./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/email_spec0_product10.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/email_spec0_product10.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ac360da941eb2bc713d1cdb41b6939d6a50ea394a41fda87a7330709a6b33058 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 07:42:46,592 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 07:42:46,594 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 07:42:46,606 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 07:42:46,607 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 07:42:46,607 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 07:42:46,608 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 07:42:46,609 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 07:42:46,610 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 07:42:46,611 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 07:42:46,611 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 07:42:46,612 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 07:42:46,612 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 07:42:46,613 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 07:42:46,614 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 07:42:46,614 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 07:42:46,615 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 07:42:46,615 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 07:42:46,616 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 07:42:46,617 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 07:42:46,618 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 07:42:46,619 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 07:42:46,620 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 07:42:46,620 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 07:42:46,627 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 07:42:46,628 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 07:42:46,628 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 07:42:46,629 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 07:42:46,629 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 07:42:46,630 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 07:42:46,630 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 07:42:46,630 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 07:42:46,631 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 07:42:46,631 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 07:42:46,632 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 07:42:46,632 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 07:42:46,633 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 07:42:46,633 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 07:42:46,633 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 07:42:46,633 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 07:42:46,634 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 07:42:46,635 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-12-14 07:42:46,650 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 07:42:46,650 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 07:42:46,650 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 07:42:46,650 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 07:42:46,651 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 07:42:46,651 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 07:42:46,651 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 07:42:46,656 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 07:42:46,656 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 07:42:46,656 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 07:42:46,656 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 07:42:46,656 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 07:42:46,656 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 07:42:46,656 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 07:42:46,656 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 07:42:46,656 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 07:42:46,656 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 07:42:46,657 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 07:42:46,657 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 07:42:46,657 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 07:42:46,657 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 07:42:46,657 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 07:42:46,657 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 07:42:46,658 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-14 07:42:46,658 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 07:42:46,658 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-14 07:42:46,658 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 07:42:46,658 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-14 07:42:46,658 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 07:42:46,658 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-14 07:42:46,658 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 07:42:46,658 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 07:42:46,658 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 07:42:46,659 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 07:42:46,659 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 07:42:46,659 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 07:42:46,659 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-14 07:42:46,659 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 07:42:46,659 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 07:42:46,659 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-14 07:42:46,659 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 07:42:46,659 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ac360da941eb2bc713d1cdb41b6939d6a50ea394a41fda87a7330709a6b33058 [2022-12-14 07:42:46,828 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 07:42:46,847 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 07:42:46,850 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 07:42:46,851 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 07:42:46,851 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 07:42:46,852 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/product-lines/email_spec0_product10.cil.c [2022-12-14 07:42:49,551 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 07:42:49,769 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 07:42:49,770 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/sv-benchmarks/c/product-lines/email_spec0_product10.cil.c [2022-12-14 07:42:49,781 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/data/1bea5bac4/382c1d42ac774b068a87d9ff40de20ab/FLAGa1224e901 [2022-12-14 07:42:49,791 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/data/1bea5bac4/382c1d42ac774b068a87d9ff40de20ab [2022-12-14 07:42:49,793 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 07:42:49,794 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 07:42:49,795 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 07:42:49,795 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 07:42:49,799 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 07:42:49,799 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 07:42:49" (1/1) ... [2022-12-14 07:42:49,800 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3742db82 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:42:49, skipping insertion in model container [2022-12-14 07:42:49,800 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 07:42:49" (1/1) ... [2022-12-14 07:42:49,806 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 07:42:49,842 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 07:42:49,968 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/sv-benchmarks/c/product-lines/email_spec0_product10.cil.c[2842,2855] [2022-12-14 07:42:49,974 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 07:42:50,036 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 07:42:50,038 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 07:42:50,044 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 07:42:50,045 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 07:42:50,059 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 07:42:50,060 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 07:42:50,147 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 07:42:50,157 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 07:42:50,168 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/sv-benchmarks/c/product-lines/email_spec0_product10.cil.c[2842,2855] [2022-12-14 07:42:50,168 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 07:42:50,183 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 07:42:50,184 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 07:42:50,186 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 07:42:50,187 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 07:42:50,188 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 07:42:50,189 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 07:42:50,221 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 07:42:50,237 INFO L208 MainTranslator]: Completed translation [2022-12-14 07:42:50,237 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:42:50 WrapperNode [2022-12-14 07:42:50,238 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 07:42:50,238 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 07:42:50,238 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 07:42:50,239 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 07:42:50,244 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:42:50" (1/1) ... [2022-12-14 07:42:50,259 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:42:50" (1/1) ... [2022-12-14 07:42:50,283 INFO L138 Inliner]: procedures = 110, calls = 135, calls flagged for inlining = 40, calls inlined = 33, statements flattened = 617 [2022-12-14 07:42:50,284 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 07:42:50,284 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 07:42:50,284 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 07:42:50,284 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 07:42:50,291 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:42:50" (1/1) ... [2022-12-14 07:42:50,291 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:42:50" (1/1) ... [2022-12-14 07:42:50,294 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:42:50" (1/1) ... [2022-12-14 07:42:50,294 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:42:50" (1/1) ... [2022-12-14 07:42:50,300 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:42:50" (1/1) ... [2022-12-14 07:42:50,304 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:42:50" (1/1) ... [2022-12-14 07:42:50,306 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:42:50" (1/1) ... [2022-12-14 07:42:50,307 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:42:50" (1/1) ... [2022-12-14 07:42:50,310 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 07:42:50,311 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 07:42:50,311 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 07:42:50,311 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 07:42:50,311 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:42:50" (1/1) ... [2022-12-14 07:42:50,316 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 07:42:50,325 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:42:50,336 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 07:42:50,337 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 07:42:50,362 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailTo [2022-12-14 07:42:50,362 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailTo [2022-12-14 07:42:50,362 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailFrom [2022-12-14 07:42:50,362 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailFrom [2022-12-14 07:42:50,363 INFO L130 BoogieDeclarations]: Found specification of procedure isReadable [2022-12-14 07:42:50,363 INFO L138 BoogieDeclarations]: Found implementation of procedure isReadable [2022-12-14 07:42:50,363 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2022-12-14 07:42:50,363 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailFrom [2022-12-14 07:42:50,363 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailFrom [2022-12-14 07:42:50,363 INFO L130 BoogieDeclarations]: Found specification of procedure queue [2022-12-14 07:42:50,363 INFO L138 BoogieDeclarations]: Found implementation of procedure queue [2022-12-14 07:42:50,363 INFO L130 BoogieDeclarations]: Found specification of procedure setClientId [2022-12-14 07:42:50,363 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientId [2022-12-14 07:42:50,363 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-14 07:42:50,363 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing [2022-12-14 07:42:50,364 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing [2022-12-14 07:42:50,364 INFO L130 BoogieDeclarations]: Found specification of procedure sendEmail [2022-12-14 07:42:50,364 INFO L138 BoogieDeclarations]: Found implementation of procedure sendEmail [2022-12-14 07:42:50,364 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailTo [2022-12-14 07:42:50,364 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailTo [2022-12-14 07:42:50,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-14 07:42:50,364 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 07:42:50,364 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 07:42:50,491 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 07:42:50,493 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 07:42:50,856 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 07:42:51,003 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 07:42:51,003 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-12-14 07:42:51,006 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 07:42:51 BoogieIcfgContainer [2022-12-14 07:42:51,006 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 07:42:51,009 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 07:42:51,009 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 07:42:51,014 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 07:42:51,014 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 07:42:49" (1/3) ... [2022-12-14 07:42:51,015 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@785d3fdc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 07:42:51, skipping insertion in model container [2022-12-14 07:42:51,015 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:42:50" (2/3) ... [2022-12-14 07:42:51,016 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@785d3fdc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 07:42:51, skipping insertion in model container [2022-12-14 07:42:51,016 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 07:42:51" (3/3) ... [2022-12-14 07:42:51,017 INFO L112 eAbstractionObserver]: Analyzing ICFG email_spec0_product10.cil.c [2022-12-14 07:42:51,036 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 07:42:51,037 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-14 07:42:51,086 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 07:42:51,092 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@fab61ed, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 07:42:51,093 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-14 07:42:51,097 INFO L276 IsEmpty]: Start isEmpty. Operand has 92 states, 62 states have (on average 1.4838709677419355) internal successors, (92), 64 states have internal predecessors, (92), 19 states have call successors, (19), 9 states have call predecessors, (19), 9 states have return successors, (19), 19 states have call predecessors, (19), 19 states have call successors, (19) [2022-12-14 07:42:51,106 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-12-14 07:42:51,107 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:42:51,107 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:42:51,108 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 07:42:51,113 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:42:51,113 INFO L85 PathProgramCache]: Analyzing trace with hash -1075945581, now seen corresponding path program 1 times [2022-12-14 07:42:51,122 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:42:51,123 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1268176273] [2022-12-14 07:42:51,123 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:42:51,124 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:42:51,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:42:51,387 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-12-14 07:42:51,388 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:42:51,388 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1268176273] [2022-12-14 07:42:51,389 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1268176273] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:42:51,389 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 07:42:51,389 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 07:42:51,390 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2091504329] [2022-12-14 07:42:51,391 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:42:51,395 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-14 07:42:51,396 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:42:51,424 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-14 07:42:51,425 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 07:42:51,426 INFO L87 Difference]: Start difference. First operand has 92 states, 62 states have (on average 1.4838709677419355) internal successors, (92), 64 states have internal predecessors, (92), 19 states have call successors, (19), 9 states have call predecessors, (19), 9 states have return successors, (19), 19 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-12-14 07:42:51,501 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:42:51,501 INFO L93 Difference]: Finished difference Result 150 states and 202 transitions. [2022-12-14 07:42:51,502 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-14 07:42:51,503 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 48 [2022-12-14 07:42:51,504 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:42:51,512 INFO L225 Difference]: With dead ends: 150 [2022-12-14 07:42:51,512 INFO L226 Difference]: Without dead ends: 89 [2022-12-14 07:42:51,515 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 07:42:51,519 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 07:42:51,519 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 105 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 07:42:51,535 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2022-12-14 07:42:51,557 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 89. [2022-12-14 07:42:51,558 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 60 states have (on average 1.4333333333333333) internal successors, (86), 61 states have internal predecessors, (86), 19 states have call successors, (19), 9 states have call predecessors, (19), 9 states have return successors, (18), 18 states have call predecessors, (18), 18 states have call successors, (18) [2022-12-14 07:42:51,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 123 transitions. [2022-12-14 07:42:51,561 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 123 transitions. Word has length 48 [2022-12-14 07:42:51,562 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:42:51,563 INFO L495 AbstractCegarLoop]: Abstraction has 89 states and 123 transitions. [2022-12-14 07:42:51,563 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-12-14 07:42:51,563 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 123 transitions. [2022-12-14 07:42:51,566 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-12-14 07:42:51,566 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:42:51,566 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:42:51,566 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 07:42:51,566 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 07:42:51,567 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:42:51,567 INFO L85 PathProgramCache]: Analyzing trace with hash 1118932520, now seen corresponding path program 1 times [2022-12-14 07:42:51,567 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:42:51,567 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [63878676] [2022-12-14 07:42:51,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:42:51,567 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:42:51,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:42:51,720 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-12-14 07:42:51,721 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:42:51,721 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [63878676] [2022-12-14 07:42:51,721 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [63878676] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:42:51,721 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 07:42:51,721 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 07:42:51,722 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [24723322] [2022-12-14 07:42:51,722 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:42:51,723 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 07:42:51,723 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:42:51,724 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 07:42:51,724 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 07:42:51,724 INFO L87 Difference]: Start difference. First operand 89 states and 123 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-12-14 07:42:51,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:42:51,788 INFO L93 Difference]: Finished difference Result 146 states and 190 transitions. [2022-12-14 07:42:51,788 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 07:42:51,789 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 49 [2022-12-14 07:42:51,789 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:42:51,790 INFO L225 Difference]: With dead ends: 146 [2022-12-14 07:42:51,790 INFO L226 Difference]: Without dead ends: 91 [2022-12-14 07:42:51,791 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 07:42:51,792 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 0 mSDsluCounter, 101 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 203 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 07:42:51,793 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 203 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 07:42:51,793 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-12-14 07:42:51,802 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2022-12-14 07:42:51,802 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 62 states have (on average 1.4193548387096775) internal successors, (88), 63 states have internal predecessors, (88), 19 states have call successors, (19), 9 states have call predecessors, (19), 9 states have return successors, (18), 18 states have call predecessors, (18), 18 states have call successors, (18) [2022-12-14 07:42:51,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 125 transitions. [2022-12-14 07:42:51,804 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 125 transitions. Word has length 49 [2022-12-14 07:42:51,804 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:42:51,804 INFO L495 AbstractCegarLoop]: Abstraction has 91 states and 125 transitions. [2022-12-14 07:42:51,805 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-12-14 07:42:51,805 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 125 transitions. [2022-12-14 07:42:51,806 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-12-14 07:42:51,806 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:42:51,806 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:42:51,807 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-14 07:42:51,807 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 07:42:51,807 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:42:51,807 INFO L85 PathProgramCache]: Analyzing trace with hash -1657068475, now seen corresponding path program 1 times [2022-12-14 07:42:51,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:42:51,808 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [796182234] [2022-12-14 07:42:51,808 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:42:51,808 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:42:51,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:42:51,914 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-12-14 07:42:51,914 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:42:51,915 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [796182234] [2022-12-14 07:42:51,915 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [796182234] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:42:51,915 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [455575652] [2022-12-14 07:42:51,915 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:42:51,915 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:42:51,915 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:42:51,917 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:42:51,918 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 07:42:52,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:42:52,109 INFO L263 TraceCheckSpWp]: Trace formula consists of 797 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 07:42:52,115 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:42:52,163 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-12-14 07:42:52,163 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:42:52,213 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-12-14 07:42:52,214 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [455575652] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:42:52,214 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1987367311] [2022-12-14 07:42:52,234 INFO L159 IcfgInterpreter]: Started Sifa with 44 locations of interest [2022-12-14 07:42:52,234 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:42:52,238 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:42:52,241 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:42:52,241 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:42:57,862 INFO L197 IcfgInterpreter]: Interpreting procedure setClientId with input of size 451 for LOIs [2022-12-14 07:42:58,158 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:43:14,097 WARN L233 SmtUtils]: Spent 5.04s on a formula simplification. DAG size of input: 573 DAG size of output: 309 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 07:43:19,348 WARN L233 SmtUtils]: Spent 5.07s on a formula simplification. DAG size of input: 575 DAG size of output: 309 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 07:43:20,022 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1987367311] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:43:20,023 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:43:20,023 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [4, 4, 4] total 19 [2022-12-14 07:43:20,024 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2005676715] [2022-12-14 07:43:20,024 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:43:20,024 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-12-14 07:43:20,024 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:43:20,025 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-12-14 07:43:20,025 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=58, Invalid=284, Unknown=0, NotChecked=0, Total=342 [2022-12-14 07:43:20,026 INFO L87 Difference]: Start difference. First operand 91 states and 125 transitions. Second operand has 14 states, 10 states have (on average 2.8) internal successors, (28), 9 states have internal predecessors, (28), 4 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) [2022-12-14 07:43:22,479 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:43:22,479 INFO L93 Difference]: Finished difference Result 244 states and 379 transitions. [2022-12-14 07:43:22,479 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-12-14 07:43:22,480 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 10 states have (on average 2.8) internal successors, (28), 9 states have internal predecessors, (28), 4 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) Word has length 53 [2022-12-14 07:43:22,480 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:43:22,481 INFO L225 Difference]: With dead ends: 244 [2022-12-14 07:43:22,482 INFO L226 Difference]: Without dead ends: 165 [2022-12-14 07:43:22,482 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 161 GetRequests, 144 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 84 ImplicationChecksByTransitivity, 21.9s TimeCoverageRelationStatistics Valid=58, Invalid=284, Unknown=0, NotChecked=0, Total=342 [2022-12-14 07:43:22,483 INFO L413 NwaCegarLoop]: 146 mSDtfsCounter, 96 mSDsluCounter, 1337 mSDsCounter, 0 mSdLazyCounter, 812 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 1483 SdHoareTripleChecker+Invalid, 822 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 812 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2022-12-14 07:43:22,483 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 1483 Invalid, 822 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 812 Invalid, 0 Unknown, 0 Unchecked, 2.3s Time] [2022-12-14 07:43:22,483 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2022-12-14 07:43:22,517 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 112. [2022-12-14 07:43:22,518 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 112 states, 83 states have (on average 1.4457831325301205) internal successors, (120), 84 states have internal predecessors, (120), 19 states have call successors, (19), 9 states have call predecessors, (19), 9 states have return successors, (18), 18 states have call predecessors, (18), 18 states have call successors, (18) [2022-12-14 07:43:22,519 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 112 states to 112 states and 157 transitions. [2022-12-14 07:43:22,519 INFO L78 Accepts]: Start accepts. Automaton has 112 states and 157 transitions. Word has length 53 [2022-12-14 07:43:22,519 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:43:22,519 INFO L495 AbstractCegarLoop]: Abstraction has 112 states and 157 transitions. [2022-12-14 07:43:22,519 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 10 states have (on average 2.8) internal successors, (28), 9 states have internal predecessors, (28), 4 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) [2022-12-14 07:43:22,519 INFO L276 IsEmpty]: Start isEmpty. Operand 112 states and 157 transitions. [2022-12-14 07:43:22,520 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-12-14 07:43:22,520 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:43:22,520 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:43:22,527 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 07:43:22,721 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:43:22,722 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 07:43:22,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:43:22,724 INFO L85 PathProgramCache]: Analyzing trace with hash 1196607454, now seen corresponding path program 1 times [2022-12-14 07:43:22,724 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:43:22,725 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [232416311] [2022-12-14 07:43:22,726 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:43:22,726 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:43:22,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:43:22,826 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-12-14 07:43:22,826 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:43:22,826 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [232416311] [2022-12-14 07:43:22,826 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [232416311] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:43:22,826 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 07:43:22,826 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 07:43:22,827 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1627536238] [2022-12-14 07:43:22,827 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:43:22,827 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 07:43:22,827 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:43:22,828 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 07:43:22,828 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 07:43:22,828 INFO L87 Difference]: Start difference. First operand 112 states and 157 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-12-14 07:43:22,931 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:43:22,931 INFO L93 Difference]: Finished difference Result 260 states and 379 transitions. [2022-12-14 07:43:22,931 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 07:43:22,932 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 54 [2022-12-14 07:43:22,932 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:43:22,933 INFO L225 Difference]: With dead ends: 260 [2022-12-14 07:43:22,933 INFO L226 Difference]: Without dead ends: 162 [2022-12-14 07:43:22,934 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 07:43:22,935 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 46 mSDsluCounter, 98 mSDsCounter, 0 mSdLazyCounter, 44 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 45 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 44 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 07:43:22,935 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 200 Invalid, 45 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 44 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 07:43:22,936 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2022-12-14 07:43:23,001 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 157. [2022-12-14 07:43:23,002 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 128 states have (on average 1.5234375) internal successors, (195), 129 states have internal predecessors, (195), 19 states have call successors, (19), 9 states have call predecessors, (19), 9 states have return successors, (18), 18 states have call predecessors, (18), 18 states have call successors, (18) [2022-12-14 07:43:23,003 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 232 transitions. [2022-12-14 07:43:23,003 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 232 transitions. Word has length 54 [2022-12-14 07:43:23,003 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:43:23,004 INFO L495 AbstractCegarLoop]: Abstraction has 157 states and 232 transitions. [2022-12-14 07:43:23,004 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (11), 2 states have call predecessors, (11), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-12-14 07:43:23,004 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 232 transitions. [2022-12-14 07:43:23,006 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-12-14 07:43:23,006 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:43:23,006 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:43:23,006 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-14 07:43:23,006 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 07:43:23,007 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:43:23,007 INFO L85 PathProgramCache]: Analyzing trace with hash 81626542, now seen corresponding path program 1 times [2022-12-14 07:43:23,007 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:43:23,007 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1556295673] [2022-12-14 07:43:23,007 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:43:23,007 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:43:23,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:43:23,104 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-12-14 07:43:23,104 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:43:23,105 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1556295673] [2022-12-14 07:43:23,105 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1556295673] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:43:23,105 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2061488618] [2022-12-14 07:43:23,105 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:43:23,105 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:43:23,105 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:43:23,106 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:43:23,107 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 07:43:23,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:43:23,251 INFO L263 TraceCheckSpWp]: Trace formula consists of 814 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 07:43:23,254 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:43:23,267 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-12-14 07:43:23,267 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:43:23,293 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-12-14 07:43:23,293 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2061488618] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:43:23,293 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [72263468] [2022-12-14 07:43:23,295 INFO L159 IcfgInterpreter]: Started Sifa with 46 locations of interest [2022-12-14 07:43:23,296 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:43:23,296 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:43:23,296 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:43:23,296 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:43:32,917 INFO L197 IcfgInterpreter]: Interpreting procedure setClientId with input of size 451 for LOIs [2022-12-14 07:43:33,214 INFO L197 IcfgInterpreter]: Interpreting procedure sendEmail with input of size 249 for LOIs [2022-12-14 07:43:34,620 INFO L197 IcfgInterpreter]: Interpreting procedure outgoing with input of size 251 for LOIs [2022-12-14 07:43:36,510 INFO L197 IcfgInterpreter]: Interpreting procedure getEmailTo with input of size 242 for LOIs [2022-12-14 07:43:36,546 INFO L197 IcfgInterpreter]: Interpreting procedure setEmailTo with input of size 239 for LOIs [2022-12-14 07:43:36,587 INFO L197 IcfgInterpreter]: Interpreting procedure setEmailFrom with input of size 478 for LOIs [2022-12-14 07:43:38,384 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:44:00,248 WARN L233 SmtUtils]: Spent 11.50s on a formula simplification. DAG size of input: 584 DAG size of output: 453 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 07:44:07,698 WARN L233 SmtUtils]: Spent 7.26s on a formula simplification. DAG size of input: 586 DAG size of output: 332 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 07:44:12,918 WARN L233 SmtUtils]: Spent 5.00s on a formula simplification. DAG size of input: 558 DAG size of output: 369 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 07:44:27,876 WARN L233 SmtUtils]: Spent 7.18s on a formula simplification. DAG size of input: 478 DAG size of output: 365 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 07:44:44,469 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [72263468] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:44:44,469 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:44:44,469 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [33] imperfect sequences [4, 4, 4] total 39 [2022-12-14 07:44:44,469 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [188326323] [2022-12-14 07:44:44,469 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:44:44,470 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2022-12-14 07:44:44,470 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:44:44,470 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2022-12-14 07:44:44,470 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=104, Invalid=1378, Unknown=0, NotChecked=0, Total=1482 [2022-12-14 07:44:44,471 INFO L87 Difference]: Start difference. First operand 157 states and 232 transitions. Second operand has 34 states, 22 states have (on average 1.3636363636363635) internal successors, (30), 20 states have internal predecessors, (30), 10 states have call successors, (11), 7 states have call predecessors, (11), 5 states have return successors, (9), 8 states have call predecessors, (9), 8 states have call successors, (9) [2022-12-14 07:45:06,637 WARN L233 SmtUtils]: Spent 5.81s on a formula simplification. DAG size of input: 527 DAG size of output: 446 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 07:45:14,357 WARN L233 SmtUtils]: Spent 7.29s on a formula simplification. DAG size of input: 594 DAG size of output: 448 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 07:45:19,569 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:45:19,570 INFO L93 Difference]: Finished difference Result 399 states and 634 transitions. [2022-12-14 07:45:19,570 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2022-12-14 07:45:19,570 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 22 states have (on average 1.3636363636363635) internal successors, (30), 20 states have internal predecessors, (30), 10 states have call successors, (11), 7 states have call predecessors, (11), 5 states have return successors, (9), 8 states have call predecessors, (9), 8 states have call successors, (9) Word has length 55 [2022-12-14 07:45:19,570 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:45:19,571 INFO L225 Difference]: With dead ends: 399 [2022-12-14 07:45:19,572 INFO L226 Difference]: Without dead ends: 297 [2022-12-14 07:45:19,573 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 174 GetRequests, 130 SyntacticMatches, 0 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 424 ImplicationChecksByTransitivity, 94.7s TimeCoverageRelationStatistics Valid=166, Invalid=1904, Unknown=0, NotChecked=0, Total=2070 [2022-12-14 07:45:19,574 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 222 mSDsluCounter, 2022 mSDsCounter, 0 mSdLazyCounter, 2002 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 223 SdHoareTripleChecker+Valid, 2137 SdHoareTripleChecker+Invalid, 2019 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 2002 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.2s IncrementalHoareTripleChecker+Time [2022-12-14 07:45:19,574 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [223 Valid, 2137 Invalid, 2019 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [17 Valid, 2002 Invalid, 0 Unknown, 0 Unchecked, 6.2s Time] [2022-12-14 07:45:19,575 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297 states. [2022-12-14 07:45:19,684 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297 to 184. [2022-12-14 07:45:19,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 184 states, 146 states have (on average 1.4931506849315068) internal successors, (218), 147 states have internal predecessors, (218), 25 states have call successors, (25), 14 states have call predecessors, (25), 12 states have return successors, (24), 22 states have call predecessors, (24), 24 states have call successors, (24) [2022-12-14 07:45:19,685 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 184 states to 184 states and 267 transitions. [2022-12-14 07:45:19,685 INFO L78 Accepts]: Start accepts. Automaton has 184 states and 267 transitions. Word has length 55 [2022-12-14 07:45:19,685 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:45:19,685 INFO L495 AbstractCegarLoop]: Abstraction has 184 states and 267 transitions. [2022-12-14 07:45:19,685 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 22 states have (on average 1.3636363636363635) internal successors, (30), 20 states have internal predecessors, (30), 10 states have call successors, (11), 7 states have call predecessors, (11), 5 states have return successors, (9), 8 states have call predecessors, (9), 8 states have call successors, (9) [2022-12-14 07:45:19,685 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 267 transitions. [2022-12-14 07:45:19,686 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-12-14 07:45:19,686 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:45:19,686 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:45:19,692 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-14 07:45:19,887 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:45:19,888 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 07:45:19,889 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:45:19,890 INFO L85 PathProgramCache]: Analyzing trace with hash -1439190553, now seen corresponding path program 1 times [2022-12-14 07:45:19,890 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:45:19,890 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [628400797] [2022-12-14 07:45:19,891 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:45:19,891 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:45:19,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:45:19,987 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-12-14 07:45:19,988 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:45:19,988 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [628400797] [2022-12-14 07:45:19,988 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [628400797] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:45:19,988 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [292354403] [2022-12-14 07:45:19,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:45:19,988 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:45:19,988 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:45:19,989 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:45:19,995 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-14 07:45:20,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:45:20,132 INFO L263 TraceCheckSpWp]: Trace formula consists of 813 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 07:45:20,135 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:45:20,149 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-12-14 07:45:20,149 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:45:20,175 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-12-14 07:45:20,175 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [292354403] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:45:20,175 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [799857145] [2022-12-14 07:45:20,177 INFO L159 IcfgInterpreter]: Started Sifa with 48 locations of interest [2022-12-14 07:45:20,177 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:45:20,177 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:45:20,177 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:45:20,177 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:45:29,161 INFO L197 IcfgInterpreter]: Interpreting procedure setClientId with input of size 451 for LOIs [2022-12-14 07:45:29,457 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:45:50,717 WARN L233 SmtUtils]: Spent 11.81s on a formula simplification. DAG size of input: 581 DAG size of output: 448 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 07:45:56,280 WARN L233 SmtUtils]: Spent 5.37s on a formula simplification. DAG size of input: 583 DAG size of output: 313 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 07:46:02,665 WARN L233 SmtUtils]: Spent 6.21s on a formula simplification. DAG size of input: 570 DAG size of output: 416 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 07:46:09,022 WARN L233 SmtUtils]: Spent 6.17s on a formula simplification. DAG size of input: 568 DAG size of output: 425 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 07:46:14,962 WARN L233 SmtUtils]: Spent 5.74s on a formula simplification. DAG size of input: 568 DAG size of output: 421 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 07:46:21,296 WARN L233 SmtUtils]: Spent 6.12s on a formula simplification. DAG size of input: 566 DAG size of output: 419 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 07:46:21,993 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [799857145] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:46:21,993 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:46:21,993 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [17] imperfect sequences [4, 4, 4] total 23 [2022-12-14 07:46:21,994 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1527629783] [2022-12-14 07:46:21,994 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:46:21,994 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-12-14 07:46:21,994 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:46:21,995 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-12-14 07:46:21,995 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=88, Invalid=418, Unknown=0, NotChecked=0, Total=506 [2022-12-14 07:46:21,996 INFO L87 Difference]: Start difference. First operand 184 states and 267 transitions. Second operand has 18 states, 14 states have (on average 2.2857142857142856) internal successors, (32), 13 states have internal predecessors, (32), 4 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) [2022-12-14 07:46:24,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:46:24,175 INFO L93 Difference]: Finished difference Result 414 states and 652 transitions. [2022-12-14 07:46:24,175 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-12-14 07:46:24,175 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 14 states have (on average 2.2857142857142856) internal successors, (32), 13 states have internal predecessors, (32), 4 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) Word has length 57 [2022-12-14 07:46:24,176 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:46:24,177 INFO L225 Difference]: With dead ends: 414 [2022-12-14 07:46:24,177 INFO L226 Difference]: Without dead ends: 312 [2022-12-14 07:46:24,177 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 152 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 113 ImplicationChecksByTransitivity, 52.5s TimeCoverageRelationStatistics Valid=88, Invalid=418, Unknown=0, NotChecked=0, Total=506 [2022-12-14 07:46:24,178 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 126 mSDsluCounter, 818 mSDsCounter, 0 mSdLazyCounter, 631 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 923 SdHoareTripleChecker+Invalid, 640 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 631 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-12-14 07:46:24,178 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [126 Valid, 923 Invalid, 640 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 631 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2022-12-14 07:46:24,178 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 312 states. [2022-12-14 07:46:24,323 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 312 to 194. [2022-12-14 07:46:24,324 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 194 states, 156 states have (on average 1.4935897435897436) internal successors, (233), 157 states have internal predecessors, (233), 25 states have call successors, (25), 14 states have call predecessors, (25), 12 states have return successors, (24), 22 states have call predecessors, (24), 24 states have call successors, (24) [2022-12-14 07:46:24,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 282 transitions. [2022-12-14 07:46:24,324 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 282 transitions. Word has length 57 [2022-12-14 07:46:24,325 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:46:24,325 INFO L495 AbstractCegarLoop]: Abstraction has 194 states and 282 transitions. [2022-12-14 07:46:24,325 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 14 states have (on average 2.2857142857142856) internal successors, (32), 13 states have internal predecessors, (32), 4 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) [2022-12-14 07:46:24,325 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 282 transitions. [2022-12-14 07:46:24,326 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-12-14 07:46:24,326 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:46:24,326 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:46:24,331 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-14 07:46:24,526 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2022-12-14 07:46:24,527 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 07:46:24,528 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:46:24,528 INFO L85 PathProgramCache]: Analyzing trace with hash 1121156065, now seen corresponding path program 1 times [2022-12-14 07:46:24,529 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:46:24,529 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [554110371] [2022-12-14 07:46:24,529 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:46:24,529 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:46:24,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:46:24,652 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-12-14 07:46:24,652 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:46:24,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [554110371] [2022-12-14 07:46:24,652 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [554110371] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:46:24,652 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 07:46:24,653 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-14 07:46:24,653 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1014611442] [2022-12-14 07:46:24,653 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:46:24,653 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 07:46:24,653 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:46:24,654 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 07:46:24,654 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-14 07:46:24,654 INFO L87 Difference]: Start difference. First operand 194 states and 282 transitions. Second operand has 6 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) [2022-12-14 07:46:25,044 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:46:25,045 INFO L93 Difference]: Finished difference Result 196 states and 285 transitions. [2022-12-14 07:46:25,045 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 07:46:25,045 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) Word has length 58 [2022-12-14 07:46:25,045 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:46:25,046 INFO L225 Difference]: With dead ends: 196 [2022-12-14 07:46:25,046 INFO L226 Difference]: Without dead ends: 0 [2022-12-14 07:46:25,046 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-14 07:46:25,047 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 61 mSDsluCounter, 329 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 427 SdHoareTripleChecker+Invalid, 115 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 07:46:25,047 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 427 Invalid, 115 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 07:46:25,048 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-14 07:46:25,048 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-14 07:46:25,048 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:46:25,048 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-14 07:46:25,048 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 58 [2022-12-14 07:46:25,049 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:46:25,049 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-14 07:46:25,049 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) [2022-12-14 07:46:25,049 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-14 07:46:25,049 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-14 07:46:25,051 INFO L805 garLoopResultBuilder]: Registering result SAFE for location outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-14 07:46:25,051 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-12-14 07:46:25,053 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-14 07:47:03,228 WARN L233 SmtUtils]: Spent 15.68s on a formula simplification. DAG size of input: 601 DAG size of output: 595 (called from [L 149] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.combineInter) [2022-12-14 07:47:17,678 INFO L899 garLoopResultBuilder]: For program point L589(lines 589 595) no Hoare annotation was computed. [2022-12-14 07:47:17,678 INFO L902 garLoopResultBuilder]: At program point L589-2(lines 581 598) the Hoare annotation is: true [2022-12-14 07:47:17,678 INFO L899 garLoopResultBuilder]: For program point L135(lines 135 141) no Hoare annotation was computed. [2022-12-14 07:47:17,678 INFO L895 garLoopResultBuilder]: At program point L135-2(lines 127 144) the Hoare annotation is: (not (= |outgoing___utac_acc__DecryptForward_spec__1_~tmp~0#1| 0)) [2022-12-14 07:47:17,679 INFO L895 garLoopResultBuilder]: At program point L1482(line 1482) the Hoare annotation is: (not (= |outgoing___utac_acc__DecryptForward_spec__1_~tmp~0#1| 0)) [2022-12-14 07:47:17,679 INFO L899 garLoopResultBuilder]: For program point L1482-1(line 1482) no Hoare annotation was computed. [2022-12-14 07:47:17,679 INFO L895 garLoopResultBuilder]: At program point L120(line 120) the Hoare annotation is: false [2022-12-14 07:47:17,682 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 549 560) the Hoare annotation is: (or (not (<= 1 |outgoing_#in~client#1|)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~bob~0 |outgoing_#in~client#1|)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-12-14 07:47:17,682 INFO L899 garLoopResultBuilder]: For program point L609(lines 609 616) no Hoare annotation was computed. [2022-12-14 07:47:17,684 INFO L895 garLoopResultBuilder]: At program point L543(line 543) the Hoare annotation is: (or (not (<= 1 |outgoing_#in~client#1|)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (and (= |outgoing_mail_#in~client#1| |outgoing_~client#1|) (= |outgoing_mail_~msg#1| |outgoing_mail_#in~msg#1|) (<= 0 (+ 2147483648 |outgoing_getClientId_#res#1|)) (= |outgoing_mail_#in~client#1| |outgoing_mail_~client#1|) (<= ~queued_message~0 0) (<= ~__ste_email_from0~0 2147483647) (<= 1 |outgoing_~client#1|) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (<= |outgoing_getClientId_#res#1| 2147483647) (<= ~queue_empty~0 1) (<= 0 (+ |outgoing_getClientId_~retValue_acc~41#1| 2147483648)) (<= 1 |outgoing_getClientId_~handle#1|) (<= ~__ste_client_idCounter0~0 2147483647) (<= 1 ~queue_empty~0) (<= 0 ~queued_message~0) (<= |outgoing_getClientId_#in~handle#1| 1) (<= 1 |outgoing_~msg#1|) (= |outgoing_mail_#in~msg#1| |outgoing_~msg#1|) (<= 0 ~queued_client~0) (<= 0 (+ |outgoing_~tmp~5#1| 2147483648)) (<= |outgoing_~tmp~5#1| 2147483647) (<= |outgoing_getClientId_~retValue_acc~41#1| 2147483647) (<= |outgoing_~msg#1| 1) (<= 1 |outgoing_getClientId_#in~handle#1|) (<= |outgoing_getClientId_~handle#1| 1) (<= |outgoing_~client#1| 1) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= ~queued_client~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~bob~0 |outgoing_#in~client#1|)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-12-14 07:47:17,684 INFO L902 garLoopResultBuilder]: At program point L609-2(lines 599 619) the Hoare annotation is: true [2022-12-14 07:47:17,686 INFO L895 garLoopResultBuilder]: At program point L543-1(line 543) the Hoare annotation is: (or (not (<= 1 |outgoing_#in~client#1|)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (and (<= 1 |outgoing_mail_#in~client#1|) (<= |outgoing_mail_#in~msg#1| 1) (<= 0 (+ 2147483648 |outgoing_getClientId_#res#1|)) (<= 1 |outgoing_mail_~msg#1|) (<= ~queued_message~0 0) (<= ~__ste_email_from0~0 2147483647) (<= 1 |outgoing_~client#1|) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (<= 2 |outgoing_mail_#t~ret32#1|) (<= |outgoing_getClientId_#res#1| 2147483647) (<= ~queue_empty~0 1) (<= 0 (+ |outgoing_getClientId_~retValue_acc~41#1| 2147483648)) (<= 1 |outgoing_getClientId_~handle#1|) (<= 1 |outgoing_mail_#in~msg#1|) (<= ~__ste_client_idCounter0~0 2147483647) (<= |outgoing_mail_#t~ret32#1| 2) (<= 1 ~queue_empty~0) (<= 0 ~queued_message~0) (<= |outgoing_getClientId_#in~handle#1| 1) (<= 1 |outgoing_~msg#1|) (<= |outgoing_mail_~client#1| 1) (<= 0 ~queued_client~0) (<= |outgoing_mail_~msg#1| 1) (<= 0 (+ |outgoing_~tmp~5#1| 2147483648)) (<= |outgoing_mail_#in~client#1| 1) (<= |outgoing_~tmp~5#1| 2147483647) (<= |outgoing_getClientId_~retValue_acc~41#1| 2147483647) (<= |outgoing_~msg#1| 1) (<= 1 |outgoing_getClientId_#in~handle#1|) (<= |outgoing_getClientId_~handle#1| 1) (<= |outgoing_~client#1| 1) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= 1 |outgoing_mail_~client#1|) (<= ~queued_client~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~bob~0 |outgoing_#in~client#1|)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-12-14 07:47:17,686 INFO L902 garLoopResultBuilder]: At program point L692(line 692) the Hoare annotation is: true [2022-12-14 07:47:17,686 INFO L899 garLoopResultBuilder]: For program point L692-1(line 692) no Hoare annotation was computed. [2022-12-14 07:47:17,686 INFO L895 garLoopResultBuilder]: At program point L1485(line 1485) the Hoare annotation is: (not (= |outgoing___utac_acc__DecryptForward_spec__1_~tmp~0#1| 0)) [2022-12-14 07:47:17,686 INFO L895 garLoopResultBuilder]: At program point L1485-1(line 1485) the Hoare annotation is: (not (= |outgoing___utac_acc__DecryptForward_spec__1_~tmp~0#1| 0)) [2022-12-14 07:47:17,686 INFO L895 garLoopResultBuilder]: At program point L709(line 709) the Hoare annotation is: (not (= |outgoing___utac_acc__DecryptForward_spec__1_~tmp~0#1| 0)) [2022-12-14 07:47:17,686 INFO L895 garLoopResultBuilder]: At program point L709-1(lines 700 713) the Hoare annotation is: (not (= |outgoing___utac_acc__DecryptForward_spec__1_~tmp~0#1| 0)) [2022-12-14 07:47:17,686 INFO L902 garLoopResultBuilder]: At program point L611(line 611) the Hoare annotation is: true [2022-12-14 07:47:17,686 INFO L899 garLoopResultBuilder]: For program point L611-1(line 611) no Hoare annotation was computed. [2022-12-14 07:47:17,686 INFO L899 garLoopResultBuilder]: For program point outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION(line 120) no Hoare annotation was computed. [2022-12-14 07:47:17,686 INFO L902 garLoopResultBuilder]: At program point L694(line 694) the Hoare annotation is: true [2022-12-14 07:47:17,687 INFO L902 garLoopResultBuilder]: At program point L694-1(line 694) the Hoare annotation is: true [2022-12-14 07:47:17,687 INFO L895 garLoopResultBuilder]: At program point L1479(line 1479) the Hoare annotation is: (not (= |outgoing___utac_acc__DecryptForward_spec__1_~tmp~0#1| 0)) [2022-12-14 07:47:17,687 INFO L899 garLoopResultBuilder]: For program point L1479-1(line 1479) no Hoare annotation was computed. [2022-12-14 07:47:17,687 INFO L902 garLoopResultBuilder]: At program point L133(line 133) the Hoare annotation is: true [2022-12-14 07:47:17,687 INFO L899 garLoopResultBuilder]: For program point L133-1(line 133) no Hoare annotation was computed. [2022-12-14 07:47:17,687 INFO L902 garLoopResultBuilder]: At program point L695(lines 685 699) the Hoare annotation is: true [2022-12-14 07:47:17,687 INFO L899 garLoopResultBuilder]: For program point outgoingEXIT(lines 549 560) no Hoare annotation was computed. [2022-12-14 07:47:17,688 INFO L895 garLoopResultBuilder]: At program point L555(line 555) the Hoare annotation is: (or (not (<= 1 |outgoing_#in~client#1|)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~bob~0 |outgoing_#in~client#1|)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (and (= |outgoing_getClientId_#in~handle#1| |outgoing_~client#1|) (= ~queued_message~0 |old(~queued_message~0)|) (= |outgoing_getClientId_~retValue_acc~41#1| |outgoing_getClientId_#res#1|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |outgoing_#in~msg#1| |outgoing_~msg#1|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= |outgoing_~tmp~5#1| |outgoing_getClientId_#res#1|) (<= 0 (+ |outgoing_~tmp~5#1| 2147483648)) (= ~queued_client~0 |old(~queued_client~0)|) (= |outgoing_getClientId_#in~handle#1| |outgoing_getClientId_~handle#1|) (= |outgoing_~client#1| |outgoing_#in~client#1|) (<= |outgoing_~tmp~5#1| 2147483647) (= |outgoing_getClientId_~retValue_acc~41#1| ~__ste_client_idCounter0~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-12-14 07:47:17,688 INFO L899 garLoopResultBuilder]: For program point L555-1(line 555) no Hoare annotation was computed. [2022-12-14 07:47:17,690 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 988 1003) the Hoare annotation is: (or (not (= |setEmailTo_#in~value| ~rjh~0)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= ~__ste_email_from0~0 0)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (= ~queued_message~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~queued_client~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= |setEmailTo_#in~handle| 1)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (and (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~queue_empty~0 1)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-12-14 07:47:17,690 INFO L899 garLoopResultBuilder]: For program point setEmailToEXIT(lines 988 1003) no Hoare annotation was computed. [2022-12-14 07:47:17,690 INFO L899 garLoopResultBuilder]: For program point getEmailToEXIT(lines 969 987) no Hoare annotation was computed. [2022-12-14 07:47:17,690 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 969 987) the Hoare annotation is: true [2022-12-14 07:47:17,690 INFO L899 garLoopResultBuilder]: For program point sendEmailEXIT(lines 635 647) no Hoare annotation was computed. [2022-12-14 07:47:17,691 INFO L895 garLoopResultBuilder]: At program point L1518(line 1518) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (and (<= ~queued_message~0 0) (<= 0 ~__ste_email_from0~0) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |sendEmail_createEmail_~from#1| ~__ste_email_from0~0) (<= 0 ~queued_message~0) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (<= 1 |sendEmail_~sender#1|) (<= |sendEmail_~sender#1| 1) (= |old(~queue_empty~0)| ~queue_empty~0) (<= ~__ste_email_from0~0 0) (= ~__ste_email_to0~0 |sendEmail_createEmail_~to#1|) (= ~queued_client~0 |old(~queued_client~0)|) (<= |sendEmail_createEmail_#in~to#1| 2) (<= 2 |sendEmail_createEmail_#in~to#1|) (<= 2 |sendEmail_createEmail_~to#1|) (<= ~__ste_email_to0~0 2) (= 1 |sendEmail_createEmail_~msg~0#1|)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-12-14 07:47:17,693 INFO L895 garLoopResultBuilder]: At program point L1517(line 1517) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= |sendEmail_createEmail_#in~from#1| 0) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_createEmail_~to#1|) (= |sendEmail_#in~sender#1| |sendEmail_~sender#1|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_~receiver#1|) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= 1 |sendEmail_createEmail_~msg~0#1|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-12-14 07:47:17,694 INFO L895 garLoopResultBuilder]: At program point L1517-1(line 1517) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= |sendEmail_createEmail_#in~from#1| 0) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_createEmail_~to#1|) (= |sendEmail_#in~sender#1| |sendEmail_~sender#1|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_~receiver#1|) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= 1 |sendEmail_createEmail_~msg~0#1|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-12-14 07:47:17,694 INFO L899 garLoopResultBuilder]: For program point sendEmailFINAL(lines 635 647) no Hoare annotation was computed. [2022-12-14 07:47:17,696 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 635 647) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-12-14 07:47:17,697 INFO L895 garLoopResultBuilder]: At program point L643(line 643) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (and (= |sendEmail_createEmail_#res#1| |sendEmail_createEmail_~retValue_acc~24#1|) (<= ~queued_message~0 0) (<= 0 ~__ste_email_from0~0) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |sendEmail_createEmail_~from#1| ~__ste_email_from0~0) (= |sendEmail_createEmail_~retValue_acc~24#1| |sendEmail_createEmail_~msg~0#1|) (<= 0 ~queued_message~0) (= |sendEmail_createEmail_#res#1| |sendEmail_~tmp~9#1|) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (<= 1 |sendEmail_~sender#1|) (<= |sendEmail_~sender#1| 1) (= |old(~queue_empty~0)| ~queue_empty~0) (<= ~__ste_email_from0~0 0) (= ~__ste_email_to0~0 |sendEmail_createEmail_~to#1|) (= ~queued_client~0 |old(~queued_client~0)|) (= |sendEmail_~email~0#1| |sendEmail_~tmp~9#1|) (<= |sendEmail_createEmail_#in~to#1| 2) (<= 2 |sendEmail_createEmail_#in~to#1|) (<= 2 |sendEmail_createEmail_~to#1|) (<= ~__ste_email_to0~0 2) (= 1 |sendEmail_createEmail_~msg~0#1|)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-12-14 07:47:17,697 INFO L899 garLoopResultBuilder]: For program point setEmailFromEXIT(lines 951 966) no Hoare annotation was computed. [2022-12-14 07:47:17,699 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 951 966) the Hoare annotation is: (or (and (<= 0 ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (<= ~__ste_email_from0~0 0)) (let ((.cse0 (not (<= ~__ste_client_privateKey0~0 0))) (.cse1 (not (<= 0 ~queued_client~0))) (.cse2 (not (<= 0 ~__ste_email_subject0~0.offset))) (.cse3 (not (<= 0 ~__ste_Client_AddressBook2_Address1~0))) (.cse4 (not (<= 0 ~__ste_email_body0~0.base))) (.cse5 (not (<= ~__ste_email_isEncrypted1~0 0))) (.cse6 (not (<= 0 ~__ste_client_privateKey0~0))) (.cse7 (not (<= ~__ste_email_subject1~0.offset 0))) (.cse8 (not (<= ~__ste_Client_Keyring0_User2~0 0))) (.cse9 (not (<= 0 |old(~__ste_email_from0~0)|))) (.cse10 (not (<= ~__ste_email_signKey1~0 0))) (.cse11 (not (<= ~__SELECTED_FEATURE_Verify~0 0))) (.cse12 (not (<= 0 ~__ste_email_subject1~0.offset))) (.cse13 (not (<= 0 ~__ste_Client_AddressBook1_Address1~0))) (.cse14 (not (<= 0 ~__ste_Client_Keyring0_PublicKey1~0))) (.cse15 (not (<= 0 ~__ste_Client_AddressBook0_Alias0~0))) (.cse16 (not (<= 0 ~head~0.base))) (.cse17 (not (<= 0 ~__ste_ClientKeyring_size2~0))) (.cse18 (not (<= |setEmailFrom_#in~handle| 1))) (.cse19 (not (<= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse20 (not (<= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse21 (not (<= 0 |#NULL.offset|))) (.cse22 (not (<= ~__SELECTED_FEATURE_Sign~0 0))) (.cse23 (not (<= 0 ~__ste_Client_counter~0))) (.cse24 (not (<= ~__ste_client_privateKey1~0 0))) (.cse25 (not (<= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse26 (not (<= 0 ~__ste_client_forwardReceiver1~0))) (.cse27 (not (<= 0 ~__ste_client_privateKey1~0))) (.cse28 (not (<= ~queued_message~0 0))) (.cse29 (not (<= 0 ~__ste_email_id1~0))) (.cse30 (not (<= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse31 (not (<= 3 ~chuck~0))) (.cse32 (not (<= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse33 (not (<= 0 ~__ste_Client_AddressBook2_Address2~0))) (.cse34 (not (<= 0 ~__ste_email_body0~0.offset))) (.cse35 (not (<= ~__ste_ClientAddressBook_size1~0 0))) (.cse36 (not (<= 0 ~__ste_Client_Keyring0_User0~0))) (.cse37 (not (<= 0 ~__ste_email_body1~0.offset))) (.cse38 (not (<= 0 ~__ste_Client_AddressBook2_Alias2~0))) (.cse39 (not (<= 0 ~__ste_email_encryptionKey0~0))) (.cse40 (not (<= 0 ~__ste_client_outbuffer3~0))) (.cse41 (not (<= 0 ~__ste_Client_Keyring1_User2~0))) (.cse42 (not (<= ~__ste_ClientKeyring_size0~0 0))) (.cse43 (not (<= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse44 (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0))) (.cse45 (not (<= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse46 (not (<= 0 ~__ste_Client_AddressBook2_Address0~0))) (.cse47 (not (<= ~__ste_client_outbuffer1~0 0))) (.cse48 (not (<= 0 ~__GUIDSL_ROOT_PRODUCTION~0))) (.cse49 (not (<= ~head~0.base 0))) (.cse50 (not (<= 0 ~__ste_Client_Keyring1_User1~0))) (.cse51 (not (<= ~__ste_email_body1~0.base 0))) (.cse52 (not (<= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse53 (not (<= 0 ~__ste_Client_AddressBook2_Alias0~0))) (.cse54 (not (<= 2 ~rjh~0))) (.cse55 (not (<= ~bob~0 1))) (.cse56 (not (<= ~__ste_client_outbuffer2~0 0))) (.cse57 (not (<= 0 ~__ste_ClientKeyring_size1~0))) (.cse58 (not (<= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse59 (not (<= 0 ~__SELECTED_FEATURE_AutoResponder~0))) (.cse60 (not (<= ~__ste_Client_Keyring1_User1~0 0))) (.cse61 (not (<= ~__ste_ClientAddressBook_size0~0 0))) (.cse62 (not (<= ~rjh~0 2))) (.cse63 (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0))) (.cse64 (not (<= 0 ~__ste_client_name2~0.base))) (.cse65 (not (<= 0 ~__ste_client_outbuffer2~0))) (.cse66 (not (<= 0 ~__ste_email_isSignatureVerified0~0))) (.cse67 (not (<= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse68 (not (<= 0 ~__ste_Client_Keyring2_PublicKey0~0))) (.cse69 (not (<= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse70 (not (<= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse71 (not (<= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse72 (not (<= 0 ~__SELECTED_FEATURE_Decrypt~0))) (.cse73 (not (<= ~__ste_client_name2~0.base 0))) (.cse74 (not (<= 0 ~queued_message~0))) (.cse75 (not (<= 0 ~__ste_email_subject1~0.base))) (.cse76 (not (<= 0 ~__ste_client_name1~0.offset))) (.cse77 (not (<= ~__ste_email_body0~0.base 0))) (.cse78 (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0))) (.cse79 (not (<= 0 ~__ste_Client_Keyring0_PublicKey2~0))) (.cse80 (not (<= ~__ste_email_encryptionKey1~0 0))) (.cse81 (not (<= 0 ~__GUIDSL_NON_TERMINAL_main~0))) (.cse82 (not (<= ~__ste_client_name2~0.offset 0))) (.cse83 (not (<= 1 ~bob~0))) (.cse84 (not (<= ~__ste_email_subject0~0.base 0))) (.cse85 (not (<= 0 ~__ste_Client_Keyring2_User1~0))) (.cse86 (not (<= ~__ste_ClientAddressBook_size2~0 0))) (.cse87 (not (<= 1 |setEmailFrom_#in~handle|))) (.cse88 (not (<= ~head~0.offset 0))) (.cse89 (not (<= 0 ~__SELECTED_FEATURE_Sign~0))) (.cse90 (not (<= 0 ~__ste_client_name2~0.offset))) (.cse91 (not (<= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse92 (not (<= ~__ste_client_forwardReceiver3~0 0))) (.cse93 (not (<= ~__ste_Client_Keyring2_User0~0 0))) (.cse94 (not (<= 0 ~__ste_email_isSignatureVerified1~0))) (.cse95 (not (<= ~__ste_ClientKeyring_size2~0 0))) (.cse96 (not (<= 0 ~__ste_email_signKey1~0))) (.cse97 (not (<= 0 ~__ste_client_outbuffer1~0))) (.cse98 (not (<= 0 ~__ste_ClientAddressBook_size1~0))) (.cse99 (not (<= 0 ~__ste_Client_AddressBook1_Alias1~0))) (.cse100 (not (<= 0 ~__ste_client_name0~0.base))) (.cse101 (not (<= ~__ste_client_outbuffer3~0 0))) (.cse102 (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0))) (.cse103 (not (<= ~__ste_Client_counter~0 0))) (.cse104 (not (<= ~__ste_client_outbuffer0~0 0))) (.cse105 (not (<= ~__ste_client_name0~0.offset 0))) (.cse106 (not (<= ~__ste_email_id1~0 0))) (.cse107 (not (<= ~__ste_client_name1~0.offset 0))) (.cse108 (not (<= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse109 (not (<= ~__ste_client_privateKey2~0 0))) (.cse110 (not (<= 0 ~__ste_email_isSigned0~0))) (.cse111 (not (<= 0 ~__ste_client_autoResponse2~0))) (.cse112 (not (<= 1 ~queue_empty~0))) (.cse113 (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse114 (not (<= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse115 (not (<= 0 ~__ste_client_forwardReceiver0~0))) (.cse116 (not (<= ~__ste_client_autoResponse0~0 0))) (.cse117 (not (<= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse118 (not (<= 0 ~__ste_client_privateKey2~0))) (.cse119 (not (<= ~__ste_ClientKeyring_size1~0 0))) (.cse120 (not (<= ~__ste_client_name0~0.base 0))) (.cse121 (not (<= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse122 (not (<= 0 ~__ste_Client_AddressBook1_Address0~0))) (.cse123 (not (<= 0 ~__ste_Client_Keyring0_User2~0))) (.cse124 (not (<= |#NULL.offset| 0))) (.cse125 (not (<= ~__ste_Client_AddressBook0_Address1~0 0))) (.cse126 (not (<= 0 ~__ste_client_forwardReceiver2~0))) (.cse127 (not (<= ~__ste_email_subject0~0.offset 0))) (.cse128 (not (<= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse129 (not (<= 0 ~__ste_Email_counter~0))) (.cse130 (not (<= 0 ~__SELECTED_FEATURE_Encrypt~0))) (.cse131 (not (<= 0 ~__ste_Client_Keyring2_User0~0))) (.cse132 (not (<= ~__ste_Client_Keyring1_User0~0 0))) (.cse133 (not (<= 0 ~__ste_email_isEncrypted1~0))) (.cse134 (not (<= 0 |#NULL.base|))) (.cse135 (not (<= 0 ~__ste_ClientKeyring_size0~0))) (.cse136 (not (<= ~__ste_Client_AddressBook0_Address2~0 0))) (.cse137 (not (<= ~chuck~0 3))) (.cse138 (not (<= ~__SELECTED_FEATURE_Forward~0 0))) (.cse139 (not (<= 0 ~__SELECTED_FEATURE_Verify~0))) (.cse140 (not (<= ~__ste_Client_Keyring2_User1~0 0))) (.cse141 (not (<= 0 ~__ste_client_forwardReceiver3~0))) (.cse142 (not (<= 0 ~__ste_Client_AddressBook2_Alias1~0))) (.cse143 (not (<= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse144 (not (<= ~__ste_Client_Keyring2_User2~0 0))) (.cse145 (not (<= 0 ~__ste_email_isSigned1~0))) (.cse146 (not (<= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse147 (not (<= 0 ~__ste_email_body1~0.base))) (.cse148 (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0))) (.cse149 (not (<= ~__ste_email_isSigned1~0 0))) (.cse150 (not (<= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse151 (not (<= ~__ste_client_forwardReceiver2~0 0))) (.cse152 (not (<= 0 ~__ste_Client_Keyring2_User2~0))) (.cse153 (not (<= ~__SELECTED_FEATURE_Keys~0 0))) (.cse154 (not (<= 0 ~__ste_Client_Keyring2_PublicKey1~0))) (.cse155 (not (<= 0 ~__SELECTED_FEATURE_Base~0))) (.cse156 (not (<= 0 ~__ste_ClientAddressBook_size2~0))) (.cse157 (not (<= 0 ~__SELECTED_FEATURE_Forward~0))) (.cse158 (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0))) (.cse159 (not (<= ~__ste_email_body0~0.offset 0))) (.cse160 (not (<= 0 ~__ste_client_name1~0.base))) (.cse161 (not (<= ~queue_empty~0 1))) (.cse162 (not (<= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse163 (not (<= ~__ste_Client_AddressBook0_Address0~0 0))) (.cse164 (not (<= 0 ~__ste_email_encryptionKey1~0))) (.cse165 (not (<= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse166 (not (<= ~__ste_client_idCounter2~0 3))) (.cse167 (not (<= 0 ~__ste_Client_Keyring0_User1~0))) (.cse168 (not (<= 0 ~__ste_Client_AddressBook0_Alias1~0))) (.cse169 (not (<= 0 ~__ste_email_id0~0))) (.cse170 (not (<= ~__ste_email_subject1~0.base 0))) (.cse171 (not (<= 0 |#StackHeapBarrier|))) (.cse172 (not (<= ~__ste_email_isSignatureVerified0~0 0))) (.cse173 (not (<= ~__SELECTED_FEATURE_Base~0 0))) (.cse174 (not (<= 0 ~__ste_Client_Keyring1_PublicKey0~0))) (.cse175 (not (<= 0 ~__ste_ClientAddressBook_size0~0))) (.cse176 (not (<= 0 ~__SELECTED_FEATURE_Keys~0))) (.cse177 (not (<= |old(~__ste_email_from0~0)| 0))) (.cse178 (not (<= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse179 (not (<= ~__ste_client_forwardReceiver1~0 0))) (.cse180 (not (<= ~__ste_email_body1~0.offset 0))) (.cse181 (not (<= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse182 (not (<= ~__ste_email_isEncrypted0~0 0))) (.cse183 (not (<= ~__ste_client_autoResponse2~0 0))) (.cse184 (not (<= ~__ste_client_autoResponse1~0 1))) (.cse185 (not (<= ~queued_client~0 0))) (.cse186 (not (<= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse187 (not (<= 0 ~__ste_Client_Keyring1_User0~0))) (.cse188 (not (<= 0 ~__ste_client_name0~0.offset))) (.cse189 (not (<= 0 ~__ste_client_outbuffer0~0))) (.cse190 (not (<= ~__ste_email_encryptionKey0~0 0))) (.cse191 (not (<= 0 ~__ste_client_autoResponse0~0))) (.cse192 (not (<= ~__ste_Client_Keyring0_User0~0 0))) (.cse193 (not (<= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse194 (not (<= 0 ~head~0.offset))) (.cse195 (not (<= |#NULL.base| 0))) (.cse196 (not (<= ~__ste_client_name1~0.base 0))) (.cse197 (not (<= ~__ste_email_isSignatureVerified1~0 0))) (.cse198 (not (<= ~__ste_Email_counter~0 0))) (.cse199 (not (<= 0 ~__ste_email_signKey0~0))) (.cse200 (not (<= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse201 (not (<= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse202 (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse203 (not (<= ~__ste_Client_Keyring1_User2~0 0))) (.cse204 (not (<= 0 ~__ste_Client_Keyring2_PublicKey2~0))) (.cse205 (not (<= ~__ste_Client_Keyring0_User1~0 0))) (.cse206 (not (<= ~__ste_email_isSigned0~0 0))) (.cse207 (not (<= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse208 (not (<= ~__ste_email_id0~0 0))) (.cse209 (not (<= 1 ~__ste_client_autoResponse1~0))) (.cse210 (not (<= 0 ~__ste_Client_Keyring1_PublicKey1~0))) (.cse211 (not (<= ~__ste_email_signKey0~0 0))) (.cse212 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse213 (not (<= 0 ~__ste_email_isEncrypted0~0))) (.cse214 (not (<= 0 ~__ste_Client_AddressBook1_Address2~0))) (.cse215 (not (<= ~__ste_client_forwardReceiver0~0 0))) (.cse216 (not (<= 0 ~__ste_email_subject0~0.base)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (<= |setEmailFrom_#in~value| 2147483647)) .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 (not (<= ~__ste_email_to0~0 2)) .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 (not (<= 2 ~__ste_email_to0~0)) .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120 .cse121 .cse122 .cse123 .cse124 .cse125 .cse126 .cse127 .cse128 .cse129 .cse130 .cse131 .cse132 (not (<= 0 (+ ~__ste_client_idCounter0~0 2147483648))) .cse133 .cse134 .cse135 .cse136 .cse137 .cse138 .cse139 .cse140 .cse141 .cse142 .cse143 .cse144 .cse145 .cse146 .cse147 .cse148 .cse149 .cse150 .cse151 .cse152 .cse153 .cse154 .cse155 .cse156 .cse157 .cse158 .cse159 .cse160 .cse161 .cse162 .cse163 .cse164 .cse165 .cse166 .cse167 .cse168 .cse169 .cse170 .cse171 .cse172 .cse173 .cse174 .cse175 .cse176 .cse177 .cse178 .cse179 .cse180 .cse181 .cse182 .cse183 .cse184 .cse185 .cse186 .cse187 .cse188 .cse189 .cse190 .cse191 .cse192 .cse193 .cse194 .cse195 .cse196 .cse197 .cse198 .cse199 .cse200 .cse201 .cse202 .cse203 .cse204 .cse205 .cse206 .cse207 .cse208 .cse209 .cse210 .cse211 .cse212 .cse213 .cse214 .cse215 .cse216) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 (not (<= ~__ste_email_to0~0 0)) .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 (not (<= 0 ~__ste_email_to0~0)) .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 (not (<= 0 |setEmailFrom_#in~value|)) .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120 .cse121 (not (<= 0 |old(~__ste_email_from1~0)|)) .cse122 .cse123 .cse124 .cse125 .cse126 .cse127 .cse128 .cse129 .cse130 .cse131 .cse132 .cse133 .cse134 .cse135 .cse136 .cse137 .cse138 .cse139 (not (<= |setEmailFrom_#in~value| 0)) .cse140 .cse141 .cse142 .cse143 .cse144 .cse145 .cse146 .cse147 .cse148 .cse149 .cse150 .cse151 .cse152 .cse153 .cse154 .cse155 .cse156 .cse157 .cse158 .cse159 (not (<= |old(~__ste_email_from1~0)| 0)) .cse160 .cse161 .cse162 .cse163 .cse164 .cse165 .cse166 .cse167 .cse168 .cse169 .cse170 .cse171 .cse172 .cse173 .cse174 .cse175 .cse176 .cse177 .cse178 .cse179 .cse180 .cse181 .cse182 .cse183 .cse184 .cse185 .cse186 .cse187 .cse188 .cse189 .cse190 .cse191 .cse192 (not (<= ~__ste_email_to1~0 0)) .cse193 .cse194 .cse195 .cse196 .cse197 .cse198 .cse199 .cse200 .cse201 .cse202 .cse203 .cse204 .cse205 .cse206 .cse207 .cse208 .cse209 .cse210 .cse211 .cse212 .cse213 .cse214 (not (<= 0 ~__ste_email_to1~0)) .cse215 .cse216))) (and (not (= ~__ste_client_idCounter0~0 |setEmailFrom_#in~value|)) (not (= ~__ste_email_to0~0 0)))) [2022-12-14 07:47:17,699 INFO L899 garLoopResultBuilder]: For program point L828(lines 828 835) no Hoare annotation was computed. [2022-12-14 07:47:17,699 INFO L902 garLoopResultBuilder]: At program point L828-2(lines 828 835) the Hoare annotation is: true [2022-12-14 07:47:17,700 INFO L895 garLoopResultBuilder]: At program point L746(line 746) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~10#1|)) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| ~rjh~0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_valid_product_~retValue_acc~2#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= ~__ste_client_idCounter0~0 1) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (<= 1 ~__ste_client_idCounter0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 24) (= |ULTIMATE.start_main_~tmp~12#1| 1) (<= |ULTIMATE.start_main_~retValue_acc~10#1| 2147483647) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 07:47:17,701 INFO L895 garLoopResultBuilder]: At program point L746-1(lines 741 750) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~10#1|)) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (= 0 ~__ste_email_subject0~0.base) (<= ~__ste_client_idCounter1~0 2) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_valid_product_~retValue_acc~2#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 2 ~__ste_client_idCounter1~0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 24) (= |ULTIMATE.start_main_~tmp~12#1| 1) (<= |ULTIMATE.start_main_~retValue_acc~10#1| 2147483647) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 07:47:17,701 INFO L899 garLoopResultBuilder]: For program point L1308(lines 1307 1453) no Hoare annotation was computed. [2022-12-14 07:47:17,701 INFO L899 garLoopResultBuilder]: For program point L1424(lines 1424 1428) no Hoare annotation was computed. [2022-12-14 07:47:17,701 INFO L899 garLoopResultBuilder]: For program point L1391(lines 1391 1395) no Hoare annotation was computed. [2022-12-14 07:47:17,701 INFO L895 garLoopResultBuilder]: At program point $Ultimate##90(lines 1431 1442) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~12#1| 1) [2022-12-14 07:47:17,701 INFO L895 garLoopResultBuilder]: At program point $Ultimate##84(lines 1420 1443) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~12#1| 1) [2022-12-14 07:47:17,701 INFO L895 garLoopResultBuilder]: At program point L1377(lines 1377 1384) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~12#1| 1) [2022-12-14 07:47:17,701 INFO L899 garLoopResultBuilder]: For program point L1344(lines 1344 1348) no Hoare annotation was computed. [2022-12-14 07:47:17,701 INFO L895 garLoopResultBuilder]: At program point $Ultimate##72(lines 1398 1445) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~12#1| 1) [2022-12-14 07:47:17,701 INFO L895 garLoopResultBuilder]: At program point $Ultimate##78(lines 1409 1444) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~12#1| 1) [2022-12-14 07:47:17,702 INFO L895 garLoopResultBuilder]: At program point $Ultimate##66(lines 1387 1446) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~12#1| 1) [2022-12-14 07:47:17,702 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-14 07:47:17,702 INFO L895 garLoopResultBuilder]: At program point L1330(lines 1330 1337) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~12#1| 1) [2022-12-14 07:47:17,702 INFO L895 garLoopResultBuilder]: At program point $Ultimate##51(lines 1373 1447) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~12#1| 1) [2022-12-14 07:47:17,702 INFO L899 garLoopResultBuilder]: For program point L1413(lines 1413 1417) no Hoare annotation was computed. [2022-12-14 07:47:17,702 INFO L895 garLoopResultBuilder]: At program point L769(line 769) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~12#1| 1) [2022-12-14 07:47:17,703 INFO L895 garLoopResultBuilder]: At program point L736(line 736) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 4)) (.cse1 (select |#memory_int| 1))) (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~10#1|)) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= (select |#valid| 30) 1) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (= 10 (select |#length| 18)) (= ~__ste_Client_counter~0 0) (= ~rjh~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= 21 (select |#length| 11)) (= (select |#valid| 26) 1) (= ~__ste_client_autoResponse1~0 0) (= 9 (select |#length| 16)) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= 0 ~__ste_email_subject0~0.base) (= (select .cse0 2) 10) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= (select |#length| 6) 30) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (= (select |#valid| 9) 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= (select |#length| 28) 12) (= ~__ste_email_body1~0.offset 0) (= (select |#length| 15) 30) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= (select |#valid| 11) 1) (= ~__ste_Client_AddressBook1_Address2~0 0) (= (select |#valid| 27) 1) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= |ULTIMATE.start_main_~tmp~12#1| |ULTIMATE.start_valid_product_#res#1|) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= |ULTIMATE.start_setup_bob_#in~bob___0#1| ~bob~0) (= (select |#length| 24) 9) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= 9 (select |#length| 25)) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= 30 (select |#length| 12)) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= 2 (select |#length| 1)) (= ~__ste_client_idCounter1~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= (select |#length| 4) 4) (= 11 (select |#length| 26)) (= ~__ste_email_to0~0 0) (= (select |#valid| 3) 1) (= ~__ste_email_signKey0~0 0) (= (select |#valid| 7) 1) (= 115 (select .cse0 1)) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= 25 (select |#length| 14)) (= ~__SELECTED_FEATURE_Keys~0 0) (= (select |#valid| 18) 1) (= (select |#valid| 22) 1) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= (select |#valid| 24) 1) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= (select |#length| 27) 10) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (= (select |#valid| 12) 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (= |ULTIMATE.start_valid_product_~retValue_acc~2#1| 1) (= (select |#valid| 28) 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= (select .cse0 0) 37) (= (select |#length| 30) 18) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= (select |#valid| 4) 1) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= 9 (select |#length| 13)) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= (select |#valid| 1) 1) (= ~__ste_client_forwardReceiver0~0 0) (= (select |#valid| 20) 1) (= 16 (select |#length| 5)) (= ~__ste_Client_Keyring2_User0~0 0) (= (select .cse0 3) 0) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= (select |#length| 19) 16) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= (select |#length| 29) 10) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= (select |#valid| 21) 1) (= ~__ste_Client_AddressBook1_Address0~0 0) (= 22 (select |#length| 20)) (= ~__ste_client_idCounter2~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (= 28 (select |#length| 2)) (= (select |#length| 17) 25) (= (select |#valid| 14) 1) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= (select |#valid| 0) 0) (= ~__ste_Client_Keyring2_User2~0 0) (= (select |#valid| 25) 1) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= (select .cse1 0) 48) (= ~__ste_email_subject1~0.offset 0) (= (select |#valid| 23) 1) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 30 (select |#length| 9)) (= ~__ste_client_idCounter0~0 0) (= 9 (select |#length| 7)) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= (select |#valid| 19) 1) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= (select |#valid| 16) 1) (= (select |#length| 22) 44) (= |ULTIMATE.start_main_~tmp~12#1| 1) (<= |ULTIMATE.start_main_~retValue_acc~10#1| 2147483647) (= (select |#valid| 6) 1) (= ~chuck~0 0) (= (select .cse1 1) 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= |ULTIMATE.start_setup_bob_#in~bob___0#1| |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_client_outbuffer2~0 0) (= (select |#valid| 29) 1) (= ~__ste_ClientAddressBook_size2~0 0) (= (select |#valid| 17) 1) (= (select |#valid| 10) 1) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= (select |#valid| 8) 1) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= 44 (select |#length| 23)) (= ~__ste_ClientKeyring_size2~0 0) (= (select |#length| 8) 21) (= ~__ste_client_autoResponse2~0 0) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0) (= (select |#length| 21) 21) (= 9 (select |#length| 10)) (= ~__ste_email_signKey1~0 0))) [2022-12-14 07:47:17,703 INFO L895 garLoopResultBuilder]: At program point L769-1(line 769) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~12#1| 1) [2022-12-14 07:47:17,704 INFO L895 garLoopResultBuilder]: At program point L736-1(lines 731 740) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~10#1|)) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~rjh~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_valid_product_~retValue_acc~2#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= ~__ste_client_idCounter0~0 1) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (<= 1 ~__ste_client_idCounter0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= |ULTIMATE.start_main_~tmp~12#1| 1) (<= |ULTIMATE.start_main_~retValue_acc~10#1| 2147483647) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 07:47:17,704 INFO L899 garLoopResultBuilder]: For program point L1315(lines 1315 1452) no Hoare annotation was computed. [2022-12-14 07:47:17,704 INFO L895 garLoopResultBuilder]: At program point $Ultimate##45(lines 1362 1448) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~12#1| 1) [2022-12-14 07:47:17,704 INFO L895 garLoopResultBuilder]: At program point $Ultimate##39(lines 1351 1449) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~12#1| 1) [2022-12-14 07:47:17,704 INFO L895 garLoopResultBuilder]: At program point $Ultimate##33(lines 1340 1450) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~12#1| 1) [2022-12-14 07:47:17,705 INFO L899 garLoopResultBuilder]: For program point L1366(lines 1366 1370) no Hoare annotation was computed. [2022-12-14 07:47:17,705 INFO L895 garLoopResultBuilder]: At program point L772(lines 772 780) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~12#1| 1) [2022-12-14 07:47:17,705 INFO L895 garLoopResultBuilder]: At program point L756(line 756) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~10#1|)) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.offset| 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (= 0 ~__ste_email_subject0~0.base) (<= ~__ste_client_idCounter1~0 2) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| ~chuck~0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| |ULTIMATE.start_setup_chuck_~chuck___0#1|) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= 3 ~chuck~0) (= |ULTIMATE.start_valid_product_~retValue_acc~2#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 2 ~__ste_client_idCounter1~0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.base| 25) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 24) (= |ULTIMATE.start_main_~tmp~12#1| 1) (<= |ULTIMATE.start_main_~retValue_acc~10#1| 2147483647) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 07:47:17,706 INFO L895 garLoopResultBuilder]: At program point L756-1(lines 751 760) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~10#1|)) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.offset| 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (<= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| 3) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (<= ~__ste_client_idCounter2~0 3) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (<= 3 ~__ste_client_idCounter2~0) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= 3 ~chuck~0) (= |ULTIMATE.start_valid_product_~retValue_acc~2#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (<= 3 |ULTIMATE.start_setup_chuck_~chuck___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (<= 3 |ULTIMATE.start_setup_chuck_#in~chuck___0#1|) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.base| 25) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (<= |ULTIMATE.start_setup_chuck_~chuck___0#1| 3) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 24) (= |ULTIMATE.start_main_~tmp~12#1| 1) (<= |ULTIMATE.start_main_~retValue_acc~10#1| 2147483647) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 07:47:17,706 INFO L895 garLoopResultBuilder]: At program point $Ultimate##18(lines 1326 1451) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~12#1| 1) [2022-12-14 07:47:17,707 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(line -1) the Hoare annotation is: true [2022-12-14 07:47:17,707 INFO L899 garLoopResultBuilder]: For program point L1319(lines 1319 1323) no Hoare annotation was computed. [2022-12-14 07:47:17,707 INFO L899 garLoopResultBuilder]: For program point L1435(lines 1435 1439) no Hoare annotation was computed. [2022-12-14 07:47:17,707 INFO L899 garLoopResultBuilder]: For program point L1402(lines 1402 1406) no Hoare annotation was computed. [2022-12-14 07:47:17,707 INFO L895 garLoopResultBuilder]: At program point L1435-1(lines 1307 1453) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~12#1| 1) [2022-12-14 07:47:17,707 INFO L895 garLoopResultBuilder]: At program point L1454(lines 1306 1455) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~12#1| 1) [2022-12-14 07:47:17,707 INFO L899 garLoopResultBuilder]: For program point L1355(lines 1355 1359) no Hoare annotation was computed. [2022-12-14 07:47:17,707 INFO L895 garLoopResultBuilder]: At program point L778(line 778) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~12#1| 1) [2022-12-14 07:47:17,707 INFO L902 garLoopResultBuilder]: At program point L778-1(lines 761 783) the Hoare annotation is: true [2022-12-14 07:47:17,707 INFO L899 garLoopResultBuilder]: For program point getEmailFromEXIT(lines 932 950) no Hoare annotation was computed. [2022-12-14 07:47:17,707 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 932 950) the Hoare annotation is: true [2022-12-14 07:47:17,707 INFO L899 garLoopResultBuilder]: For program point isReadableEXIT(lines 1492 1500) no Hoare annotation was computed. [2022-12-14 07:47:17,707 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1492 1500) the Hoare annotation is: true [2022-12-14 07:47:17,707 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 648 657) the Hoare annotation is: true [2022-12-14 07:47:17,707 INFO L899 garLoopResultBuilder]: For program point queueEXIT(lines 648 657) no Hoare annotation was computed. [2022-12-14 07:47:17,707 INFO L899 garLoopResultBuilder]: For program point setClientIdEXIT(lines 2578 2597) no Hoare annotation was computed. [2022-12-14 07:47:17,707 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 2578 2597) the Hoare annotation is: true [2022-12-14 07:47:17,710 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:47:17,711 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-14 07:47:17,748 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.12 07:47:17 BoogieIcfgContainer [2022-12-14 07:47:17,748 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-14 07:47:17,748 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-14 07:47:17,748 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-14 07:47:17,748 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-14 07:47:17,749 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 07:42:51" (3/4) ... [2022-12-14 07:47:17,751 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-14 07:47:17,755 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure outgoing [2022-12-14 07:47:17,755 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure sendEmail [2022-12-14 07:47:17,755 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setEmailFrom [2022-12-14 07:47:17,755 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setEmailTo [2022-12-14 07:47:17,755 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getEmailTo [2022-12-14 07:47:17,756 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getEmailFrom [2022-12-14 07:47:17,756 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isReadable [2022-12-14 07:47:17,756 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure queue [2022-12-14 07:47:17,756 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientId [2022-12-14 07:47:17,763 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 105 nodes and edges [2022-12-14 07:47:17,764 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 43 nodes and edges [2022-12-14 07:47:17,764 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2022-12-14 07:47:17,765 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2022-12-14 07:47:17,765 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 07:47:17,766 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 07:47:17,784 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && 0 <= 2147483648 + retValue_acc) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && rjh == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && __ste_Client_AddressBook2_Alias0 == 0) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && retValue_acc == 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && __ste_client_idCounter0 <= 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && 1 <= __ste_client_idCounter0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && tmp == 1) && retValue_acc <= 2147483647) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 [2022-12-14 07:47:17,785 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && 0 <= 2147483648 + retValue_acc) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 0 == __ste_email_subject0) && __ste_client_idCounter1 <= 2) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && retValue_acc == 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && __ste_Client_AddressBook1_Alias2 == 0) && 2 <= __ste_client_idCounter1) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && __cil_tmp1 == 24) && tmp == 1) && retValue_acc <= 2147483647) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 [2022-12-14 07:47:17,785 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && 0 <= 2147483648 + retValue_acc) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __cil_tmp2 == 0) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && \old(chuck___0) <= 3) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_client_idCounter2 <= 3) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && 3 <= __ste_client_idCounter2) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && 3 == chuck) && retValue_acc == 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 3 <= chuck___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && 3 <= \old(chuck___0)) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __cil_tmp2 == 25) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && chuck___0 <= 3) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && __cil_tmp1 == 24) && tmp == 1) && retValue_acc <= 2147483647) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 [2022-12-14 07:47:17,786 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(queued_message) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(\old(__ste_email_to0) == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(bob == \old(sender))) || !(\old(__ste_email_to1) == 0)) || !(__ste_client_privateKey0 == 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(\old(receiver) == rjh)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(\old(__ste_email_from1) == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || ((((((((((((((((queued_message <= 0 && 0 <= __ste_email_from0) && \old(receiver) == receiver) && from == __ste_email_from0) && 0 <= queued_message) && from == \old(from)) && 1 <= sender) && sender <= 1) && \old(queue_empty) == queue_empty) && __ste_email_from0 <= 0) && __ste_email_to0 == to) && queued_client == \old(queued_client)) && \old(to) <= 2) && 2 <= \old(to)) && 2 <= to) && __ste_email_to0 <= 2) && 1 == msg)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) [2022-12-14 07:47:17,786 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(1 <= \old(client)) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(\old(queued_message) == 0)) || !(\old(__ste_email_from0) == 0)) || !(rjh == \old(__ste_email_to0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(\old(client) <= 1)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || ((((((queued_message == \old(queued_message) && __ste_email_to0 == \old(__ste_email_to0)) && __ste_email_to1 == \old(__ste_email_to1)) && \old(__ste_email_from0) == __ste_email_from0) && \old(__ste_email_from1) == __ste_email_from1) && \old(queue_empty) == queue_empty) && queued_client == \old(queued_client))) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) [2022-12-14 07:47:17,787 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(1 <= \old(client)) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(\old(queued_message) == 0)) || !(\old(__ste_email_from0) == 0)) || !(rjh == \old(__ste_email_to0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(\old(client) <= 1)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || (((((((((((((((((((((((((((((((((((1 <= \old(client) && \old(msg) <= 1) && 0 <= 2147483648 + \result) && 1 <= msg) && queued_message <= 0) && __ste_email_from0 <= 2147483647) && 1 <= client) && 0 <= __ste_email_from0 + 2147483648) && 2 <= aux-getEmailTo(msg)-aux) && \result <= 2147483647) && queue_empty <= 1) && 0 <= retValue_acc + 2147483648) && 1 <= handle) && 1 <= \old(msg)) && __ste_client_idCounter0 <= 2147483647) && aux-getEmailTo(msg)-aux <= 2) && 1 <= queue_empty) && 0 <= queued_message) && \old(handle) <= 1) && 1 <= msg) && client <= 1) && 0 <= queued_client) && msg <= 1) && 0 <= tmp + 2147483648) && \old(client) <= 1) && tmp <= 2147483647) && retValue_acc <= 2147483647) && msg <= 1) && 1 <= \old(handle)) && handle <= 1) && client <= 1) && 0 <= __ste_client_idCounter0 + 2147483648) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2) && 1 <= client) && queued_client <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) [2022-12-14 07:47:17,817 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/witness.graphml [2022-12-14 07:47:17,817 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-14 07:47:17,817 INFO L158 Benchmark]: Toolchain (without parser) took 268022.94ms. Allocated memory was 159.4MB in the beginning and 352.3MB in the end (delta: 192.9MB). Free memory was 123.8MB in the beginning and 238.0MB in the end (delta: -114.2MB). Peak memory consumption was 81.6MB. Max. memory is 16.1GB. [2022-12-14 07:47:17,817 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 159.4MB. Free memory is still 124.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-14 07:47:17,818 INFO L158 Benchmark]: CACSL2BoogieTranslator took 442.69ms. Allocated memory is still 159.4MB. Free memory was 123.8MB in the beginning and 86.4MB in the end (delta: 37.4MB). Peak memory consumption was 37.7MB. Max. memory is 16.1GB. [2022-12-14 07:47:17,818 INFO L158 Benchmark]: Boogie Procedure Inliner took 45.31ms. Allocated memory is still 159.4MB. Free memory was 86.4MB in the beginning and 82.3MB in the end (delta: 4.1MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-12-14 07:47:17,818 INFO L158 Benchmark]: Boogie Preprocessor took 26.18ms. Allocated memory is still 159.4MB. Free memory was 82.3MB in the beginning and 79.2MB in the end (delta: 3.1MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-12-14 07:47:17,818 INFO L158 Benchmark]: RCFGBuilder took 695.76ms. Allocated memory was 159.4MB in the beginning and 201.3MB in the end (delta: 41.9MB). Free memory was 79.2MB in the beginning and 132.5MB in the end (delta: -53.3MB). Peak memory consumption was 45.8MB. Max. memory is 16.1GB. [2022-12-14 07:47:17,818 INFO L158 Benchmark]: TraceAbstraction took 266738.66ms. Allocated memory was 201.3MB in the beginning and 352.3MB in the end (delta: 151.0MB). Free memory was 132.5MB in the beginning and 249.8MB in the end (delta: -117.3MB). Peak memory consumption was 193.8MB. Max. memory is 16.1GB. [2022-12-14 07:47:17,818 INFO L158 Benchmark]: Witness Printer took 68.59ms. Allocated memory is still 352.3MB. Free memory was 249.8MB in the beginning and 238.0MB in the end (delta: 11.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-12-14 07:47:17,819 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 159.4MB. Free memory is still 124.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 442.69ms. Allocated memory is still 159.4MB. Free memory was 123.8MB in the beginning and 86.4MB in the end (delta: 37.4MB). Peak memory consumption was 37.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 45.31ms. Allocated memory is still 159.4MB. Free memory was 86.4MB in the beginning and 82.3MB in the end (delta: 4.1MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 26.18ms. Allocated memory is still 159.4MB. Free memory was 82.3MB in the beginning and 79.2MB in the end (delta: 3.1MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * RCFGBuilder took 695.76ms. Allocated memory was 159.4MB in the beginning and 201.3MB in the end (delta: 41.9MB). Free memory was 79.2MB in the beginning and 132.5MB in the end (delta: -53.3MB). Peak memory consumption was 45.8MB. Max. memory is 16.1GB. * TraceAbstraction took 266738.66ms. Allocated memory was 201.3MB in the beginning and 352.3MB in the end (delta: 151.0MB). Free memory was 132.5MB in the beginning and 249.8MB in the end (delta: -117.3MB). Peak memory consumption was 193.8MB. Max. memory is 16.1GB. * Witness Printer took 68.59ms. Allocated memory is still 352.3MB. Free memory was 249.8MB in the beginning and 238.0MB in the end (delta: 11.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 120]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 92 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 266.6s, OverallIterations: 7, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 40.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 52.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 561 SdHoareTripleChecker+Valid, 10.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 551 mSDsluCounter, 5478 SdHoareTripleChecker+Invalid, 9.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4705 mSDsCounter, 37 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3669 IncrementalHoareTripleChecker+Invalid, 3706 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 37 mSolverCounterUnsat, 773 mSDtfsCounter, 3669 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 523 GetRequests, 435 SyntacticMatches, 0 SemanticMatches, 88 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 621 ImplicationChecksByTransitivity, 169.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=194occurred in iteration=6, InterpolantAutomatonStates: 84, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 7 MinimizatonAttempts, 289 StatesRemovedByMinimization, 4 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 59 LocationsWithAnnotation, 465 PreInvPairs, 613 NumberOfFragments, 9753 HoareAnnotationTreeSize, 465 FomulaSimplifications, 240880 FormulaSimplificationTreeSizeReduction, 16.7s HoareSimplificationTime, 59 FomulaSimplificationsInter, 9927 FormulaSimplificationTreeSizeReductionInter, 35.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 0.8s InterpolantComputationTime, 539 NumberOfCodeBlocks, 539 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 691 ConstructedInterpolants, 0 QuantifiedInterpolants, 855 SizeOfPredicates, 0 NumberOfNonLiveVariables, 2424 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 13 InterpolantComputations, 4 PerfectInterpolantSequences, 139/157 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 30.3s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 11, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 80, DAG_INTERPRETER_EARLY_EXITS: 3, TOOLS_POST_APPLICATIONS: 99, TOOLS_POST_TIME: 17.1s, TOOLS_POST_CALL_APPLICATIONS: 41, TOOLS_POST_CALL_TIME: 2.2s, TOOLS_POST_RETURN_APPLICATIONS: 26, TOOLS_POST_RETURN_TIME: 1.6s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 166, TOOLS_QUANTIFIERELIM_TIME: 20.8s, TOOLS_QUANTIFIERELIM_MAX_TIME: 1.8s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 245, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 47, DOMAIN_JOIN_TIME: 8.5s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 3, DOMAIN_WIDEN_TIME: 0.5s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 6, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 80, DOMAIN_ISBOTTOM_TIME: 0.2s, LOOP_SUMMARIZER_APPLICATIONS: 3, LOOP_SUMMARIZER_CACHE_MISSES: 3, LOOP_SUMMARIZER_OVERALL_TIME: 5.6s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 5.6s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 6, CALL_SUMMARIZER_APPLICATIONS: 26, CALL_SUMMARIZER_CACHE_MISSES: 6, CALL_SUMMARIZER_OVERALL_TIME: 0.0s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.0s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 1498, DAG_COMPRESSION_RETAINED_NODES: 267, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 1340]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1330]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 772]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1306]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 543]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(1 <= \old(client)) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(\old(queued_message) == 0)) || !(\old(__ste_email_from0) == 0)) || !(rjh == \old(__ste_email_to0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(\old(client) <= 1)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || (((((((((((((((((((((((((((((((((((1 <= \old(client) && \old(msg) <= 1) && 0 <= 2147483648 + \result) && 1 <= msg) && queued_message <= 0) && __ste_email_from0 <= 2147483647) && 1 <= client) && 0 <= __ste_email_from0 + 2147483648) && 2 <= aux-getEmailTo(msg)-aux) && \result <= 2147483647) && queue_empty <= 1) && 0 <= retValue_acc + 2147483648) && 1 <= handle) && 1 <= \old(msg)) && __ste_client_idCounter0 <= 2147483647) && aux-getEmailTo(msg)-aux <= 2) && 1 <= queue_empty) && 0 <= queued_message) && \old(handle) <= 1) && 1 <= msg) && client <= 1) && 0 <= queued_client) && msg <= 1) && 0 <= tmp + 2147483648) && \old(client) <= 1) && tmp <= 2147483647) && retValue_acc <= 2147483647) && msg <= 1) && 1 <= \old(handle)) && handle <= 1) && client <= 1) && 0 <= __ste_client_idCounter0 + 2147483648) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2) && 1 <= client) && queued_client <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: !(tmp == 0) - InvariantResult [Line: 741]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && 0 <= 2147483648 + retValue_acc) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 0 == __ste_email_subject0) && __ste_client_idCounter1 <= 2) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && retValue_acc == 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && __ste_Client_AddressBook1_Alias2 == 0) && 2 <= __ste_client_idCounter1) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && __cil_tmp1 == 24) && tmp == 1) && retValue_acc <= 2147483647) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 - InvariantResult [Line: 700]: Loop Invariant Derived loop invariant: !(tmp == 0) - InvariantResult [Line: 1398]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1351]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 549]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(1 <= \old(client)) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(\old(queued_message) == 0)) || !(\old(__ste_email_from0) == 0)) || !(rjh == \old(__ste_email_to0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(\old(client) <= 1)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || ((((((queued_message == \old(queued_message) && __ste_email_to0 == \old(__ste_email_to0)) && __ste_email_to1 == \old(__ste_email_to1)) && \old(__ste_email_from0) == __ste_email_from0) && \old(__ste_email_from1) == __ste_email_from1) && \old(queue_empty) == queue_empty) && queued_client == \old(queued_client))) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) - InvariantResult [Line: 1431]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 761]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1362]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 751]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && 0 <= 2147483648 + retValue_acc) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __cil_tmp2 == 0) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && \old(chuck___0) <= 3) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_client_idCounter2 <= 3) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && 3 <= __ste_client_idCounter2) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && 3 == chuck) && retValue_acc == 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 3 <= chuck___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && 3 <= \old(chuck___0)) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __cil_tmp2 == 25) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && chuck___0 <= 3) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && __cil_tmp1 == 24) && tmp == 1) && retValue_acc <= 2147483647) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 - InvariantResult [Line: 769]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1485]: Loop Invariant Derived loop invariant: !(tmp == 0) - InvariantResult [Line: 1326]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 599]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1387]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1420]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1409]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1377]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 731]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && 0 <= 2147483648 + retValue_acc) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && rjh == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && __ste_Client_AddressBook2_Alias0 == 0) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && retValue_acc == 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && __ste_client_idCounter0 <= 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && 1 <= __ste_client_idCounter0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && tmp == 1) && retValue_acc <= 2147483647) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1518]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(queued_message) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(\old(__ste_email_to0) == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(bob == \old(sender))) || !(\old(__ste_email_to1) == 0)) || !(__ste_client_privateKey0 == 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(\old(receiver) == rjh)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(\old(__ste_email_from1) == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || ((((((((((((((((queued_message <= 0 && 0 <= __ste_email_from0) && \old(receiver) == receiver) && from == __ste_email_from0) && 0 <= queued_message) && from == \old(from)) && 1 <= sender) && sender <= 1) && \old(queue_empty) == queue_empty) && __ste_email_from0 <= 0) && __ste_email_to0 == to) && queued_client == \old(queued_client)) && \old(to) <= 2) && 2 <= \old(to)) && 2 <= to) && __ste_email_to0 <= 2) && 1 == msg)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) - InvariantResult [Line: 120]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1307]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 685]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 828]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1373]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 581]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-12-14 07:47:17,846 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7d7ae7d1-1407-4efd-9dd2-f7ce3353d183/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE