-03 02:49:25,245 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 02:49:25,246 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-03 02:49:25,279 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && rjh == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && __ste_Client_AddressBook2_Alias0 == 0) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && retValue_acc <= 2147483647) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && 1 == retValue_acc) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && tmp == 1) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && __ste_client_idCounter0 <= 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && 1 <= __ste_client_idCounter0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && 0 <= 2147483648 + retValue_acc) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 [2022-11-03 02:49:25,280 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 0 == __ste_email_subject0) && __ste_client_idCounter1 <= 2) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __cil_tmp1 == 6) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && retValue_acc <= 2147483647) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && 1 == retValue_acc) && \old(rjh___0) <= 2) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && __ste_Client_AddressBook1_Alias2 == 0) && 2 <= __ste_client_idCounter1) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && tmp == 1) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && 0 <= 2147483648 + retValue_acc) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 [2022-11-03 02:49:25,280 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __cil_tmp2 == 0) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && \old(chuck___0) <= 3) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_client_idCounter2 <= 3) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __cil_tmp1 == 6) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && retValue_acc <= 2147483647) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && 1 == retValue_acc) && \old(rjh___0) <= 2) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && 3 <= __ste_client_idCounter2) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && 3 == chuck) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 3 <= chuck___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && 3 <= \old(chuck___0)) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && tmp == 1) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && chuck___0 <= 3) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && 7 == __cil_tmp2) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && 0 <= 2147483648 + retValue_acc) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 [2022-11-03 02:49:25,290 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_client_privateKey0 <= 0) || !(0 <= __ste_email_subject0)) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= __ste_Client_AddressBook2_Address1)) || !(0 <= __ste_client_privateKey0)) || !(\old(queued_message) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_email_signKey1 <= 0)) || !(__SELECTED_FEATURE_Verify <= 0)) || !(0 <= head)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_forwardReceiver1)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(__ste_Client_AddressBook2_Address1 <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(0 <= __ste_email_encryptionKey0)) || !(__ste_email_id0 == 0)) || !(__ste_ClientKeyring_size0 <= 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(head <= 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(bob <= 1)) || !(0 <= __ste_ClientKeyring_size1)) || !(__ste_client_name0 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(0 <= __ste_Client_AddressBook0_Alias2)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_Client_AddressBook1_Alias0 <= 0)) || !(\old(__ste_email_to0) == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_client_outbuffer0 == 0)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(0 <= __ste_Client_Keyring1_PublicKey2)) || !(__ste_email_isEncrypted1 == 0)) || !(1 <= bob)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(0 <= __ste_Client_Keyring2_User1)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_client_forwardReceiver3 <= 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || !(bob == \old(sender))) || !(\old(__ste_email_to1) == 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(0 <= __ste_Client_AddressBook1_Alias0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_client_name0 <= 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(__ste_client_privateKey2 <= 0)) || !(0 <= __ste_email_isSigned0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_Client_Keyring1_PublicKey2 <= 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_AddressBook0_Alias2 <= 0)) || !(0 <= __ste_client_privateKey2)) || !(\old(receiver) == rjh)) || !(__ste_ClientKeyring_size1 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_Client_AddressBook1_Alias2 <= 0)) || !(__ste_email_encryptionKey1 == 0)) || ((((((((((((((((((((queued_message <= 0 && \old(from) <= 0) && 1 <= msg) && queue_empty <= 1) && 0 <= __ste_email_from0) && \old(receiver) == receiver) && msg <= 1) && 1 <= queue_empty) && to <= 2) && 0 <= queued_message) && from == \old(from)) && 1 <= sender) && sender <= 1) && __ste_email_from0 <= 0) && queued_client == \old(queued_client)) && \old(to) <= 2) && 2 <= \old(to)) && 2 <= __ste_email_to0) && 2 <= to) && __ste_email_to0 <= 2) && 0 <= \old(from))) || !(0 <= __ste_client_forwardReceiver2)) || !(__ste_email_subject0 <= 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(0 <= __ste_ClientKeyring_size0)) || !(__ste_Client_AddressBook0_Address2 <= 0)) || !(0 <= __SELECTED_FEATURE_Verify)) || !(__ste_Client_Keyring2_User1 <= 0)) || !(0 <= __ste_client_forwardReceiver3)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(0 <= __ste_Client_AddressBook1_Alias2)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_client_forwardReceiver2 <= 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(\old(__ste_email_from1) == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(0 <= __ste_Client_Keyring0_PublicKey0)) || !(0 <= __ste_client_name1)) || !(__ste_Client_AddressBook0_Address0 <= 0)) || !(3 == chuck)) || !(0 <= __ste_Client_AddressBook0_Address0)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_forwardReceiver1 <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(0 <= __ste_client_name0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_email_encryptionKey0 <= 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_client_name1 <= 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(0 <= __ste_Client_AddressBook0_Address2)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_Client_Keyring0_PublicKey0 <= 0)) || !(__ste_email_isSigned0 <= 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0) [2022-11-03 02:49:25,293 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || ((((((queued_message == \old(queued_message) && __ste_email_to0 == \old(__ste_email_to0)) && __ste_email_to1 == \old(__ste_email_to1)) && \old(__ste_email_from0) == __ste_email_from0) && \old(__ste_email_from1) == __ste_email_from1) && \old(queue_empty) == queue_empty) && queued_client == \old(queued_client))) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) [2022-11-03 02:49:25,294 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || (((((((((((((((((((((((((((((((((((handle <= 1 && client <= 1) && 2 <= aux-getEmailTo(msg)-aux) && queued_message <= 0) && 0 <= retValue_acc + 2147483648) && __ste_email_from0 <= 2147483647) && 0 <= __ste_email_from0 + 2147483648) && 1 <= client) && \result <= 2147483647) && queue_empty <= 1) && \old(client) <= 1) && 1 <= msg) && \old(handle) <= 1) && 1 <= \old(handle)) && __ste_client_idCounter0 <= 2147483647) && client <= 1) && tmp <= 2147483647) && 1 <= \old(client)) && 1 <= queue_empty) && 1 <= msg) && 0 <= queued_message) && 0 <= tmp + 2147483648) && 1 <= \old(msg)) && 0 <= \result + 2147483648) && 0 <= queued_client) && msg <= 1) && \old(msg) <= 1) && retValue_acc <= 2147483647) && aux-getEmailTo(msg)-aux <= 2) && msg <= 1) && 1 <= handle) && 0 <= __ste_client_idCounter0 + 2147483648) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2) && 1 <= client) && queued_client <= 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) [2022-11-03 02:49:25,294 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(tmp == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) [2022-11-03 02:49:25,295 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_client_privateKey0 <= 0) || !(1 <= \old(client))) || !(0 <= __ste_email_subject0)) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= __ste_Client_AddressBook2_Address1)) || !(0 <= __ste_client_privateKey0)) || !(\old(queued_message) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_email_signKey1 <= 0)) || !(__SELECTED_FEATURE_Verify <= 0)) || !(rjh == \old(__ste_email_to0))) || !(0 <= head)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(0 <= #NULL)) || !(__ste_ClientAddressBook_size1 == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_forwardReceiver1)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 <= __ste_email_id1)) || !(__ste_Client_AddressBook2_Address1 <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(0 <= __ste_email_encryptionKey0)) || !(__ste_email_id0 == 0)) || !(__ste_ClientKeyring_size0 <= 0)) || !(0 <= __SELECTED_FEATURE_AddressBook)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(head <= 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(bob <= 1)) || !(0 <= __ste_ClientKeyring_size1)) || !(__ste_client_name0 == 0)) || !(\old(client) <= 1)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(0 <= __ste_Client_AddressBook0_Alias2)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_Client_AddressBook1_Alias0 <= 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_client_outbuffer0 == 0)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(0 <= __ste_Client_Keyring1_PublicKey2)) || !(__ste_email_isEncrypted1 == 0)) || !(1 <= bob)) || !(head == 0)) || !(0 <= __ste_Client_Keyring2_User1)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_client_forwardReceiver3 <= 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || ((((((((((((((queued_message <= 0 && __ste_email_to1 == \old(__ste_email_to1)) && \old(__ste_email_from0) == __ste_email_from0) && 0 <= queued_message) && \old(__ste_email_from1) == __ste_email_from1) && 1 <= msg) && \old(queue_empty) == queue_empty) && queued_client == \old(queued_client)) && size == tmp) && client == \old(client)) && msg <= 1) && 0 <= tmp) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2) && tmp <= 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(0 <= __ste_Client_AddressBook1_Alias0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_client_name0 <= 0)) || !(__ste_email_id1 <= 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(__ste_client_privateKey2 <= 0)) || !(0 <= __ste_email_isSigned0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_Client_Keyring1_PublicKey2 <= 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_AddressBook0_Alias2 <= 0)) || !(0 <= __ste_client_privateKey2)) || !(__ste_ClientKeyring_size1 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_Client_AddressBook1_Alias2 <= 0)) || !(__ste_email_encryptionKey1 == 0)) || !(#NULL <= 0)) || !(__ste_Client_AddressBook0_Address1 <= 0)) || !(0 <= __ste_client_forwardReceiver2)) || !(__ste_email_subject0 <= 0)) || !(__ste_Client_Keyring1_User0 <= 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(0 <= __ste_ClientKeyring_size0)) || !(__ste_Client_AddressBook0_Address2 <= 0)) || !(0 <= __SELECTED_FEATURE_Verify)) || !(__ste_Client_Keyring2_User1 <= 0)) || !(0 <= __ste_client_forwardReceiver3)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__SELECTED_FEATURE_AddressBook <= 0)) || !(__ste_email_subject1 == 0)) || !(0 <= __ste_Client_AddressBook1_Alias2)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_client_forwardReceiver2 <= 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(0 <= __ste_Client_Keyring0_PublicKey0)) || !(0 <= __ste_client_name1)) || !(__ste_Client_AddressBook0_Address0 <= 0)) || !(3 == chuck)) || !(0 <= __ste_Client_AddressBook0_Address0)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_forwardReceiver1 <= 0)) || !(__ste_email_isEncrypted0 <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(0 <= __ste_Client_Keyring1_User0)) || !(0 <= __ste_client_name0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_email_encryptionKey0 <= 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(0 <= __ste_Client_AddressBook0_Address1)) || !(__ste_client_name1 <= 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(0 <= __ste_Client_AddressBook0_Address2)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_Client_Keyring0_PublicKey0 <= 0)) || !(__ste_email_isSigned0 <= 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(0 <= __ste_email_isEncrypted0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0) [2022-11-03 02:49:25,376 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/witness.graphml [2022-11-03 02:49:25,376 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-03 02:49:25,377 INFO L158 Benchmark]: Toolchain (without parser) took 510229.84ms. Allocated memory was 117.4MB in the beginning and 740.3MB in the end (delta: 622.9MB). Free memory was 73.6MB in the beginning and 466.9MB in the end (delta: -393.3MB). Peak memory consumption was 228.1MB. Max. memory is 16.1GB. [2022-11-03 02:49:25,377 INFO L158 Benchmark]: CDTParser took 1.07ms. Allocated memory is still 117.4MB. Free memory is still 92.1MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-03 02:49:25,377 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1021.02ms. Allocated memory is still 117.4MB. Free memory was 73.4MB in the beginning and 67.0MB in the end (delta: 6.4MB). Peak memory consumption was 10.9MB. Max. memory is 16.1GB. [2022-11-03 02:49:25,378 INFO L158 Benchmark]: Boogie Procedure Inliner took 114.46ms. Allocated memory is still 117.4MB. Free memory was 67.0MB in the beginning and 62.8MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-03 02:49:25,379 INFO L158 Benchmark]: Boogie Preprocessor took 112.80ms. Allocated memory is still 117.4MB. Free memory was 62.8MB in the beginning and 59.5MB in the end (delta: 3.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-03 02:49:25,379 INFO L158 Benchmark]: RCFGBuilder took 1480.58ms. Allocated memory was 117.4MB in the beginning and 153.1MB in the end (delta: 35.7MB). Free memory was 59.5MB in the beginning and 92.8MB in the end (delta: -33.3MB). Peak memory consumption was 33.1MB. Max. memory is 16.1GB. [2022-11-03 02:49:25,380 INFO L158 Benchmark]: TraceAbstraction took 507326.47ms. Allocated memory was 153.1MB in the beginning and 740.3MB in the end (delta: 587.2MB). Free memory was 91.8MB in the beginning and 480.5MB in the end (delta: -388.8MB). Peak memory consumption was 432.4MB. Max. memory is 16.1GB. [2022-11-03 02:49:25,380 INFO L158 Benchmark]: Witness Printer took 167.44ms. Allocated memory is still 740.3MB. Free memory was 479.5MB in the beginning and 466.9MB in the end (delta: 12.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-11-03 02:49:25,382 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 1.07ms. Allocated memory is still 117.4MB. Free memory is still 92.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1021.02ms. Allocated memory is still 117.4MB. Free memory was 73.4MB in the beginning and 67.0MB in the end (delta: 6.4MB). Peak memory consumption was 10.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 114.46ms. Allocated memory is still 117.4MB. Free memory was 67.0MB in the beginning and 62.8MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 112.80ms. Allocated memory is still 117.4MB. Free memory was 62.8MB in the beginning and 59.5MB in the end (delta: 3.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 1480.58ms. Allocated memory was 117.4MB in the beginning and 153.1MB in the end (delta: 35.7MB). Free memory was 59.5MB in the beginning and 92.8MB in the end (delta: -33.3MB). Peak memory consumption was 33.1MB. Max. memory is 16.1GB. * TraceAbstraction took 507326.47ms. Allocated memory was 153.1MB in the beginning and 740.3MB in the end (delta: 587.2MB). Free memory was 91.8MB in the beginning and 480.5MB in the end (delta: -388.8MB). Peak memory consumption was 432.4MB. Max. memory is 16.1GB. * Witness Printer took 167.44ms. Allocated memory is still 740.3MB. Free memory was 479.5MB in the beginning and 466.9MB in the end (delta: 12.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 2210]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 14 procedures, 107 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 507.2s, OverallIterations: 7, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 45.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 79.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 633 SdHoareTripleChecker+Valid, 18.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 616 mSDsluCounter, 6306 SdHoareTripleChecker+Invalid, 17.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5745 mSDsCounter, 63 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4843 IncrementalHoareTripleChecker+Invalid, 4906 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 63 mSolverCounterUnsat, 870 mSDtfsCounter, 4843 mSolverCounterSat, 0.3s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 533 GetRequests, 432 SyntacticMatches, 1 SemanticMatches, 100 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 935 ImplicationChecksByTransitivity, 330.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=226occurred in iteration=6, InterpolantAutomatonStates: 95, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 7 MinimizatonAttempts, 302 StatesRemovedByMinimization, 4 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 68 LocationsWithAnnotation, 602 PreInvPairs, 708 NumberOfFragments, 17086 HoareAnnotationTreeSize, 602 FomulaSimplifications, 225635 FormulaSimplificationTreeSizeReduction, 14.1s HoareSimplificationTime, 68 FomulaSimplificationsInter, 12216 FormulaSimplificationTreeSizeReductionInter, 65.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.3s SsaConstructionTime, 0.7s SatisfiabilityAnalysisTime, 1.4s InterpolantComputationTime, 549 NumberOfCodeBlocks, 549 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 704 ConstructedInterpolants, 0 QuantifiedInterpolants, 868 SizeOfPredicates, 0 NumberOfNonLiveVariables, 2496 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 13 InterpolantComputations, 4 PerfectInterpolantSequences, 113/131 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 72.4s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 14, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 95, DAG_INTERPRETER_EARLY_EXITS: 3, TOOLS_POST_APPLICATIONS: 103, TOOLS_POST_TIME: 19.1s, TOOLS_POST_CALL_APPLICATIONS: 48, TOOLS_POST_CALL_TIME: 33.5s, TOOLS_POST_RETURN_APPLICATIONS: 30, TOOLS_POST_RETURN_TIME: 6.6s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 181, TOOLS_QUANTIFIERELIM_TIME: 58.9s, TOOLS_QUANTIFIERELIM_MAX_TIME: 7.7s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 275, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 48, DOMAIN_JOIN_TIME: 11.6s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 3, DOMAIN_WIDEN_TIME: 0.7s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 6, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 95, DOMAIN_ISBOTTOM_TIME: 0.7s, LOOP_SUMMARIZER_APPLICATIONS: 3, LOOP_SUMMARIZER_CACHE_MISSES: 3, LOOP_SUMMARIZER_OVERALL_TIME: 7.4s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 7.4s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 6, CALL_SUMMARIZER_APPLICATIONS: 30, CALL_SUMMARIZER_CACHE_MISSES: 8, CALL_SUMMARIZER_OVERALL_TIME: 0.1s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.1s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 1362, DAG_COMPRESSION_RETAINED_NODES: 283, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 2138]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1585]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 0 == __ste_email_subject0) && __ste_client_idCounter1 <= 2) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __cil_tmp1 == 6) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && retValue_acc <= 2147483647) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && 1 == retValue_acc) && \old(rjh___0) <= 2) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && __ste_Client_AddressBook1_Alias2 == 0) && 2 <= __ste_client_idCounter1) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && tmp == 1) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && 0 <= 2147483648 + retValue_acc) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 - InvariantResult [Line: 2163]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1693]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2058]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1605]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2094]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1698]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1595]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __cil_tmp2 == 0) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && \old(chuck___0) <= 3) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_client_idCounter2 <= 3) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __cil_tmp1 == 6) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && retValue_acc <= 2147483647) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && 1 == retValue_acc) && \old(rjh___0) <= 2) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && 3 <= __ste_client_idCounter2) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && 3 == chuck) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 3 <= chuck___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && 3 <= \old(chuck___0)) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && tmp == 1) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && chuck___0 <= 3) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && 7 == __cil_tmp2) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && 0 <= 2147483648 + retValue_acc) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 - InvariantResult [Line: 2069]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2127]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2105]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1575]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && rjh == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && __ste_Client_AddressBook2_Alias0 == 0) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && retValue_acc <= 2147483647) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && 1 == retValue_acc) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && tmp == 1) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && __ste_client_idCounter0 <= 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && 1 <= __ste_client_idCounter0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && 0 <= 2147483648 + retValue_acc) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 - InvariantResult [Line: 1724]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || (((((((((((((((((((((((((((((((((((handle <= 1 && client <= 1) && 2 <= aux-getEmailTo(msg)-aux) && queued_message <= 0) && 0 <= retValue_acc + 2147483648) && __ste_email_from0 <= 2147483647) && 0 <= __ste_email_from0 + 2147483648) && 1 <= client) && \result <= 2147483647) && queue_empty <= 1) && \old(client) <= 1) && 1 <= msg) && \old(handle) <= 1) && 1 <= \old(handle)) && __ste_client_idCounter0 <= 2147483647) && client <= 1) && tmp <= 2147483647) && 1 <= \old(client)) && 1 <= queue_empty) && 1 <= msg) && 0 <= queued_message) && 0 <= tmp + 2147483648) && 1 <= \old(msg)) && 0 <= \result + 2147483648) && 0 <= queued_client) && msg <= 1) && \old(msg) <= 1) && retValue_acc <= 2147483647) && aux-getEmailTo(msg)-aux <= 2) && msg <= 1) && 1 <= handle) && 0 <= __ste_client_idCounter0 + 2147483648) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2) && 1 <= client) && queued_client <= 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) - InvariantResult [Line: 1616]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2083]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1756]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_client_privateKey0 <= 0) || !(1 <= \old(client))) || !(0 <= __ste_email_subject0)) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= __ste_Client_AddressBook2_Address1)) || !(0 <= __ste_client_privateKey0)) || !(\old(queued_message) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_email_signKey1 <= 0)) || !(__SELECTED_FEATURE_Verify <= 0)) || !(rjh == \old(__ste_email_to0))) || !(0 <= head)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(0 <= #NULL)) || !(__ste_ClientAddressBook_size1 == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_forwardReceiver1)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 <= __ste_email_id1)) || !(__ste_Client_AddressBook2_Address1 <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(0 <= __ste_email_encryptionKey0)) || !(__ste_email_id0 == 0)) || !(__ste_ClientKeyring_size0 <= 0)) || !(0 <= __SELECTED_FEATURE_AddressBook)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(head <= 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(bob <= 1)) || !(0 <= __ste_ClientKeyring_size1)) || !(__ste_client_name0 == 0)) || !(\old(client) <= 1)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(0 <= __ste_Client_AddressBook0_Alias2)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_Client_AddressBook1_Alias0 <= 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_client_outbuffer0 == 0)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(0 <= __ste_Client_Keyring1_PublicKey2)) || !(__ste_email_isEncrypted1 == 0)) || !(1 <= bob)) || !(head == 0)) || !(0 <= __ste_Client_Keyring2_User1)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_client_forwardReceiver3 <= 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || ((((((((((((((queued_message <= 0 && __ste_email_to1 == \old(__ste_email_to1)) && \old(__ste_email_from0) == __ste_email_from0) && 0 <= queued_message) && \old(__ste_email_from1) == __ste_email_from1) && 1 <= msg) && \old(queue_empty) == queue_empty) && queued_client == \old(queued_client)) && size == tmp) && client == \old(client)) && msg <= 1) && 0 <= tmp) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2) && tmp <= 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(0 <= __ste_Client_AddressBook1_Alias0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_client_name0 <= 0)) || !(__ste_email_id1 <= 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(__ste_client_privateKey2 <= 0)) || !(0 <= __ste_email_isSigned0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_Client_Keyring1_PublicKey2 <= 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_AddressBook0_Alias2 <= 0)) || !(0 <= __ste_client_privateKey2)) || !(__ste_ClientKeyring_size1 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_Client_AddressBook1_Alias2 <= 0)) || !(__ste_email_encryptionKey1 == 0)) || !(#NULL <= 0)) || !(__ste_Client_AddressBook0_Address1 <= 0)) || !(0 <= __ste_client_forwardReceiver2)) || !(__ste_email_subject0 <= 0)) || !(__ste_Client_Keyring1_User0 <= 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(0 <= __ste_ClientKeyring_size0)) || !(__ste_Client_AddressBook0_Address2 <= 0)) || !(0 <= __SELECTED_FEATURE_Verify)) || !(__ste_Client_Keyring2_User1 <= 0)) || !(0 <= __ste_client_forwardReceiver3)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__SELECTED_FEATURE_AddressBook <= 0)) || !(__ste_email_subject1 == 0)) || !(0 <= __ste_Client_AddressBook1_Alias2)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_client_forwardReceiver2 <= 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(0 <= __ste_Client_Keyring0_PublicKey0)) || !(0 <= __ste_client_name1)) || !(__ste_Client_AddressBook0_Address0 <= 0)) || !(3 == chuck)) || !(0 <= __ste_Client_AddressBook0_Address0)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_forwardReceiver1 <= 0)) || !(__ste_email_isEncrypted0 <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(0 <= __ste_Client_Keyring1_User0)) || !(0 <= __ste_client_name0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_email_encryptionKey0 <= 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(0 <= __ste_Client_AddressBook0_Address1)) || !(__ste_client_name1 <= 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(0 <= __ste_Client_AddressBook0_Address2)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_Client_Keyring0_PublicKey0 <= 0)) || !(__ste_email_isSigned0 <= 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(0 <= __ste_email_isEncrypted0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0) - InvariantResult [Line: 1672]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2152]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2116]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2049]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1799]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(tmp == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) - InvariantResult [Line: 2210]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2073]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2581]: Loop Invariant Derived loop invariant: !(tmp == 0) - InvariantResult [Line: 1968]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_client_privateKey0 <= 0) || !(0 <= __ste_email_subject0)) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= __ste_Client_AddressBook2_Address1)) || !(0 <= __ste_client_privateKey0)) || !(\old(queued_message) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_email_signKey1 <= 0)) || !(__SELECTED_FEATURE_Verify <= 0)) || !(0 <= head)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_forwardReceiver1)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(__ste_Client_AddressBook2_Address1 <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(0 <= __ste_email_encryptionKey0)) || !(__ste_email_id0 == 0)) || !(__ste_ClientKeyring_size0 <= 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(head <= 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(bob <= 1)) || !(0 <= __ste_ClientKeyring_size1)) || !(__ste_client_name0 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(0 <= __ste_Client_AddressBook0_Alias2)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_Client_AddressBook1_Alias0 <= 0)) || !(\old(__ste_email_to0) == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_client_outbuffer0 == 0)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(0 <= __ste_Client_Keyring1_PublicKey2)) || !(__ste_email_isEncrypted1 == 0)) || !(1 <= bob)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(0 <= __ste_Client_Keyring2_User1)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_client_forwardReceiver3 <= 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || !(bob == \old(sender))) || !(\old(__ste_email_to1) == 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(0 <= __ste_Client_AddressBook1_Alias0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_client_name0 <= 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(__ste_client_privateKey2 <= 0)) || !(0 <= __ste_email_isSigned0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_Client_Keyring1_PublicKey2 <= 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_AddressBook0_Alias2 <= 0)) || !(0 <= __ste_client_privateKey2)) || !(\old(receiver) == rjh)) || !(__ste_ClientKeyring_size1 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_Client_AddressBook1_Alias2 <= 0)) || !(__ste_email_encryptionKey1 == 0)) || ((((((((((((((((((((queued_message <= 0 && \old(from) <= 0) && 1 <= msg) && queue_empty <= 1) && 0 <= __ste_email_from0) && \old(receiver) == receiver) && msg <= 1) && 1 <= queue_empty) && to <= 2) && 0 <= queued_message) && from == \old(from)) && 1 <= sender) && sender <= 1) && __ste_email_from0 <= 0) && queued_client == \old(queued_client)) && \old(to) <= 2) && 2 <= \old(to)) && 2 <= __ste_email_to0) && 2 <= to) && __ste_email_to0 <= 2) && 0 <= \old(from))) || !(0 <= __ste_client_forwardReceiver2)) || !(__ste_email_subject0 <= 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(0 <= __ste_ClientKeyring_size0)) || !(__ste_Client_AddressBook0_Address2 <= 0)) || !(0 <= __SELECTED_FEATURE_Verify)) || !(__ste_Client_Keyring2_User1 <= 0)) || !(0 <= __ste_client_forwardReceiver3)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(0 <= __ste_Client_AddressBook1_Alias2)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_client_forwardReceiver2 <= 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(\old(__ste_email_from1) == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(0 <= __ste_Client_Keyring0_PublicKey0)) || !(0 <= __ste_client_name1)) || !(__ste_Client_AddressBook0_Address0 <= 0)) || !(3 == chuck)) || !(0 <= __ste_Client_AddressBook0_Address0)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_forwardReceiver1 <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(0 <= __ste_client_name0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_email_encryptionKey0 <= 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_client_name1 <= 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(0 <= __ste_Client_AddressBook0_Address2)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_Client_Keyring0_PublicKey0 <= 0)) || !(__ste_email_isSigned0 <= 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0) - InvariantResult [Line: 1897]: Loop Invariant Derived loop invariant: !(tmp == 0) - InvariantResult [Line: 1730]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || ((((((queued_message == \old(queued_message) && __ste_email_to0 == \old(__ste_email_to0)) && __ste_email_to1 == \old(__ste_email_to1)) && \old(__ste_email_from0) == __ste_email_from0) && \old(__ste_email_from1) == __ste_email_from1) && \old(queue_empty) == queue_empty) && queued_client == \old(queued_client))) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) - InvariantResult [Line: 2050]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1613]: Loop Invariant Derived loop invariant: tmp == 1 RESULT: Ultimate proved your program to be correct! [2022-11-03 02:49:25,507 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e3a498f2-d638-4f27-9b66-6b980d00dc5d/bin/utaipan-7li7fVZpFI/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE