./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/strreplace-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 38b53e6a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/strreplace-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 961e7f6fbd61acd9d4f1771460dcf26fd486b3de35e5e0e3ca8e6e03bda0fabc --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-38b53e6 [2022-11-25 23:24:17,624 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-25 23:24:17,626 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-25 23:24:17,643 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-25 23:24:17,644 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-25 23:24:17,645 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-25 23:24:17,646 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-25 23:24:17,648 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-25 23:24:17,650 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-25 23:24:17,651 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-25 23:24:17,652 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-25 23:24:17,653 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-25 23:24:17,654 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-25 23:24:17,655 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-25 23:24:17,656 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-25 23:24:17,658 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-25 23:24:17,658 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-25 23:24:17,659 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-25 23:24:17,661 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-25 23:24:17,663 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-25 23:24:17,664 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-25 23:24:17,665 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-25 23:24:17,667 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-25 23:24:17,667 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-25 23:24:17,671 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-25 23:24:17,671 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-25 23:24:17,672 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-25 23:24:17,673 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-25 23:24:17,673 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-25 23:24:17,674 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-25 23:24:17,675 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-25 23:24:17,676 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-25 23:24:17,677 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-25 23:24:17,678 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-25 23:24:17,679 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-25 23:24:17,679 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-25 23:24:17,680 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-25 23:24:17,680 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-25 23:24:17,681 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-25 23:24:17,682 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-25 23:24:17,683 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-25 23:24:17,684 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-25 23:24:17,705 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-25 23:24:17,705 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-25 23:24:17,706 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-25 23:24:17,706 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-25 23:24:17,707 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-25 23:24:17,707 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-25 23:24:17,707 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-25 23:24:17,708 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-25 23:24:17,708 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-25 23:24:17,708 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-25 23:24:17,709 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-25 23:24:17,709 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-25 23:24:17,709 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-25 23:24:17,709 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-25 23:24:17,710 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-25 23:24:17,710 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-25 23:24:17,710 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-25 23:24:17,710 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-25 23:24:17,711 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-25 23:24:17,711 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-25 23:24:17,712 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-25 23:24:17,712 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-25 23:24:17,712 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-25 23:24:17,713 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-25 23:24:17,713 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-25 23:24:17,713 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-25 23:24:17,713 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-25 23:24:17,714 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-25 23:24:17,714 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-25 23:24:17,714 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-25 23:24:17,714 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-25 23:24:17,715 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-25 23:24:17,715 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-25 23:24:17,715 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-25 23:24:17,716 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-25 23:24:17,716 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 23:24:17,716 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-25 23:24:17,716 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-25 23:24:17,717 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-25 23:24:17,717 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-25 23:24:17,717 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-25 23:24:17,717 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-25 23:24:17,718 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 961e7f6fbd61acd9d4f1771460dcf26fd486b3de35e5e0e3ca8e6e03bda0fabc [2022-11-25 23:24:17,981 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-25 23:24:18,002 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-25 23:24:18,004 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-25 23:24:18,006 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-25 23:24:18,006 INFO L275 PluginConnector]: CDTParser initialized [2022-11-25 23:24:18,007 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/../../sv-benchmarks/c/array-memsafety/strreplace-alloca-2.i [2022-11-25 23:24:20,980 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-25 23:24:21,279 INFO L351 CDTParser]: Found 1 translation units. [2022-11-25 23:24:21,280 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/sv-benchmarks/c/array-memsafety/strreplace-alloca-2.i [2022-11-25 23:24:21,291 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/data/7fcc987c3/d114cddbff5344be82302e4c3a990f12/FLAGb32745f8c [2022-11-25 23:24:21,306 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/data/7fcc987c3/d114cddbff5344be82302e4c3a990f12 [2022-11-25 23:24:21,308 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-25 23:24:21,310 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-25 23:24:21,311 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-25 23:24:21,311 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-25 23:24:21,314 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-25 23:24:21,315 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 11:24:21" (1/1) ... [2022-11-25 23:24:21,316 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7a6655e5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:24:21, skipping insertion in model container [2022-11-25 23:24:21,316 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 11:24:21" (1/1) ... [2022-11-25 23:24:21,324 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-25 23:24:21,382 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-25 23:24:21,630 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 23:24:21,640 INFO L203 MainTranslator]: Completed pre-run [2022-11-25 23:24:21,676 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 23:24:21,705 INFO L208 MainTranslator]: Completed translation [2022-11-25 23:24:21,706 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:24:21 WrapperNode [2022-11-25 23:24:21,706 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-25 23:24:21,708 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-25 23:24:21,708 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-25 23:24:21,708 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-25 23:24:21,715 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:24:21" (1/1) ... [2022-11-25 23:24:21,740 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:24:21" (1/1) ... [2022-11-25 23:24:21,766 INFO L138 Inliner]: procedures = 117, calls = 11, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 62 [2022-11-25 23:24:21,767 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-25 23:24:21,768 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-25 23:24:21,769 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-25 23:24:21,769 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-25 23:24:21,778 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:24:21" (1/1) ... [2022-11-25 23:24:21,778 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:24:21" (1/1) ... [2022-11-25 23:24:21,798 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:24:21" (1/1) ... [2022-11-25 23:24:21,799 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:24:21" (1/1) ... [2022-11-25 23:24:21,803 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:24:21" (1/1) ... [2022-11-25 23:24:21,814 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:24:21" (1/1) ... [2022-11-25 23:24:21,815 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:24:21" (1/1) ... [2022-11-25 23:24:21,822 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:24:21" (1/1) ... [2022-11-25 23:24:21,824 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-25 23:24:21,831 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-25 23:24:21,832 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-25 23:24:21,832 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-25 23:24:21,833 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:24:21" (1/1) ... [2022-11-25 23:24:21,840 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 23:24:21,854 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:24:21,869 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-25 23:24:21,881 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-25 23:24:21,911 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-11-25 23:24:21,911 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-11-25 23:24:21,911 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-11-25 23:24:21,911 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-25 23:24:21,912 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-25 23:24:21,912 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-25 23:24:22,010 INFO L235 CfgBuilder]: Building ICFG [2022-11-25 23:24:22,012 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-25 23:24:22,185 INFO L276 CfgBuilder]: Performing block encoding [2022-11-25 23:24:22,311 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-25 23:24:22,311 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-25 23:24:22,314 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 11:24:22 BoogieIcfgContainer [2022-11-25 23:24:22,314 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-25 23:24:22,316 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-25 23:24:22,316 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-25 23:24:22,320 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-25 23:24:22,320 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.11 11:24:21" (1/3) ... [2022-11-25 23:24:22,321 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@33d77adf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 11:24:22, skipping insertion in model container [2022-11-25 23:24:22,321 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 11:24:21" (2/3) ... [2022-11-25 23:24:22,322 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@33d77adf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 11:24:22, skipping insertion in model container [2022-11-25 23:24:22,322 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 11:24:22" (3/3) ... [2022-11-25 23:24:22,323 INFO L112 eAbstractionObserver]: Analyzing ICFG strreplace-alloca-2.i [2022-11-25 23:24:22,346 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-25 23:24:22,347 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 11 error locations. [2022-11-25 23:24:22,399 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-25 23:24:22,406 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6b8a56d1, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-25 23:24:22,406 INFO L358 AbstractCegarLoop]: Starting to check reachability of 11 error locations. [2022-11-25 23:24:22,410 INFO L276 IsEmpty]: Start isEmpty. Operand has 24 states, 12 states have (on average 2.25) internal successors, (27), 23 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:22,416 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-25 23:24:22,417 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:24:22,417 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-25 23:24:22,418 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:24:22,423 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:24:22,424 INFO L85 PathProgramCache]: Analyzing trace with hash 104334, now seen corresponding path program 1 times [2022-11-25 23:24:22,434 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:24:22,435 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [480944963] [2022-11-25 23:24:22,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:22,435 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:24:22,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:22,667 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:22,668 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:24:22,668 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [480944963] [2022-11-25 23:24:22,669 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [480944963] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:24:22,669 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:24:22,670 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-11-25 23:24:22,671 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [935694704] [2022-11-25 23:24:22,672 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:24:22,677 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 23:24:22,677 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:24:22,776 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 23:24:22,778 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:24:22,780 INFO L87 Difference]: Start difference. First operand has 24 states, 12 states have (on average 2.25) internal successors, (27), 23 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:22,848 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:24:22,849 INFO L93 Difference]: Finished difference Result 22 states and 24 transitions. [2022-11-25 23:24:22,858 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 23:24:22,860 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-25 23:24:22,860 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:24:22,867 INFO L225 Difference]: With dead ends: 22 [2022-11-25 23:24:22,871 INFO L226 Difference]: Without dead ends: 21 [2022-11-25 23:24:22,873 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:24:22,884 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 19 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 10 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:24:22,886 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [19 Valid, 10 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:24:22,900 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21 states. [2022-11-25 23:24:22,909 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21 to 21. [2022-11-25 23:24:22,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21 states, 12 states have (on average 1.9166666666666667) internal successors, (23), 20 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:22,912 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 23 transitions. [2022-11-25 23:24:22,913 INFO L78 Accepts]: Start accepts. Automaton has 21 states and 23 transitions. Word has length 3 [2022-11-25 23:24:22,913 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:24:22,913 INFO L495 AbstractCegarLoop]: Abstraction has 21 states and 23 transitions. [2022-11-25 23:24:22,914 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:22,914 INFO L276 IsEmpty]: Start isEmpty. Operand 21 states and 23 transitions. [2022-11-25 23:24:22,914 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-25 23:24:22,914 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:24:22,915 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-25 23:24:22,915 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-25 23:24:22,915 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:24:22,916 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:24:22,916 INFO L85 PathProgramCache]: Analyzing trace with hash 104335, now seen corresponding path program 1 times [2022-11-25 23:24:22,917 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:24:22,917 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [769370183] [2022-11-25 23:24:22,917 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:22,917 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:24:22,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:23,184 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:23,184 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:24:23,184 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [769370183] [2022-11-25 23:24:23,185 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [769370183] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:24:23,185 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:24:23,185 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 23:24:23,185 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [446855640] [2022-11-25 23:24:23,186 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:24:23,187 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 23:24:23,187 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:24:23,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 23:24:23,188 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:24:23,188 INFO L87 Difference]: Start difference. First operand 21 states and 23 transitions. Second operand has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:23,272 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:24:23,272 INFO L93 Difference]: Finished difference Result 40 states and 44 transitions. [2022-11-25 23:24:23,273 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 23:24:23,273 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-25 23:24:23,273 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:24:23,274 INFO L225 Difference]: With dead ends: 40 [2022-11-25 23:24:23,274 INFO L226 Difference]: Without dead ends: 40 [2022-11-25 23:24:23,275 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:24:23,276 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 20 mSDsluCounter, 18 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 28 SdHoareTripleChecker+Invalid, 40 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:24:23,277 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 28 Invalid, 40 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:24:23,278 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40 states. [2022-11-25 23:24:23,280 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40 to 23. [2022-11-25 23:24:23,281 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23 states, 14 states have (on average 1.8571428571428572) internal successors, (26), 22 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:23,281 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 26 transitions. [2022-11-25 23:24:23,282 INFO L78 Accepts]: Start accepts. Automaton has 23 states and 26 transitions. Word has length 3 [2022-11-25 23:24:23,282 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:24:23,282 INFO L495 AbstractCegarLoop]: Abstraction has 23 states and 26 transitions. [2022-11-25 23:24:23,282 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:23,283 INFO L276 IsEmpty]: Start isEmpty. Operand 23 states and 26 transitions. [2022-11-25 23:24:23,283 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-25 23:24:23,283 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:24:23,283 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-25 23:24:23,284 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-25 23:24:23,284 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:24:23,284 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:24:23,285 INFO L85 PathProgramCache]: Analyzing trace with hash 106111, now seen corresponding path program 1 times [2022-11-25 23:24:23,285 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:24:23,285 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1295035785] [2022-11-25 23:24:23,286 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:23,286 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:24:23,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:23,531 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:23,532 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:24:23,533 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1295035785] [2022-11-25 23:24:23,533 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1295035785] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:24:23,533 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:24:23,534 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 23:24:23,535 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1634795461] [2022-11-25 23:24:23,535 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:24:23,536 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 23:24:23,536 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:24:23,536 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 23:24:23,537 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:24:23,537 INFO L87 Difference]: Start difference. First operand 23 states and 26 transitions. Second operand has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:23,565 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:24:23,566 INFO L93 Difference]: Finished difference Result 22 states and 25 transitions. [2022-11-25 23:24:23,566 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 23:24:23,566 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-25 23:24:23,567 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:24:23,567 INFO L225 Difference]: With dead ends: 22 [2022-11-25 23:24:23,567 INFO L226 Difference]: Without dead ends: 22 [2022-11-25 23:24:23,568 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:24:23,569 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 20 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 9 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:24:23,570 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 9 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:24:23,571 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22 states. [2022-11-25 23:24:23,572 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22 to 22. [2022-11-25 23:24:23,573 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22 states, 14 states have (on average 1.7857142857142858) internal successors, (25), 21 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:23,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22 states to 22 states and 25 transitions. [2022-11-25 23:24:23,573 INFO L78 Accepts]: Start accepts. Automaton has 22 states and 25 transitions. Word has length 3 [2022-11-25 23:24:23,574 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:24:23,574 INFO L495 AbstractCegarLoop]: Abstraction has 22 states and 25 transitions. [2022-11-25 23:24:23,574 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:23,574 INFO L276 IsEmpty]: Start isEmpty. Operand 22 states and 25 transitions. [2022-11-25 23:24:23,575 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-25 23:24:23,575 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:24:23,575 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-25 23:24:23,575 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-25 23:24:23,576 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr4REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:24:23,576 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:24:23,576 INFO L85 PathProgramCache]: Analyzing trace with hash 3290841, now seen corresponding path program 1 times [2022-11-25 23:24:23,576 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:24:23,577 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1561149381] [2022-11-25 23:24:23,577 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:23,577 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:24:23,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:23,653 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:23,654 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:24:23,654 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1561149381] [2022-11-25 23:24:23,654 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1561149381] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:24:23,655 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:24:23,655 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 23:24:23,655 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1717776880] [2022-11-25 23:24:23,655 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:24:23,656 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 23:24:23,656 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:24:23,656 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 23:24:23,657 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:24:23,657 INFO L87 Difference]: Start difference. First operand 22 states and 25 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:23,687 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:24:23,687 INFO L93 Difference]: Finished difference Result 19 states and 22 transitions. [2022-11-25 23:24:23,688 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 23:24:23,688 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-25 23:24:23,688 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:24:23,689 INFO L225 Difference]: With dead ends: 19 [2022-11-25 23:24:23,689 INFO L226 Difference]: Without dead ends: 19 [2022-11-25 23:24:23,690 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 23:24:23,692 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 10 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 9 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:24:23,694 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 9 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:24:23,699 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2022-11-25 23:24:23,701 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 19. [2022-11-25 23:24:23,701 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 14 states have (on average 1.5714285714285714) internal successors, (22), 18 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:23,702 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 22 transitions. [2022-11-25 23:24:23,702 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 22 transitions. Word has length 4 [2022-11-25 23:24:23,702 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:24:23,702 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 22 transitions. [2022-11-25 23:24:23,702 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:23,703 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 22 transitions. [2022-11-25 23:24:23,703 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-11-25 23:24:23,703 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:24:23,703 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-11-25 23:24:23,703 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-25 23:24:23,704 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:24:23,704 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:24:23,704 INFO L85 PathProgramCache]: Analyzing trace with hash 3290842, now seen corresponding path program 1 times [2022-11-25 23:24:23,705 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:24:23,705 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1832310008] [2022-11-25 23:24:23,705 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:23,705 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:24:23,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:23,901 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:23,901 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:24:23,902 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1832310008] [2022-11-25 23:24:23,902 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1832310008] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:24:23,902 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:24:23,903 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 23:24:23,903 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [768186578] [2022-11-25 23:24:23,903 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:24:23,903 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 23:24:23,904 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:24:23,904 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 23:24:23,905 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:24:23,905 INFO L87 Difference]: Start difference. First operand 19 states and 22 transitions. Second operand has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:23,949 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:24:23,949 INFO L93 Difference]: Finished difference Result 28 states and 32 transitions. [2022-11-25 23:24:23,949 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 23:24:23,950 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-11-25 23:24:23,950 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:24:23,950 INFO L225 Difference]: With dead ends: 28 [2022-11-25 23:24:23,951 INFO L226 Difference]: Without dead ends: 28 [2022-11-25 23:24:23,951 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-25 23:24:23,952 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 36 mSDsluCounter, 6 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 15 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:24:23,953 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 15 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:24:23,954 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28 states. [2022-11-25 23:24:23,955 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28 to 24. [2022-11-25 23:24:23,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24 states, 19 states have (on average 1.5263157894736843) internal successors, (29), 23 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:23,956 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24 states to 24 states and 29 transitions. [2022-11-25 23:24:23,957 INFO L78 Accepts]: Start accepts. Automaton has 24 states and 29 transitions. Word has length 4 [2022-11-25 23:24:23,957 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:24:23,957 INFO L495 AbstractCegarLoop]: Abstraction has 24 states and 29 transitions. [2022-11-25 23:24:23,957 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:23,958 INFO L276 IsEmpty]: Start isEmpty. Operand 24 states and 29 transitions. [2022-11-25 23:24:23,958 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-25 23:24:23,958 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:24:23,959 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1] [2022-11-25 23:24:23,959 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-25 23:24:23,959 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:24:23,960 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:24:23,960 INFO L85 PathProgramCache]: Analyzing trace with hash 100313571, now seen corresponding path program 1 times [2022-11-25 23:24:23,960 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:24:23,960 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [743902419] [2022-11-25 23:24:23,961 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:23,961 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:24:23,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:24,237 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:24,237 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:24:24,238 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [743902419] [2022-11-25 23:24:24,238 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [743902419] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:24:24,238 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1793884257] [2022-11-25 23:24:24,238 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:24,239 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:24:24,239 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:24:24,243 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:24:24,251 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-25 23:24:24,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:24,309 INFO L263 TraceCheckSpWp]: Trace formula consists of 48 conjuncts, 16 conjunts are in the unsatisfiable core [2022-11-25 23:24:24,314 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:24:24,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-11-25 23:24:24,579 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:24,579 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:24:24,736 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:24,737 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1793884257] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:24:24,737 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2050102428] [2022-11-25 23:24:24,758 INFO L159 IcfgInterpreter]: Started Sifa with 4 locations of interest [2022-11-25 23:24:24,758 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:24:24,763 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:24:24,770 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:24:24,771 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:24:24,818 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-11-25 23:24:24,877 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:24,963 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:24,998 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:25,018 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:24:25,241 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '324#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet9#1|)) (<= |ULTIMATE.start_main_#t~nondet9#1| 127) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-11-25 23:24:25,242 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:24:25,242 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:24:25,242 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [3, 3, 3] total 9 [2022-11-25 23:24:25,242 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1318246276] [2022-11-25 23:24:25,242 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:24:25,242 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-25 23:24:25,243 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:24:25,243 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-25 23:24:25,243 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2022-11-25 23:24:25,244 INFO L87 Difference]: Start difference. First operand 24 states and 29 transitions. Second operand has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:25,527 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:24:25,528 INFO L93 Difference]: Finished difference Result 60 states and 72 transitions. [2022-11-25 23:24:25,528 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 23:24:25,528 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-25 23:24:25,528 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:24:25,530 INFO L225 Difference]: With dead ends: 60 [2022-11-25 23:24:25,530 INFO L226 Difference]: Without dead ends: 60 [2022-11-25 23:24:25,531 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=70, Invalid=202, Unknown=0, NotChecked=0, Total=272 [2022-11-25 23:24:25,531 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 107 mSDsluCounter, 54 mSDsCounter, 0 mSdLazyCounter, 128 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 72 SdHoareTripleChecker+Invalid, 130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 128 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:24:25,532 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 72 Invalid, 130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 128 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:24:25,532 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2022-11-25 23:24:25,535 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 21. [2022-11-25 23:24:25,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21 states, 17 states have (on average 1.4705882352941178) internal successors, (25), 20 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:25,536 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 25 transitions. [2022-11-25 23:24:25,536 INFO L78 Accepts]: Start accepts. Automaton has 21 states and 25 transitions. Word has length 5 [2022-11-25 23:24:25,536 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:24:25,536 INFO L495 AbstractCegarLoop]: Abstraction has 21 states and 25 transitions. [2022-11-25 23:24:25,536 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:25,536 INFO L276 IsEmpty]: Start isEmpty. Operand 21 states and 25 transitions. [2022-11-25 23:24:25,537 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-11-25 23:24:25,537 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:24:25,537 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:24:25,548 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-25 23:24:25,743 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2022-11-25 23:24:25,743 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr10ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:24:25,743 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:24:25,743 INFO L85 PathProgramCache]: Analyzing trace with hash -746792756, now seen corresponding path program 1 times [2022-11-25 23:24:25,744 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:24:25,744 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1338723368] [2022-11-25 23:24:25,744 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:25,744 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:24:25,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:25,878 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:25,879 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:24:25,879 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1338723368] [2022-11-25 23:24:25,879 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1338723368] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:24:25,879 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:24:25,880 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 23:24:25,880 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1777460563] [2022-11-25 23:24:25,880 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:24:25,880 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 23:24:25,881 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:24:25,882 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 23:24:25,882 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:24:25,882 INFO L87 Difference]: Start difference. First operand 21 states and 25 transitions. Second operand has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:25,915 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:24:25,915 INFO L93 Difference]: Finished difference Result 20 states and 24 transitions. [2022-11-25 23:24:25,916 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 23:24:25,916 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-11-25 23:24:25,916 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:24:25,918 INFO L225 Difference]: With dead ends: 20 [2022-11-25 23:24:25,918 INFO L226 Difference]: Without dead ends: 18 [2022-11-25 23:24:25,918 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 23:24:25,919 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 11 mSDsluCounter, 9 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:24:25,919 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 18 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:24:25,920 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18 states. [2022-11-25 23:24:25,921 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18 to 18. [2022-11-25 23:24:25,921 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18 states, 15 states have (on average 1.4) internal successors, (21), 17 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:25,922 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 21 transitions. [2022-11-25 23:24:25,922 INFO L78 Accepts]: Start accepts. Automaton has 18 states and 21 transitions. Word has length 7 [2022-11-25 23:24:25,922 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:24:25,922 INFO L495 AbstractCegarLoop]: Abstraction has 18 states and 21 transitions. [2022-11-25 23:24:25,922 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:25,923 INFO L276 IsEmpty]: Start isEmpty. Operand 18 states and 21 transitions. [2022-11-25 23:24:25,923 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-11-25 23:24:25,923 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:24:25,923 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:24:25,924 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-25 23:24:25,924 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:24:25,924 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:24:25,925 INFO L85 PathProgramCache]: Analyzing trace with hash -407205654, now seen corresponding path program 1 times [2022-11-25 23:24:25,925 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:24:25,925 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1844896048] [2022-11-25 23:24:25,925 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:25,925 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:24:25,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:26,136 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:26,136 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:24:26,136 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1844896048] [2022-11-25 23:24:26,137 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1844896048] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 23:24:26,137 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 23:24:26,137 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 23:24:26,137 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1868335480] [2022-11-25 23:24:26,137 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 23:24:26,138 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 23:24:26,138 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:24:26,139 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 23:24:26,139 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-25 23:24:26,140 INFO L87 Difference]: Start difference. First operand 18 states and 21 transitions. Second operand has 6 states, 6 states have (on average 1.5) internal successors, (9), 5 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:26,204 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:24:26,204 INFO L93 Difference]: Finished difference Result 23 states and 26 transitions. [2022-11-25 23:24:26,205 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 23:24:26,205 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 1.5) internal successors, (9), 5 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-11-25 23:24:26,205 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:24:26,208 INFO L225 Difference]: With dead ends: 23 [2022-11-25 23:24:26,209 INFO L226 Difference]: Without dead ends: 20 [2022-11-25 23:24:26,209 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-11-25 23:24:26,210 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 7 mSDsluCounter, 28 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 36 SdHoareTripleChecker+Invalid, 38 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 23:24:26,211 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 36 Invalid, 38 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 38 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 23:24:26,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20 states. [2022-11-25 23:24:26,217 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20 to 19. [2022-11-25 23:24:26,218 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 16 states have (on average 1.375) internal successors, (22), 18 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:26,221 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 22 transitions. [2022-11-25 23:24:26,222 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 22 transitions. Word has length 9 [2022-11-25 23:24:26,222 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:24:26,223 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 22 transitions. [2022-11-25 23:24:26,223 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 1.5) internal successors, (9), 5 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:26,223 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 22 transitions. [2022-11-25 23:24:26,223 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-25 23:24:26,224 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:24:26,224 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:24:26,224 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-25 23:24:26,225 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:24:26,226 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:24:26,226 INFO L85 PathProgramCache]: Analyzing trace with hash 1521060926, now seen corresponding path program 1 times [2022-11-25 23:24:26,226 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:24:26,226 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1984494048] [2022-11-25 23:24:26,226 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:26,227 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:24:26,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:26,521 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:26,521 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:24:26,521 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1984494048] [2022-11-25 23:24:26,521 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1984494048] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:24:26,521 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1121018437] [2022-11-25 23:24:26,522 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:26,522 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:24:26,522 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:24:26,523 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:24:26,556 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-25 23:24:26,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:26,599 INFO L263 TraceCheckSpWp]: Trace formula consists of 98 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-25 23:24:26,600 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:24:26,687 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:26,687 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:24:26,784 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:24:26,804 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:26,804 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1121018437] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:24:26,805 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1277575429] [2022-11-25 23:24:26,807 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:24:26,807 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:24:26,807 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:24:26,808 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:24:26,808 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:24:26,834 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-11-25 23:24:26,877 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:24:26,921 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:26,964 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:27,022 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:27,686 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:24:29,577 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '584#(and (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (<= 0 |ULTIMATE.start_cstrreplace_~numReplaced~0#1|) (<= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrreplace_~p~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|))) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 1 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |#NULL.base| 0) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.offset|) (<= 0 |#NULL.offset|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 0 |#StackHeapBarrier|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)) (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.offset|))' at error location [2022-11-25 23:24:29,578 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:24:29,578 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:24:29,578 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 12 [2022-11-25 23:24:29,578 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [570417320] [2022-11-25 23:24:29,578 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:24:29,579 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-25 23:24:29,579 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:24:29,579 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-25 23:24:29,580 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=77, Invalid=343, Unknown=0, NotChecked=0, Total=420 [2022-11-25 23:24:29,580 INFO L87 Difference]: Start difference. First operand 19 states and 22 transitions. Second operand has 14 states, 13 states have (on average 2.1538461538461537) internal successors, (28), 13 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:29,725 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:24:29,725 INFO L93 Difference]: Finished difference Result 25 states and 29 transitions. [2022-11-25 23:24:29,725 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-25 23:24:29,726 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 2.1538461538461537) internal successors, (28), 13 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-11-25 23:24:29,726 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:24:29,726 INFO L225 Difference]: With dead ends: 25 [2022-11-25 23:24:29,726 INFO L226 Difference]: Without dead ends: 25 [2022-11-25 23:24:29,727 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 15 SyntacticMatches, 2 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 167 ImplicationChecksByTransitivity, 2.1s TimeCoverageRelationStatistics Valid=112, Invalid=488, Unknown=0, NotChecked=0, Total=600 [2022-11-25 23:24:29,727 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 88 mSDsluCounter, 23 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 88 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 87 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:24:29,728 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [88 Valid, 30 Invalid, 87 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:24:29,728 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25 states. [2022-11-25 23:24:29,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25 to 19. [2022-11-25 23:24:29,730 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 18 states have (on average 1.2222222222222223) internal successors, (22), 18 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:29,730 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 22 transitions. [2022-11-25 23:24:29,730 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 22 transitions. Word has length 11 [2022-11-25 23:24:29,730 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:24:29,730 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 22 transitions. [2022-11-25 23:24:29,731 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 2.1538461538461537) internal successors, (28), 13 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:29,731 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 22 transitions. [2022-11-25 23:24:29,731 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-11-25 23:24:29,731 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:24:29,731 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2022-11-25 23:24:29,744 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-25 23:24:29,939 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:24:29,939 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:24:29,940 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:24:29,940 INFO L85 PathProgramCache]: Analyzing trace with hash 909439494, now seen corresponding path program 2 times [2022-11-25 23:24:29,940 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:24:29,940 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [359343284] [2022-11-25 23:24:29,940 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:29,940 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:24:29,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:30,309 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 5 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:30,310 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:24:30,311 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [359343284] [2022-11-25 23:24:30,311 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [359343284] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:24:30,311 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [482868736] [2022-11-25 23:24:30,312 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:24:30,312 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:24:30,312 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:24:30,313 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:24:30,339 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-25 23:24:30,403 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-25 23:24:30,404 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:24:30,405 INFO L263 TraceCheckSpWp]: Trace formula consists of 116 conjuncts, 30 conjunts are in the unsatisfiable core [2022-11-25 23:24:30,407 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:24:30,479 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:30,594 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 5 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:30,594 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:24:30,634 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-25 23:24:30,640 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-25 23:24:30,729 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 5 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:30,729 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [482868736] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:24:30,729 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1285483764] [2022-11-25 23:24:30,732 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:24:30,733 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:24:30,733 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:24:30,734 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:24:30,734 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:24:30,759 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-11-25 23:24:30,791 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:30,825 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:30,845 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:30,900 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:31,164 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:24:31,692 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '751#(and (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (< (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|) (+ |ULTIMATE.start_cstrreplace_~p~0#1.offset| 1)) (<= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 0 |#StackHeapBarrier|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)) (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.offset|) (= |#NULL.base| 0))' at error location [2022-11-25 23:24:31,692 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:24:31,692 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:24:31,692 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 8] total 17 [2022-11-25 23:24:31,692 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [30546848] [2022-11-25 23:24:31,693 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:24:31,693 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-11-25 23:24:31,693 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:24:31,693 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-11-25 23:24:31,694 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=77, Invalid=475, Unknown=0, NotChecked=0, Total=552 [2022-11-25 23:24:31,694 INFO L87 Difference]: Start difference. First operand 19 states and 22 transitions. Second operand has 18 states, 18 states have (on average 2.0555555555555554) internal successors, (37), 17 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:31,960 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:24:31,960 INFO L93 Difference]: Finished difference Result 31 states and 35 transitions. [2022-11-25 23:24:31,960 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-25 23:24:31,961 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 2.0555555555555554) internal successors, (37), 17 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-11-25 23:24:31,961 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:24:31,961 INFO L225 Difference]: With dead ends: 31 [2022-11-25 23:24:31,961 INFO L226 Difference]: Without dead ends: 22 [2022-11-25 23:24:31,962 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 29 SyntacticMatches, 3 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 1 DeprecatedPredicates, 230 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=153, Invalid=777, Unknown=0, NotChecked=0, Total=930 [2022-11-25 23:24:31,962 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 41 mSDsluCounter, 39 mSDsCounter, 0 mSdLazyCounter, 98 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 43 SdHoareTripleChecker+Invalid, 100 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 98 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:24:31,963 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 43 Invalid, 100 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 98 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:24:31,963 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22 states. [2022-11-25 23:24:31,966 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22 to 21. [2022-11-25 23:24:31,967 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21 states, 20 states have (on average 1.2) internal successors, (24), 20 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:31,967 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 24 transitions. [2022-11-25 23:24:31,968 INFO L78 Accepts]: Start accepts. Automaton has 21 states and 24 transitions. Word has length 16 [2022-11-25 23:24:31,968 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:24:31,969 INFO L495 AbstractCegarLoop]: Abstraction has 21 states and 24 transitions. [2022-11-25 23:24:31,969 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 2.0555555555555554) internal successors, (37), 17 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:31,969 INFO L276 IsEmpty]: Start isEmpty. Operand 21 states and 24 transitions. [2022-11-25 23:24:31,970 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-11-25 23:24:31,970 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:24:31,970 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1] [2022-11-25 23:24:31,981 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-25 23:24:32,175 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-25 23:24:32,176 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:24:32,176 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:24:32,176 INFO L85 PathProgramCache]: Analyzing trace with hash 567232562, now seen corresponding path program 3 times [2022-11-25 23:24:32,176 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:24:32,176 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [544088322] [2022-11-25 23:24:32,177 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:32,177 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:24:32,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:32,540 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:32,540 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:24:32,541 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [544088322] [2022-11-25 23:24:32,541 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [544088322] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:24:32,541 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1037158100] [2022-11-25 23:24:32,541 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:24:32,541 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:24:32,542 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:24:32,543 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:24:32,576 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-25 23:24:32,624 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:24:32,625 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:24:32,626 INFO L263 TraceCheckSpWp]: Trace formula consists of 129 conjuncts, 26 conjunts are in the unsatisfiable core [2022-11-25 23:24:32,628 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:24:32,634 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-25 23:24:32,757 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 1 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:32,758 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:24:32,947 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 1 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:32,948 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1037158100] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:24:32,948 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1046041811] [2022-11-25 23:24:32,951 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:24:32,951 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:24:32,952 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:24:32,952 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:24:32,952 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:24:32,974 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-11-25 23:24:33,006 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:24:33,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:33,071 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:33,116 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:33,669 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:24:35,689 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '945#(and (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (<= 0 |ULTIMATE.start_cstrreplace_~numReplaced~0#1|) (<= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrreplace_~p~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|))) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 1 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |#NULL.base| 0) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.offset|) (<= 0 |#NULL.offset|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 0 |#StackHeapBarrier|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)) (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.offset|))' at error location [2022-11-25 23:24:35,689 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:24:35,690 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:24:35,690 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 7, 7] total 18 [2022-11-25 23:24:35,690 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1473843243] [2022-11-25 23:24:35,690 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:24:35,691 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-25 23:24:35,692 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:24:35,693 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-25 23:24:35,695 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=108, Invalid=594, Unknown=0, NotChecked=0, Total=702 [2022-11-25 23:24:35,698 INFO L87 Difference]: Start difference. First operand 21 states and 24 transitions. Second operand has 20 states, 19 states have (on average 2.526315789473684) internal successors, (48), 19 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:35,893 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:24:35,893 INFO L93 Difference]: Finished difference Result 32 states and 37 transitions. [2022-11-25 23:24:35,893 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-25 23:24:35,894 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 2.526315789473684) internal successors, (48), 19 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-11-25 23:24:35,894 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:24:35,895 INFO L225 Difference]: With dead ends: 32 [2022-11-25 23:24:35,895 INFO L226 Difference]: Without dead ends: 32 [2022-11-25 23:24:35,896 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 224 ImplicationChecksByTransitivity, 2.3s TimeCoverageRelationStatistics Valid=178, Invalid=814, Unknown=0, NotChecked=0, Total=992 [2022-11-25 23:24:35,900 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 146 mSDsluCounter, 43 mSDsCounter, 0 mSdLazyCounter, 155 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 146 SdHoareTripleChecker+Valid, 53 SdHoareTripleChecker+Invalid, 157 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 155 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 23:24:35,900 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [146 Valid, 53 Invalid, 157 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 155 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 23:24:35,901 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32 states. [2022-11-25 23:24:35,905 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32 to 27. [2022-11-25 23:24:35,905 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 26 states have (on average 1.1923076923076923) internal successors, (31), 26 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:35,906 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 31 transitions. [2022-11-25 23:24:35,906 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 31 transitions. Word has length 18 [2022-11-25 23:24:35,906 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:24:35,907 INFO L495 AbstractCegarLoop]: Abstraction has 27 states and 31 transitions. [2022-11-25 23:24:35,907 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 2.526315789473684) internal successors, (48), 19 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:35,907 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 31 transitions. [2022-11-25 23:24:35,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-25 23:24:35,908 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:24:35,908 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1] [2022-11-25 23:24:35,920 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-25 23:24:36,114 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-25 23:24:36,114 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:24:36,114 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:24:36,115 INFO L85 PathProgramCache]: Analyzing trace with hash -657813870, now seen corresponding path program 4 times [2022-11-25 23:24:36,115 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:24:36,115 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1112109371] [2022-11-25 23:24:36,115 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:36,115 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:24:36,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:36,429 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:36,430 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:24:36,430 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1112109371] [2022-11-25 23:24:36,430 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1112109371] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:24:36,430 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [514408372] [2022-11-25 23:24:36,430 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:24:36,431 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:24:36,431 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:24:36,432 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:24:36,459 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-25 23:24:36,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:36,512 INFO L263 TraceCheckSpWp]: Trace formula consists of 147 conjuncts, 36 conjunts are in the unsatisfiable core [2022-11-25 23:24:36,514 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:24:36,635 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:36,786 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-25 23:24:36,789 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:36,789 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:24:36,868 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-25 23:24:36,872 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 20 [2022-11-25 23:24:37,145 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:37,146 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [514408372] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:24:37,146 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1381917179] [2022-11-25 23:24:37,148 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:24:37,148 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:24:37,148 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:24:37,148 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:24:37,148 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:24:37,171 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-11-25 23:24:37,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:24:37,228 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:37,259 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:37,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:37,845 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:24:39,840 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1179#(and (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (<= 0 |ULTIMATE.start_cstrreplace_~numReplaced~0#1|) (<= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrreplace_~p~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|))) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 1 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |#NULL.base| 0) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.offset|) (<= 0 |#NULL.offset|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 0 |#StackHeapBarrier|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)) (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.offset|))' at error location [2022-11-25 23:24:39,841 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:24:39,841 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:24:39,841 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 25 [2022-11-25 23:24:39,841 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1593586598] [2022-11-25 23:24:39,841 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:24:39,842 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-25 23:24:39,842 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:24:39,843 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-25 23:24:39,843 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=109, Invalid=947, Unknown=0, NotChecked=0, Total=1056 [2022-11-25 23:24:39,843 INFO L87 Difference]: Start difference. First operand 27 states and 31 transitions. Second operand has 26 states, 26 states have (on average 1.9230769230769231) internal successors, (50), 25 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:40,178 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:24:40,179 INFO L93 Difference]: Finished difference Result 45 states and 51 transitions. [2022-11-25 23:24:40,179 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-25 23:24:40,179 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 1.9230769230769231) internal successors, (50), 25 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-11-25 23:24:40,179 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:24:40,180 INFO L225 Difference]: With dead ends: 45 [2022-11-25 23:24:40,180 INFO L226 Difference]: Without dead ends: 30 [2022-11-25 23:24:40,181 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 84 GetRequests, 45 SyntacticMatches, 1 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 313 ImplicationChecksByTransitivity, 2.6s TimeCoverageRelationStatistics Valid=187, Invalid=1373, Unknown=0, NotChecked=0, Total=1560 [2022-11-25 23:24:40,182 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 61 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 199 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 61 SdHoareTripleChecker+Valid, 81 SdHoareTripleChecker+Invalid, 206 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 199 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:24:40,182 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [61 Valid, 81 Invalid, 206 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 199 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:24:40,182 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30 states. [2022-11-25 23:24:40,184 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30 to 29. [2022-11-25 23:24:40,184 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 28 states have (on average 1.1785714285714286) internal successors, (33), 28 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:40,184 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 33 transitions. [2022-11-25 23:24:40,185 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 33 transitions. Word has length 23 [2022-11-25 23:24:40,185 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:24:40,185 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 33 transitions. [2022-11-25 23:24:40,185 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 1.9230769230769231) internal successors, (50), 25 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:40,186 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2022-11-25 23:24:40,186 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-25 23:24:40,186 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:24:40,186 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1] [2022-11-25 23:24:40,195 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2022-11-25 23:24:40,391 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-25 23:24:40,391 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:24:40,392 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:24:40,392 INFO L85 PathProgramCache]: Analyzing trace with hash 196554470, now seen corresponding path program 5 times [2022-11-25 23:24:40,392 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:24:40,392 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1183469059] [2022-11-25 23:24:40,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:40,393 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:24:40,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:40,686 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 1 proven. 26 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:40,686 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:24:40,686 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1183469059] [2022-11-25 23:24:40,687 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1183469059] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:24:40,687 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1472941880] [2022-11-25 23:24:40,687 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:24:40,687 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:24:40,687 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:24:40,688 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:24:40,715 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-25 23:24:40,783 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-11-25 23:24:40,784 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:24:40,785 INFO L263 TraceCheckSpWp]: Trace formula consists of 160 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-25 23:24:40,787 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:24:40,956 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:40,956 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:24:41,134 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-25 23:24:41,199 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:41,199 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1472941880] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:24:41,199 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [954795864] [2022-11-25 23:24:41,201 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:24:41,201 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:24:41,201 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:24:41,201 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:24:41,201 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:24:41,215 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-11-25 23:24:41,243 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:24:41,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:41,321 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:41,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:41,862 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:24:43,713 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1442#(and (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (<= 0 |ULTIMATE.start_cstrreplace_~numReplaced~0#1|) (<= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrreplace_~p~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|))) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 1 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |#NULL.base| 0) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.offset|) (<= 0 |#NULL.offset|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 0 |#StackHeapBarrier|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)) (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.offset|))' at error location [2022-11-25 23:24:43,714 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:24:43,714 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:24:43,714 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 9] total 22 [2022-11-25 23:24:43,714 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [615684439] [2022-11-25 23:24:43,715 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:24:43,715 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-11-25 23:24:43,715 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:24:43,716 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-11-25 23:24:43,716 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=133, Invalid=797, Unknown=0, NotChecked=0, Total=930 [2022-11-25 23:24:43,717 INFO L87 Difference]: Start difference. First operand 29 states and 33 transitions. Second operand has 24 states, 23 states have (on average 2.9130434782608696) internal successors, (67), 23 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:43,999 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:24:43,999 INFO L93 Difference]: Finished difference Result 40 states and 46 transitions. [2022-11-25 23:24:44,004 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-25 23:24:44,004 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 23 states have (on average 2.9130434782608696) internal successors, (67), 23 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-25 23:24:44,004 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:24:44,005 INFO L225 Difference]: With dead ends: 40 [2022-11-25 23:24:44,005 INFO L226 Difference]: Without dead ends: 40 [2022-11-25 23:24:44,005 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 87 GetRequests, 48 SyntacticMatches, 4 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 386 ImplicationChecksByTransitivity, 2.3s TimeCoverageRelationStatistics Valid=226, Invalid=1106, Unknown=0, NotChecked=0, Total=1332 [2022-11-25 23:24:44,006 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 225 mSDsluCounter, 55 mSDsCounter, 0 mSdLazyCounter, 177 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 225 SdHoareTripleChecker+Valid, 68 SdHoareTripleChecker+Invalid, 178 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 177 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:24:44,006 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [225 Valid, 68 Invalid, 178 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 177 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:24:44,007 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40 states. [2022-11-25 23:24:44,008 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40 to 35. [2022-11-25 23:24:44,008 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 34 states have (on average 1.1764705882352942) internal successors, (40), 34 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:44,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 40 transitions. [2022-11-25 23:24:44,009 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 40 transitions. Word has length 25 [2022-11-25 23:24:44,009 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:24:44,009 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 40 transitions. [2022-11-25 23:24:44,009 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 23 states have (on average 2.9130434782608696) internal successors, (67), 23 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:44,009 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 40 transitions. [2022-11-25 23:24:44,010 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-25 23:24:44,010 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:24:44,010 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1] [2022-11-25 23:24:44,022 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2022-11-25 23:24:44,217 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:24:44,218 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:24:44,218 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:24:44,218 INFO L85 PathProgramCache]: Analyzing trace with hash -1257588642, now seen corresponding path program 6 times [2022-11-25 23:24:44,218 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:24:44,219 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1718407482] [2022-11-25 23:24:44,219 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:44,219 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:24:44,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:44,622 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 13 proven. 30 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:44,622 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:24:44,622 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1718407482] [2022-11-25 23:24:44,622 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1718407482] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:24:44,623 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [834039822] [2022-11-25 23:24:44,623 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:24:44,623 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:24:44,623 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:24:44,627 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:24:44,643 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-25 23:24:44,714 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:24:44,714 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:24:44,716 INFO L263 TraceCheckSpWp]: Trace formula consists of 178 conjuncts, 42 conjunts are in the unsatisfiable core [2022-11-25 23:24:44,718 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:24:44,837 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:45,012 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-25 23:24:45,015 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 13 proven. 30 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:45,015 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:24:45,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-25 23:24:45,075 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-25 23:24:45,187 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 13 proven. 30 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:45,187 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [834039822] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:24:45,187 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1335507132] [2022-11-25 23:24:45,189 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:24:45,189 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:24:45,189 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:24:45,190 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:24:45,190 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:24:45,202 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-11-25 23:24:45,230 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:24:45,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:45,290 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:45,328 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:45,790 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:24:47,731 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1733#(and (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (<= 0 |ULTIMATE.start_cstrreplace_~numReplaced~0#1|) (<= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrreplace_~p~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|))) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 1 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |#NULL.base| 0) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.offset|) (<= 0 |#NULL.offset|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 0 |#StackHeapBarrier|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)) (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.offset|))' at error location [2022-11-25 23:24:47,732 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:24:47,732 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:24:47,732 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 22 [2022-11-25 23:24:47,732 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1080801733] [2022-11-25 23:24:47,732 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:24:47,733 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-25 23:24:47,733 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:24:47,733 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-25 23:24:47,734 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=92, Invalid=778, Unknown=0, NotChecked=0, Total=870 [2022-11-25 23:24:47,734 INFO L87 Difference]: Start difference. First operand 35 states and 40 transitions. Second operand has 23 states, 23 states have (on average 2.3043478260869565) internal successors, (53), 22 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:48,162 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:24:48,162 INFO L93 Difference]: Finished difference Result 59 states and 67 transitions. [2022-11-25 23:24:48,162 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-25 23:24:48,162 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 2.3043478260869565) internal successors, (53), 22 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-11-25 23:24:48,163 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:24:48,163 INFO L225 Difference]: With dead ends: 59 [2022-11-25 23:24:48,163 INFO L226 Difference]: Without dead ends: 38 [2022-11-25 23:24:48,164 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 109 GetRequests, 69 SyntacticMatches, 3 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 1 DeprecatedPredicates, 269 ImplicationChecksByTransitivity, 2.5s TimeCoverageRelationStatistics Valid=174, Invalid=1308, Unknown=0, NotChecked=0, Total=1482 [2022-11-25 23:24:48,165 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 77 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 305 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 129 SdHoareTripleChecker+Invalid, 311 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 305 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:24:48,165 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 129 Invalid, 311 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 305 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:24:48,165 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-25 23:24:48,167 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 37. [2022-11-25 23:24:48,167 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 36 states have (on average 1.1666666666666667) internal successors, (42), 36 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:48,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 42 transitions. [2022-11-25 23:24:48,168 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 42 transitions. Word has length 30 [2022-11-25 23:24:48,168 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:24:48,168 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 42 transitions. [2022-11-25 23:24:48,168 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 2.3043478260869565) internal successors, (53), 22 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:48,169 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 42 transitions. [2022-11-25 23:24:48,169 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-25 23:24:48,169 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:24:48,169 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1] [2022-11-25 23:24:48,182 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-25 23:24:48,374 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-11-25 23:24:48,375 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:24:48,375 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:24:48,375 INFO L85 PathProgramCache]: Analyzing trace with hash 1921831306, now seen corresponding path program 7 times [2022-11-25 23:24:48,376 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:24:48,376 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [825211251] [2022-11-25 23:24:48,376 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:48,376 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:24:48,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:48,915 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 4 proven. 46 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:48,915 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:24:48,915 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [825211251] [2022-11-25 23:24:48,916 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [825211251] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:24:48,916 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1972103585] [2022-11-25 23:24:48,916 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:24:48,916 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:24:48,916 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:24:48,918 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:24:48,939 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-25 23:24:49,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:49,004 INFO L263 TraceCheckSpWp]: Trace formula consists of 191 conjuncts, 35 conjunts are in the unsatisfiable core [2022-11-25 23:24:49,006 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:24:49,206 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 9 proven. 41 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:49,206 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:24:49,434 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-25 23:24:49,520 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 9 proven. 41 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:49,521 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1972103585] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:24:49,521 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1837040317] [2022-11-25 23:24:49,522 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:24:49,523 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:24:49,523 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:24:49,523 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:24:49,523 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:24:49,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-11-25 23:24:49,562 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:24:49,588 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:49,620 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:49,655 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:50,102 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:24:51,968 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2065#(and (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (<= 0 |ULTIMATE.start_cstrreplace_~numReplaced~0#1|) (<= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrreplace_~p~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|))) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 1 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |#NULL.base| 0) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.offset|) (<= 0 |#NULL.offset|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 0 |#StackHeapBarrier|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)) (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.offset|))' at error location [2022-11-25 23:24:51,968 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:24:51,968 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:24:51,969 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 23 [2022-11-25 23:24:51,969 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [915400983] [2022-11-25 23:24:51,969 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:24:51,969 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-11-25 23:24:51,969 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:24:51,970 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-11-25 23:24:51,970 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=128, Invalid=864, Unknown=0, NotChecked=0, Total=992 [2022-11-25 23:24:51,971 INFO L87 Difference]: Start difference. First operand 37 states and 42 transitions. Second operand has 25 states, 24 states have (on average 2.9166666666666665) internal successors, (70), 24 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:52,355 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:24:52,355 INFO L93 Difference]: Finished difference Result 48 states and 55 transitions. [2022-11-25 23:24:52,356 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-25 23:24:52,356 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 24 states have (on average 2.9166666666666665) internal successors, (70), 24 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2022-11-25 23:24:52,356 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:24:52,356 INFO L225 Difference]: With dead ends: 48 [2022-11-25 23:24:52,357 INFO L226 Difference]: Without dead ends: 48 [2022-11-25 23:24:52,357 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 111 GetRequests, 69 SyntacticMatches, 5 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 421 ImplicationChecksByTransitivity, 2.5s TimeCoverageRelationStatistics Valid=240, Invalid=1242, Unknown=0, NotChecked=0, Total=1482 [2022-11-25 23:24:52,358 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 173 mSDsluCounter, 105 mSDsCounter, 0 mSdLazyCounter, 291 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 173 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 292 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 291 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:24:52,358 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [173 Valid, 120 Invalid, 292 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 291 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:24:52,358 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48 states. [2022-11-25 23:24:52,363 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48 to 43. [2022-11-25 23:24:52,363 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 42 states have (on average 1.1666666666666667) internal successors, (49), 42 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:52,364 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 49 transitions. [2022-11-25 23:24:52,364 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 49 transitions. Word has length 32 [2022-11-25 23:24:52,364 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:24:52,364 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 49 transitions. [2022-11-25 23:24:52,365 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 24 states have (on average 2.9166666666666665) internal successors, (70), 24 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:52,365 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 49 transitions. [2022-11-25 23:24:52,366 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-25 23:24:52,366 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:24:52,366 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 4, 4, 1, 1, 1, 1] [2022-11-25 23:24:52,374 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-11-25 23:24:52,566 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-11-25 23:24:52,567 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:24:52,567 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:24:52,567 INFO L85 PathProgramCache]: Analyzing trace with hash -733668294, now seen corresponding path program 8 times [2022-11-25 23:24:52,568 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:24:52,568 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1979392420] [2022-11-25 23:24:52,568 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:52,568 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:24:52,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:53,025 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 17 proven. 54 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:53,025 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:24:53,025 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1979392420] [2022-11-25 23:24:53,025 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1979392420] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:24:53,025 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [654086753] [2022-11-25 23:24:53,026 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:24:53,026 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:24:53,026 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:24:53,027 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:24:53,051 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-25 23:24:53,147 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-25 23:24:53,147 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:24:53,149 INFO L263 TraceCheckSpWp]: Trace formula consists of 209 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-25 23:24:53,151 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:24:53,312 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:53,433 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-25 23:24:53,436 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 17 proven. 54 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:53,436 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:24:53,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-25 23:24:53,522 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-25 23:24:53,643 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 17 proven. 54 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:53,643 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [654086753] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:24:53,643 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1565290465] [2022-11-25 23:24:53,645 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:24:53,645 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:24:53,645 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:24:53,646 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:24:53,646 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:24:53,658 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-11-25 23:24:53,681 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:53,707 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:53,728 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:53,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:53,975 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:24:54,526 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2419#(and (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (< (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|) (+ |ULTIMATE.start_cstrreplace_~p~0#1.offset| 1)) (<= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 0 |#StackHeapBarrier|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)) (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.offset|) (= |#NULL.base| 0))' at error location [2022-11-25 23:24:54,526 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:24:54,526 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:24:54,526 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 14, 14] total 25 [2022-11-25 23:24:54,526 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [679658180] [2022-11-25 23:24:54,527 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:24:54,527 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-25 23:24:54,528 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:24:54,529 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-25 23:24:54,530 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=93, Invalid=899, Unknown=0, NotChecked=0, Total=992 [2022-11-25 23:24:54,530 INFO L87 Difference]: Start difference. First operand 43 states and 49 transitions. Second operand has 26 states, 26 states have (on average 2.3846153846153846) internal successors, (62), 25 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:55,063 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:24:55,063 INFO L93 Difference]: Finished difference Result 73 states and 83 transitions. [2022-11-25 23:24:55,064 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-25 23:24:55,064 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 2.3846153846153846) internal successors, (62), 25 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-11-25 23:24:55,064 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:24:55,064 INFO L225 Difference]: With dead ends: 73 [2022-11-25 23:24:55,065 INFO L226 Difference]: Without dead ends: 46 [2022-11-25 23:24:55,065 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 90 SyntacticMatches, 3 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 1 DeprecatedPredicates, 296 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=190, Invalid=1616, Unknown=0, NotChecked=0, Total=1806 [2022-11-25 23:24:55,066 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 99 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 426 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 99 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 435 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 426 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-25 23:24:55,066 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [99 Valid, 191 Invalid, 435 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 426 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-25 23:24:55,067 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2022-11-25 23:24:55,068 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 45. [2022-11-25 23:24:55,069 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 44 states have (on average 1.1590909090909092) internal successors, (51), 44 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:55,069 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 51 transitions. [2022-11-25 23:24:55,069 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 51 transitions. Word has length 37 [2022-11-25 23:24:55,070 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:24:55,070 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 51 transitions. [2022-11-25 23:24:55,070 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 2.3846153846153846) internal successors, (62), 25 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:55,070 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 51 transitions. [2022-11-25 23:24:55,071 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-25 23:24:55,071 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:24:55,071 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 1, 1, 1, 1] [2022-11-25 23:24:55,077 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-25 23:24:55,277 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2022-11-25 23:24:55,277 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:24:55,278 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:24:55,278 INFO L85 PathProgramCache]: Analyzing trace with hash 412653966, now seen corresponding path program 9 times [2022-11-25 23:24:55,278 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:24:55,278 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1128806845] [2022-11-25 23:24:55,278 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:55,278 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:24:55,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:55,728 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:55,728 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:24:55,728 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1128806845] [2022-11-25 23:24:55,728 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1128806845] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:24:55,728 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [969118841] [2022-11-25 23:24:55,728 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-25 23:24:55,729 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:24:55,729 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:24:55,731 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:24:55,759 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-25 23:24:55,845 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-25 23:24:55,845 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:24:55,847 INFO L263 TraceCheckSpWp]: Trace formula consists of 222 conjuncts, 41 conjunts are in the unsatisfiable core [2022-11-25 23:24:55,849 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:24:55,858 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-25 23:24:56,103 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 16 proven. 64 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:56,103 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:24:56,570 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 16 proven. 64 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:56,570 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [969118841] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:24:56,570 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1356526542] [2022-11-25 23:24:56,572 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:24:56,573 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:24:56,573 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:24:56,573 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:24:56,573 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:24:56,588 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-11-25 23:24:56,615 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:56,640 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:56,656 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:56,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:56,888 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:24:57,457 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2828#(and (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (< (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|) (+ |ULTIMATE.start_cstrreplace_~p~0#1.offset| 1)) (<= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 0 |#StackHeapBarrier|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)) (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.offset|) (= |#NULL.base| 0))' at error location [2022-11-25 23:24:57,458 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:24:57,458 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:24:57,458 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 33 [2022-11-25 23:24:57,458 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1828042575] [2022-11-25 23:24:57,458 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:24:57,459 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-11-25 23:24:57,459 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:24:57,459 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-11-25 23:24:57,460 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=208, Invalid=1432, Unknown=0, NotChecked=0, Total=1640 [2022-11-25 23:24:57,460 INFO L87 Difference]: Start difference. First operand 45 states and 51 transitions. Second operand has 35 states, 34 states have (on average 2.823529411764706) internal successors, (96), 34 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:57,847 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:24:57,847 INFO L93 Difference]: Finished difference Result 56 states and 64 transitions. [2022-11-25 23:24:57,847 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-25 23:24:57,848 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 34 states have (on average 2.823529411764706) internal successors, (96), 34 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2022-11-25 23:24:57,848 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:24:57,848 INFO L225 Difference]: With dead ends: 56 [2022-11-25 23:24:57,848 INFO L226 Difference]: Without dead ends: 56 [2022-11-25 23:24:57,849 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 135 GetRequests, 88 SyntacticMatches, 0 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 616 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=404, Invalid=1948, Unknown=0, NotChecked=0, Total=2352 [2022-11-25 23:24:57,850 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 631 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 334 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 631 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 335 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 334 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 23:24:57,850 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [631 Valid, 128 Invalid, 335 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 334 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 23:24:57,851 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2022-11-25 23:24:57,852 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 51. [2022-11-25 23:24:57,853 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 50 states have (on average 1.16) internal successors, (58), 50 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:57,853 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 58 transitions. [2022-11-25 23:24:57,853 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 58 transitions. Word has length 39 [2022-11-25 23:24:57,853 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:24:57,853 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 58 transitions. [2022-11-25 23:24:57,854 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 34 states have (on average 2.823529411764706) internal successors, (96), 34 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:24:57,854 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 58 transitions. [2022-11-25 23:24:57,854 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-25 23:24:57,855 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:24:57,855 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 5, 5, 1, 1, 1, 1] [2022-11-25 23:24:57,863 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-25 23:24:58,060 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2022-11-25 23:24:58,061 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:24:58,061 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:24:58,061 INFO L85 PathProgramCache]: Analyzing trace with hash -1926646090, now seen corresponding path program 10 times [2022-11-25 23:24:58,061 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:24:58,061 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1248840215] [2022-11-25 23:24:58,061 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:24:58,061 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:24:58,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:58,645 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 21 proven. 85 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:58,646 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:24:58,646 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1248840215] [2022-11-25 23:24:58,646 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1248840215] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:24:58,646 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1630436746] [2022-11-25 23:24:58,646 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-25 23:24:58,646 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:24:58,647 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:24:58,648 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:24:58,659 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-25 23:24:58,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:24:58,759 INFO L263 TraceCheckSpWp]: Trace formula consists of 240 conjuncts, 54 conjunts are in the unsatisfiable core [2022-11-25 23:24:58,761 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:24:58,959 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:59,092 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-11-25 23:24:59,095 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 21 proven. 85 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:59,095 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:24:59,177 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-11-25 23:24:59,179 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-25 23:24:59,319 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 21 proven. 85 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:24:59,319 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1630436746] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:24:59,319 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [731014537] [2022-11-25 23:24:59,321 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:24:59,321 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:24:59,321 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:24:59,322 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:24:59,322 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:24:59,340 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-11-25 23:24:59,366 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:59,391 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:59,406 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:59,441 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:24:59,627 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:25:00,222 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3244#(and (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (< (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|) (+ |ULTIMATE.start_cstrreplace_~p~0#1.offset| 1)) (<= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 0 |#StackHeapBarrier|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)) (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.offset|) (= |#NULL.base| 0))' at error location [2022-11-25 23:25:00,223 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:25:00,223 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:25:00,223 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16, 16] total 28 [2022-11-25 23:25:00,223 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [914123509] [2022-11-25 23:25:00,223 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:25:00,224 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-11-25 23:25:00,224 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:25:00,224 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-11-25 23:25:00,225 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=100, Invalid=1090, Unknown=0, NotChecked=0, Total=1190 [2022-11-25 23:25:00,225 INFO L87 Difference]: Start difference. First operand 51 states and 58 transitions. Second operand has 29 states, 29 states have (on average 2.4482758620689653) internal successors, (71), 28 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:25:00,916 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:25:00,916 INFO L93 Difference]: Finished difference Result 87 states and 99 transitions. [2022-11-25 23:25:00,916 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-25 23:25:00,916 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 2.4482758620689653) internal successors, (71), 28 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 44 [2022-11-25 23:25:00,917 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:25:00,917 INFO L225 Difference]: With dead ends: 87 [2022-11-25 23:25:00,917 INFO L226 Difference]: Without dead ends: 54 [2022-11-25 23:25:00,918 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 159 GetRequests, 110 SyntacticMatches, 3 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 1 DeprecatedPredicates, 352 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=212, Invalid=2044, Unknown=0, NotChecked=0, Total=2256 [2022-11-25 23:25:00,918 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 84 mSDsluCounter, 276 mSDsCounter, 0 mSdLazyCounter, 658 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 292 SdHoareTripleChecker+Invalid, 669 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 658 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-25 23:25:00,919 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 292 Invalid, 669 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 658 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-25 23:25:00,919 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2022-11-25 23:25:00,921 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 53. [2022-11-25 23:25:00,921 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 52 states have (on average 1.1538461538461537) internal successors, (60), 52 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:25:00,922 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 60 transitions. [2022-11-25 23:25:00,922 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 60 transitions. Word has length 44 [2022-11-25 23:25:00,922 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:25:00,922 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 60 transitions. [2022-11-25 23:25:00,923 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 2.4482758620689653) internal successors, (71), 28 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:25:00,923 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 60 transitions. [2022-11-25 23:25:00,923 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-25 23:25:00,924 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 23:25:00,924 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 1, 1, 1, 1] [2022-11-25 23:25:00,938 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2022-11-25 23:25:01,129 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2022-11-25 23:25:01,129 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2022-11-25 23:25:01,130 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 23:25:01,130 INFO L85 PathProgramCache]: Analyzing trace with hash 1581404898, now seen corresponding path program 11 times [2022-11-25 23:25:01,130 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-25 23:25:01,130 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [11114437] [2022-11-25 23:25:01,130 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 23:25:01,131 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 23:25:01,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 23:25:01,755 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 16 proven. 101 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 23:25:01,755 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-25 23:25:01,756 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [11114437] [2022-11-25 23:25:01,756 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [11114437] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 23:25:01,756 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [994895504] [2022-11-25 23:25:01,756 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-25 23:25:01,756 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:25:01,756 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 [2022-11-25 23:25:01,758 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 23:25:01,763 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-25 23:25:02,008 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-11-25 23:25:02,008 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-25 23:25:02,011 INFO L263 TraceCheckSpWp]: Trace formula consists of 253 conjuncts, 41 conjunts are in the unsatisfiable core [2022-11-25 23:25:02,013 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 23:25:02,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-25 23:25:02,169 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-25 23:25:02,912 INFO L321 Elim1Store]: treesize reduction 4, result has 73.3 percent of original size [2022-11-25 23:25:02,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 22 treesize of output 19 [2022-11-25 23:25:03,019 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 10 proven. 22 refuted. 0 times theorem prover too weak. 85 trivial. 0 not checked. [2022-11-25 23:25:03,019 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 23:25:03,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-11-25 23:25:03,542 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-11-25 23:25:03,683 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 6 proven. 26 refuted. 0 times theorem prover too weak. 85 trivial. 0 not checked. [2022-11-25 23:25:03,683 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [994895504] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 23:25:03,683 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2024625439] [2022-11-25 23:25:03,685 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-11-25 23:25:03,685 INFO L166 IcfgInterpreter]: Building call graph [2022-11-25 23:25:03,685 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-25 23:25:03,685 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-25 23:25:03,685 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-25 23:25:03,698 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-11-25 23:25:03,722 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-25 23:25:03,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:25:03,772 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:25:03,806 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-25 23:25:04,247 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-25 23:25:06,228 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3716#(and (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (<= 0 |ULTIMATE.start_cstrreplace_~numReplaced~0#1|) (<= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrreplace_~p~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|))) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 1 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |#NULL.base| 0) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrreplace_~s#1.offset|) (<= 0 |#NULL.offset|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 0 |#StackHeapBarrier|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)) (<= 0 |ULTIMATE.start_cstrreplace_#in~s#1.offset|))' at error location [2022-11-25 23:25:06,228 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-25 23:25:06,228 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 23:25:06,228 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 7, 7] total 28 [2022-11-25 23:25:06,228 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1987014454] [2022-11-25 23:25:06,228 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 23:25:06,233 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-25 23:25:06,233 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-25 23:25:06,235 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-25 23:25:06,235 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=156, Invalid=1176, Unknown=0, NotChecked=0, Total=1332 [2022-11-25 23:25:06,235 INFO L87 Difference]: Start difference. First operand 53 states and 60 transitions. Second operand has 30 states, 29 states have (on average 2.7586206896551726) internal successors, (80), 29 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:25:08,841 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 23:25:08,841 INFO L93 Difference]: Finished difference Result 64 states and 72 transitions. [2022-11-25 23:25:08,841 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-25 23:25:08,841 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 29 states have (on average 2.7586206896551726) internal successors, (80), 29 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 46 [2022-11-25 23:25:08,842 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 23:25:08,842 INFO L225 Difference]: With dead ends: 64 [2022-11-25 23:25:08,842 INFO L226 Difference]: Without dead ends: 0 [2022-11-25 23:25:08,843 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 180 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 735 ImplicationChecksByTransitivity, 4.7s TimeCoverageRelationStatistics Valid=861, Invalid=3561, Unknown=0, NotChecked=0, Total=4422 [2022-11-25 23:25:08,843 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 353 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 515 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 353 SdHoareTripleChecker+Valid, 126 SdHoareTripleChecker+Invalid, 535 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 515 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-25 23:25:08,844 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [353 Valid, 126 Invalid, 535 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 515 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-25 23:25:08,844 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-25 23:25:08,844 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-25 23:25:08,844 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:25:08,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-25 23:25:08,845 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 46 [2022-11-25 23:25:08,845 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 23:25:08,845 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-25 23:25:08,845 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 29 states have (on average 2.7586206896551726) internal successors, (80), 29 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 23:25:08,845 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-25 23:25:08,845 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-25 23:25:08,847 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE (10 of 11 remaining) [2022-11-25 23:25:08,848 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE (9 of 11 remaining) [2022-11-25 23:25:08,848 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (8 of 11 remaining) [2022-11-25 23:25:08,848 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE (7 of 11 remaining) [2022-11-25 23:25:08,848 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr4REQUIRES_VIOLATIONMEMORY_DEREFERENCE (6 of 11 remaining) [2022-11-25 23:25:08,849 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE (5 of 11 remaining) [2022-11-25 23:25:08,849 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr6REQUIRES_VIOLATIONMEMORY_DEREFERENCE (4 of 11 remaining) [2022-11-25 23:25:08,849 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE (3 of 11 remaining) [2022-11-25 23:25:08,849 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE (2 of 11 remaining) [2022-11-25 23:25:08,850 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE (1 of 11 remaining) [2022-11-25 23:25:08,850 INFO L805 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr10ASSERT_VIOLATIONMEMORY_LEAK (0 of 11 remaining) [2022-11-25 23:25:08,857 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-11-25 23:25:09,056 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 23:25:09,058 INFO L445 BasicCegarLoop]: Path program histogram: [11, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 23:25:09,061 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-25 23:25:09,063 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 25.11 11:25:09 BoogieIcfgContainer [2022-11-25 23:25:09,064 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-25 23:25:09,064 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-25 23:25:09,064 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-25 23:25:09,064 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-25 23:25:09,065 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 11:24:22" (3/4) ... [2022-11-25 23:25:09,068 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-25 23:25:09,077 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 17 nodes and edges [2022-11-25 23:25:09,077 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-25 23:25:09,078 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-25 23:25:09,078 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-25 23:25:09,110 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/witness.graphml [2022-11-25 23:25:09,110 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-25 23:25:09,111 INFO L158 Benchmark]: Toolchain (without parser) took 47801.29ms. Allocated memory was 142.6MB in the beginning and 469.8MB in the end (delta: 327.2MB). Free memory was 111.1MB in the beginning and 275.5MB in the end (delta: -164.4MB). Peak memory consumption was 165.8MB. Max. memory is 16.1GB. [2022-11-25 23:25:09,111 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 142.6MB. Free memory is still 115.3MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-25 23:25:09,111 INFO L158 Benchmark]: CACSL2BoogieTranslator took 395.90ms. Allocated memory is still 142.6MB. Free memory was 110.6MB in the beginning and 94.9MB in the end (delta: 15.7MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2022-11-25 23:25:09,112 INFO L158 Benchmark]: Boogie Procedure Inliner took 59.64ms. Allocated memory is still 142.6MB. Free memory was 94.9MB in the beginning and 92.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-25 23:25:09,112 INFO L158 Benchmark]: Boogie Preprocessor took 62.52ms. Allocated memory is still 142.6MB. Free memory was 92.8MB in the beginning and 91.7MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-25 23:25:09,112 INFO L158 Benchmark]: RCFGBuilder took 482.55ms. Allocated memory is still 142.6MB. Free memory was 91.2MB in the beginning and 76.0MB in the end (delta: 15.2MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2022-11-25 23:25:09,113 INFO L158 Benchmark]: TraceAbstraction took 46747.56ms. Allocated memory was 142.6MB in the beginning and 469.8MB in the end (delta: 327.2MB). Free memory was 75.5MB in the beginning and 278.7MB in the end (delta: -203.2MB). Peak memory consumption was 126.0MB. Max. memory is 16.1GB. [2022-11-25 23:25:09,113 INFO L158 Benchmark]: Witness Printer took 46.19ms. Allocated memory is still 469.8MB. Free memory was 278.7MB in the beginning and 275.5MB in the end (delta: 3.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-25 23:25:09,114 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 142.6MB. Free memory is still 115.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 395.90ms. Allocated memory is still 142.6MB. Free memory was 110.6MB in the beginning and 94.9MB in the end (delta: 15.7MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 59.64ms. Allocated memory is still 142.6MB. Free memory was 94.9MB in the beginning and 92.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 62.52ms. Allocated memory is still 142.6MB. Free memory was 92.8MB in the beginning and 91.7MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 482.55ms. Allocated memory is still 142.6MB. Free memory was 91.2MB in the beginning and 76.0MB in the end (delta: 15.2MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 46747.56ms. Allocated memory was 142.6MB in the beginning and 469.8MB in the end (delta: 327.2MB). Free memory was 75.5MB in the beginning and 278.7MB in the end (delta: -203.2MB). Peak memory consumption was 126.0MB. Max. memory is 16.1GB. * Witness Printer took 46.19ms. Allocated memory is still 469.8MB. Free memory was 278.7MB in the beginning and 275.5MB in the end (delta: 3.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: -1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: -1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: -1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: -1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: -1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: -1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: -1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: -1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: -1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: -1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 526]: all allocated memory was freed For all program executions holds that all allocated memory was freed at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 24 locations, 11 error locations. Started 1 CEGAR loops. OverallTime: 46.7s, OverallIterations: 19, TraceHistogramMax: 6, PathProgramHistogramMax: 11, EmptinessCheckTime: 0.0s, AutomataDifference: 7.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2208 SdHoareTripleChecker+Valid, 2.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2208 mSDsluCounter, 1458 SdHoareTripleChecker+Invalid, 2.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1250 mSDsCounter, 76 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3529 IncrementalHoareTripleChecker+Invalid, 3605 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 76 mSolverCounterUnsat, 208 mSDtfsCounter, 3529 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1203 GetRequests, 717 SyntacticMatches, 24 SemanticMatches, 462 ConstructedPredicates, 0 IntricatePredicates, 4 DeprecatedPredicates, 4048 ImplicationChecksByTransitivity, 24.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=53occurred in iteration=18, InterpolantAutomatonStates: 201, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 19 MinimizatonAttempts, 92 StatesRemovedByMinimization, 14 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.7s SatisfiabilityAnalysisTime, 12.6s InterpolantComputationTime, 685 NumberOfCodeBlocks, 685 NumberOfCodeBlocksAsserted, 50 NumberOfCheckSat, 968 ConstructedInterpolants, 75 QuantifiedInterpolants, 10511 SizeOfPredicates, 145 NumberOfNonLiveVariables, 1991 ConjunctsInSsa, 417 ConjunctsInUnsatCore, 43 InterpolantComputations, 7 PerfectInterpolantSequences, 473/1618 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 11 specifications checked. All of them hold RESULT: Ultimate proved your program to be correct! [2022-11-25 23:25:09,141 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cf151d5e-6013-47a6-afc0-a1f34160f310/bin/utaipan-ByfvJB40ur/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE