./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/email_spec11_product07.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/email_spec11_product07.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ca488828ecb96ea32a61c8f7cc33f9cc148887f4e62691829b51b0a2976db03e --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 05:57:08,288 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 05:57:08,290 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 05:57:08,307 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 05:57:08,307 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 05:57:08,308 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 05:57:08,310 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 05:57:08,311 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 05:57:08,313 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 05:57:08,313 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 05:57:08,314 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 05:57:08,316 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 05:57:08,316 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 05:57:08,317 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 05:57:08,318 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 05:57:08,319 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 05:57:08,320 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 05:57:08,321 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 05:57:08,322 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 05:57:08,324 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 05:57:08,326 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 05:57:08,327 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 05:57:08,328 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 05:57:08,329 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 05:57:08,332 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 05:57:08,332 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 05:57:08,333 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 05:57:08,334 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 05:57:08,334 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 05:57:08,335 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 05:57:08,335 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 05:57:08,336 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 05:57:08,337 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 05:57:08,338 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 05:57:08,338 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 05:57:08,339 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 05:57:08,339 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 05:57:08,340 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 05:57:08,340 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 05:57:08,340 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 05:57:08,341 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 05:57:08,342 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-12-14 05:57:08,362 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 05:57:08,362 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 05:57:08,363 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 05:57:08,363 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 05:57:08,363 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 05:57:08,364 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 05:57:08,364 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 05:57:08,364 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 05:57:08,364 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 05:57:08,364 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 05:57:08,365 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 05:57:08,365 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 05:57:08,365 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 05:57:08,365 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 05:57:08,365 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 05:57:08,366 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 05:57:08,366 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 05:57:08,366 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 05:57:08,367 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 05:57:08,367 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 05:57:08,367 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 05:57:08,367 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 05:57:08,367 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 05:57:08,368 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-14 05:57:08,368 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 05:57:08,368 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-14 05:57:08,368 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 05:57:08,368 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-14 05:57:08,368 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 05:57:08,369 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-14 05:57:08,369 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 05:57:08,369 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 05:57:08,369 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 05:57:08,369 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 05:57:08,370 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 05:57:08,370 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 05:57:08,370 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-14 05:57:08,370 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 05:57:08,370 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 05:57:08,370 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-14 05:57:08,371 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 05:57:08,371 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ca488828ecb96ea32a61c8f7cc33f9cc148887f4e62691829b51b0a2976db03e [2022-12-14 05:57:08,560 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 05:57:08,575 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 05:57:08,577 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 05:57:08,578 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 05:57:08,578 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 05:57:08,579 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/product-lines/email_spec11_product07.cil.c [2022-12-14 05:57:11,092 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 05:57:11,337 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 05:57:11,338 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/sv-benchmarks/c/product-lines/email_spec11_product07.cil.c [2022-12-14 05:57:11,351 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/data/9605dbe98/ff9fe7943eb843e4b83bfacf1b1c9bd6/FLAG661a53168 [2022-12-14 05:57:11,691 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/data/9605dbe98/ff9fe7943eb843e4b83bfacf1b1c9bd6 [2022-12-14 05:57:11,698 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 05:57:11,702 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 05:57:11,706 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 05:57:11,706 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 05:57:11,715 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 05:57:11,716 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 05:57:11" (1/1) ... [2022-12-14 05:57:11,718 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@41cba576 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:57:11, skipping insertion in model container [2022-12-14 05:57:11,718 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 05:57:11" (1/1) ... [2022-12-14 05:57:11,731 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 05:57:11,783 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 05:57:12,010 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:57:12,012 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:57:12,022 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:57:12,025 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:57:12,026 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:57:12,027 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:57:12,032 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:57:12,049 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/sv-benchmarks/c/product-lines/email_spec11_product07.cil.c[47468,47481] [2022-12-14 05:57:12,080 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:57:12,082 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 05:57:12,093 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 05:57:12,134 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:57:12,134 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:57:12,137 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:57:12,138 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:57:12,139 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:57:12,139 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:57:12,142 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:57:12,147 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/sv-benchmarks/c/product-lines/email_spec11_product07.cil.c[47468,47481] [2022-12-14 05:57:12,159 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:57:12,160 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 05:57:12,193 INFO L208 MainTranslator]: Completed translation [2022-12-14 05:57:12,193 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:57:12 WrapperNode [2022-12-14 05:57:12,193 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 05:57:12,194 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 05:57:12,194 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 05:57:12,194 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 05:57:12,199 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:57:12" (1/1) ... [2022-12-14 05:57:12,219 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:57:12" (1/1) ... [2022-12-14 05:57:12,256 INFO L138 Inliner]: procedures = 110, calls = 144, calls flagged for inlining = 36, calls inlined = 30, statements flattened = 601 [2022-12-14 05:57:12,257 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 05:57:12,257 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 05:57:12,258 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 05:57:12,258 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 05:57:12,267 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:57:12" (1/1) ... [2022-12-14 05:57:12,267 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:57:12" (1/1) ... [2022-12-14 05:57:12,270 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:57:12" (1/1) ... [2022-12-14 05:57:12,270 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:57:12" (1/1) ... [2022-12-14 05:57:12,277 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:57:12" (1/1) ... [2022-12-14 05:57:12,282 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:57:12" (1/1) ... [2022-12-14 05:57:12,284 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:57:12" (1/1) ... [2022-12-14 05:57:12,285 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:57:12" (1/1) ... [2022-12-14 05:57:12,288 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 05:57:12,289 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 05:57:12,289 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 05:57:12,289 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 05:57:12,290 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:57:12" (1/1) ... [2022-12-14 05:57:12,294 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 05:57:12,302 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 05:57:12,311 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 05:57:12,312 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 05:57:12,337 INFO L130 BoogieDeclarations]: Found specification of procedure getClientAddressBookSize [2022-12-14 05:57:12,337 INFO L138 BoogieDeclarations]: Found implementation of procedure getClientAddressBookSize [2022-12-14 05:57:12,337 INFO L130 BoogieDeclarations]: Found specification of procedure setClientAddressBookAddress [2022-12-14 05:57:12,337 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientAddressBookAddress [2022-12-14 05:57:12,337 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailTo [2022-12-14 05:57:12,337 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailTo [2022-12-14 05:57:12,337 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing__wrappee__AutoResponder [2022-12-14 05:57:12,338 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing__wrappee__AutoResponder [2022-12-14 05:57:12,338 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailFrom [2022-12-14 05:57:12,338 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailFrom [2022-12-14 05:57:12,338 INFO L130 BoogieDeclarations]: Found specification of procedure isReadable [2022-12-14 05:57:12,338 INFO L138 BoogieDeclarations]: Found implementation of procedure isReadable [2022-12-14 05:57:12,338 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2022-12-14 05:57:12,338 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailFrom [2022-12-14 05:57:12,338 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailFrom [2022-12-14 05:57:12,338 INFO L130 BoogieDeclarations]: Found specification of procedure setClientId [2022-12-14 05:57:12,338 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientId [2022-12-14 05:57:12,338 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-14 05:57:12,339 INFO L130 BoogieDeclarations]: Found specification of procedure setClientAddressBookSize [2022-12-14 05:57:12,339 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientAddressBookSize [2022-12-14 05:57:12,339 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing [2022-12-14 05:57:12,339 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing [2022-12-14 05:57:12,339 INFO L130 BoogieDeclarations]: Found specification of procedure sendEmail [2022-12-14 05:57:12,339 INFO L138 BoogieDeclarations]: Found implementation of procedure sendEmail [2022-12-14 05:57:12,339 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailTo [2022-12-14 05:57:12,339 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailTo [2022-12-14 05:57:12,339 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-14 05:57:12,339 INFO L130 BoogieDeclarations]: Found specification of procedure getClientAddressBookAddress [2022-12-14 05:57:12,339 INFO L138 BoogieDeclarations]: Found implementation of procedure getClientAddressBookAddress [2022-12-14 05:57:12,339 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 05:57:12,340 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 05:57:12,458 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 05:57:12,459 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 05:57:12,860 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 05:57:13,058 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 05:57:13,058 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-12-14 05:57:13,060 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:57:13 BoogieIcfgContainer [2022-12-14 05:57:13,060 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 05:57:13,061 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 05:57:13,061 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 05:57:13,064 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 05:57:13,064 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 05:57:11" (1/3) ... [2022-12-14 05:57:13,064 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@639e7b2b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 05:57:13, skipping insertion in model container [2022-12-14 05:57:13,064 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:57:12" (2/3) ... [2022-12-14 05:57:13,065 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@639e7b2b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 05:57:13, skipping insertion in model container [2022-12-14 05:57:13,065 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:57:13" (3/3) ... [2022-12-14 05:57:13,066 INFO L112 eAbstractionObserver]: Analyzing ICFG email_spec11_product07.cil.c [2022-12-14 05:57:13,080 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 05:57:13,080 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-14 05:57:13,116 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 05:57:13,121 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@4b890191, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 05:57:13,121 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-14 05:57:13,125 INFO L276 IsEmpty]: Start isEmpty. Operand has 107 states, 67 states have (on average 1.4477611940298507) internal successors, (97), 70 states have internal predecessors, (97), 25 states have call successors, (25), 13 states have call predecessors, (25), 13 states have return successors, (25), 24 states have call predecessors, (25), 25 states have call successors, (25) [2022-12-14 05:57:13,135 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-12-14 05:57:13,135 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:57:13,136 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:57:13,136 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:57:13,141 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:57:13,141 INFO L85 PathProgramCache]: Analyzing trace with hash 1358507882, now seen corresponding path program 1 times [2022-12-14 05:57:13,151 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:57:13,151 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1021389662] [2022-12-14 05:57:13,151 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:57:13,152 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:57:13,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:57:13,399 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-12-14 05:57:13,399 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:57:13,400 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1021389662] [2022-12-14 05:57:13,400 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1021389662] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 05:57:13,400 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 05:57:13,401 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 05:57:13,402 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1666013388] [2022-12-14 05:57:13,402 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 05:57:13,406 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-14 05:57:13,406 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:57:13,428 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-14 05:57:13,429 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 05:57:13,432 INFO L87 Difference]: Start difference. First operand has 107 states, 67 states have (on average 1.4477611940298507) internal successors, (97), 70 states have internal predecessors, (97), 25 states have call successors, (25), 13 states have call predecessors, (25), 13 states have return successors, (25), 24 states have call predecessors, (25), 25 states have call successors, (25) Second operand has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-12-14 05:57:13,520 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:57:13,520 INFO L93 Difference]: Finished difference Result 171 states and 229 transitions. [2022-12-14 05:57:13,521 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-14 05:57:13,522 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 49 [2022-12-14 05:57:13,522 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:57:13,529 INFO L225 Difference]: With dead ends: 171 [2022-12-14 05:57:13,529 INFO L226 Difference]: Without dead ends: 104 [2022-12-14 05:57:13,532 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 05:57:13,534 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 05:57:13,535 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 120 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 05:57:13,548 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2022-12-14 05:57:13,566 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 104. [2022-12-14 05:57:13,567 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 104 states, 65 states have (on average 1.4) internal successors, (91), 67 states have internal predecessors, (91), 25 states have call successors, (25), 13 states have call predecessors, (25), 13 states have return successors, (24), 23 states have call predecessors, (24), 24 states have call successors, (24) [2022-12-14 05:57:13,569 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 104 states to 104 states and 140 transitions. [2022-12-14 05:57:13,570 INFO L78 Accepts]: Start accepts. Automaton has 104 states and 140 transitions. Word has length 49 [2022-12-14 05:57:13,571 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:57:13,572 INFO L495 AbstractCegarLoop]: Abstraction has 104 states and 140 transitions. [2022-12-14 05:57:13,572 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-12-14 05:57:13,572 INFO L276 IsEmpty]: Start isEmpty. Operand 104 states and 140 transitions. [2022-12-14 05:57:13,573 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-12-14 05:57:13,574 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:57:13,574 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:57:13,574 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 05:57:13,574 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:57:13,575 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:57:13,575 INFO L85 PathProgramCache]: Analyzing trace with hash 1590112826, now seen corresponding path program 1 times [2022-12-14 05:57:13,575 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:57:13,575 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1610727726] [2022-12-14 05:57:13,575 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:57:13,575 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:57:13,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:57:13,675 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-12-14 05:57:13,675 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:57:13,675 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1610727726] [2022-12-14 05:57:13,676 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1610727726] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 05:57:13,676 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 05:57:13,676 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 05:57:13,676 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1552983319] [2022-12-14 05:57:13,676 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 05:57:13,677 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 05:57:13,677 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:57:13,677 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 05:57:13,678 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 05:57:13,678 INFO L87 Difference]: Start difference. First operand 104 states and 140 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-12-14 05:57:13,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:57:13,734 INFO L93 Difference]: Finished difference Result 167 states and 214 transitions. [2022-12-14 05:57:13,735 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 05:57:13,735 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 50 [2022-12-14 05:57:13,735 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:57:13,736 INFO L225 Difference]: With dead ends: 167 [2022-12-14 05:57:13,737 INFO L226 Difference]: Without dead ends: 106 [2022-12-14 05:57:13,737 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 05:57:13,739 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 0 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 46 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 46 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 05:57:13,739 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 233 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 46 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 05:57:13,740 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106 states. [2022-12-14 05:57:13,750 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106 to 106. [2022-12-14 05:57:13,751 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 106 states, 67 states have (on average 1.3880597014925373) internal successors, (93), 69 states have internal predecessors, (93), 25 states have call successors, (25), 13 states have call predecessors, (25), 13 states have return successors, (24), 23 states have call predecessors, (24), 24 states have call successors, (24) [2022-12-14 05:57:13,752 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106 states to 106 states and 142 transitions. [2022-12-14 05:57:13,753 INFO L78 Accepts]: Start accepts. Automaton has 106 states and 142 transitions. Word has length 50 [2022-12-14 05:57:13,753 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:57:13,753 INFO L495 AbstractCegarLoop]: Abstraction has 106 states and 142 transitions. [2022-12-14 05:57:13,753 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-12-14 05:57:13,753 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 142 transitions. [2022-12-14 05:57:13,755 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-12-14 05:57:13,755 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:57:13,755 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:57:13,755 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-14 05:57:13,756 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:57:13,756 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:57:13,756 INFO L85 PathProgramCache]: Analyzing trace with hash 1633126409, now seen corresponding path program 1 times [2022-12-14 05:57:13,756 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:57:13,756 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [272197596] [2022-12-14 05:57:13,757 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:57:13,757 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:57:13,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:57:13,882 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-12-14 05:57:13,882 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:57:13,882 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [272197596] [2022-12-14 05:57:13,882 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [272197596] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 05:57:13,882 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1661002529] [2022-12-14 05:57:13,882 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:57:13,882 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 05:57:13,882 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 05:57:13,883 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 05:57:13,884 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 05:57:14,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:57:14,072 INFO L263 TraceCheckSpWp]: Trace formula consists of 821 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 05:57:14,077 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 05:57:14,125 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-12-14 05:57:14,125 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 05:57:14,176 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-12-14 05:57:14,176 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1661002529] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 05:57:14,176 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [646940795] [2022-12-14 05:57:14,196 INFO L159 IcfgInterpreter]: Started Sifa with 47 locations of interest [2022-12-14 05:57:14,196 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 05:57:14,200 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 05:57:14,205 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 05:57:14,206 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 05:57:19,893 INFO L197 IcfgInterpreter]: Interpreting procedure setClientId with input of size 451 for LOIs [2022-12-14 05:57:20,195 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 05:57:42,912 WARN L233 SmtUtils]: Spent 12.56s on a formula simplification. DAG size of input: 573 DAG size of output: 442 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 05:57:48,620 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [646940795] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 05:57:48,620 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 05:57:48,621 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [4, 4, 4] total 19 [2022-12-14 05:57:48,621 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [887736993] [2022-12-14 05:57:48,621 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 05:57:48,621 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-12-14 05:57:48,621 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:57:48,622 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-12-14 05:57:48,622 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=58, Invalid=284, Unknown=0, NotChecked=0, Total=342 [2022-12-14 05:57:48,622 INFO L87 Difference]: Start difference. First operand 106 states and 142 transitions. Second operand has 14 states, 10 states have (on average 2.9) internal successors, (29), 9 states have internal predecessors, (29), 4 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) [2022-12-14 05:57:51,879 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:57:51,879 INFO L93 Difference]: Finished difference Result 277 states and 419 transitions. [2022-12-14 05:57:51,880 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-12-14 05:57:51,880 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 10 states have (on average 2.9) internal successors, (29), 9 states have internal predecessors, (29), 4 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) Word has length 54 [2022-12-14 05:57:51,880 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:57:51,882 INFO L225 Difference]: With dead ends: 277 [2022-12-14 05:57:51,882 INFO L226 Difference]: Without dead ends: 183 [2022-12-14 05:57:51,883 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 147 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 84 ImplicationChecksByTransitivity, 28.4s TimeCoverageRelationStatistics Valid=58, Invalid=284, Unknown=0, NotChecked=0, Total=342 [2022-12-14 05:57:51,884 INFO L413 NwaCegarLoop]: 164 mSDtfsCounter, 99 mSDsluCounter, 1487 mSDsCounter, 0 mSdLazyCounter, 876 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 99 SdHoareTripleChecker+Valid, 1651 SdHoareTripleChecker+Invalid, 886 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 876 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.1s IncrementalHoareTripleChecker+Time [2022-12-14 05:57:51,884 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [99 Valid, 1651 Invalid, 886 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 876 Invalid, 0 Unknown, 0 Unchecked, 3.1s Time] [2022-12-14 05:57:51,885 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 183 states. [2022-12-14 05:57:51,924 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 183 to 127. [2022-12-14 05:57:51,925 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 127 states, 88 states have (on average 1.4204545454545454) internal successors, (125), 90 states have internal predecessors, (125), 25 states have call successors, (25), 13 states have call predecessors, (25), 13 states have return successors, (24), 23 states have call predecessors, (24), 24 states have call successors, (24) [2022-12-14 05:57:51,926 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 127 states to 127 states and 174 transitions. [2022-12-14 05:57:51,926 INFO L78 Accepts]: Start accepts. Automaton has 127 states and 174 transitions. Word has length 54 [2022-12-14 05:57:51,926 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:57:51,926 INFO L495 AbstractCegarLoop]: Abstraction has 127 states and 174 transitions. [2022-12-14 05:57:51,926 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 10 states have (on average 2.9) internal successors, (29), 9 states have internal predecessors, (29), 4 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) [2022-12-14 05:57:51,926 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 174 transitions. [2022-12-14 05:57:51,927 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-12-14 05:57:51,927 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:57:51,927 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:57:51,934 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 05:57:52,128 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 05:57:52,130 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:57:52,131 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:57:52,131 INFO L85 PathProgramCache]: Analyzing trace with hash 697410355, now seen corresponding path program 1 times [2022-12-14 05:57:52,131 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:57:52,132 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1397537318] [2022-12-14 05:57:52,133 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:57:52,133 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:57:52,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:57:52,232 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-12-14 05:57:52,233 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:57:52,233 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1397537318] [2022-12-14 05:57:52,233 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1397537318] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 05:57:52,233 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 05:57:52,233 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 05:57:52,233 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [583818935] [2022-12-14 05:57:52,233 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 05:57:52,234 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 05:57:52,234 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:57:52,234 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 05:57:52,235 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 05:57:52,235 INFO L87 Difference]: Start difference. First operand 127 states and 174 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-12-14 05:57:52,368 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:57:52,369 INFO L93 Difference]: Finished difference Result 295 states and 421 transitions. [2022-12-14 05:57:52,369 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 05:57:52,369 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 55 [2022-12-14 05:57:52,369 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:57:52,371 INFO L225 Difference]: With dead ends: 295 [2022-12-14 05:57:52,371 INFO L226 Difference]: Without dead ends: 182 [2022-12-14 05:57:52,371 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 05:57:52,372 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 48 mSDsluCounter, 113 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 49 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 05:57:52,373 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 233 Invalid, 49 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 05:57:52,374 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2022-12-14 05:57:52,444 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 177. [2022-12-14 05:57:52,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 177 states, 135 states have (on average 1.4962962962962962) internal successors, (202), 137 states have internal predecessors, (202), 28 states have call successors, (28), 13 states have call predecessors, (28), 13 states have return successors, (27), 26 states have call predecessors, (27), 27 states have call successors, (27) [2022-12-14 05:57:52,446 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 177 states to 177 states and 257 transitions. [2022-12-14 05:57:52,446 INFO L78 Accepts]: Start accepts. Automaton has 177 states and 257 transitions. Word has length 55 [2022-12-14 05:57:52,446 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:57:52,446 INFO L495 AbstractCegarLoop]: Abstraction has 177 states and 257 transitions. [2022-12-14 05:57:52,446 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-12-14 05:57:52,447 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 257 transitions. [2022-12-14 05:57:52,448 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-12-14 05:57:52,448 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:57:52,448 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:57:52,448 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-14 05:57:52,448 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:57:52,449 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:57:52,449 INFO L85 PathProgramCache]: Analyzing trace with hash 278776248, now seen corresponding path program 1 times [2022-12-14 05:57:52,449 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:57:52,449 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [459261173] [2022-12-14 05:57:52,449 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:57:52,449 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:57:52,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:57:52,555 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-12-14 05:57:52,555 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:57:52,556 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [459261173] [2022-12-14 05:57:52,556 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [459261173] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 05:57:52,556 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1642223757] [2022-12-14 05:57:52,556 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:57:52,556 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 05:57:52,556 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 05:57:52,557 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 05:57:52,558 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 05:57:52,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:57:52,702 INFO L263 TraceCheckSpWp]: Trace formula consists of 838 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 05:57:52,705 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 05:57:52,718 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-12-14 05:57:52,719 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 05:57:52,750 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-12-14 05:57:52,750 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1642223757] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 05:57:52,751 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [547580546] [2022-12-14 05:57:52,754 INFO L159 IcfgInterpreter]: Started Sifa with 49 locations of interest [2022-12-14 05:57:52,754 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 05:57:52,754 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 05:57:52,754 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 05:57:52,755 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 05:58:06,234 INFO L197 IcfgInterpreter]: Interpreting procedure setClientId with input of size 451 for LOIs [2022-12-14 05:58:06,538 INFO L197 IcfgInterpreter]: Interpreting procedure sendEmail with input of size 465 for LOIs [2022-12-14 05:58:28,302 INFO L197 IcfgInterpreter]: Interpreting procedure setEmailTo with input of size 455 for LOIs [2022-12-14 05:58:28,601 INFO L197 IcfgInterpreter]: Interpreting procedure outgoing with input of size 463 for LOIs [2022-12-14 05:58:32,093 INFO L197 IcfgInterpreter]: Interpreting procedure outgoing__wrappee__AutoResponder with input of size 254 for LOIs [2022-12-14 05:58:35,242 INFO L197 IcfgInterpreter]: Interpreting procedure isReadable with input of size 242 for LOIs [2022-12-14 05:58:35,273 INFO L197 IcfgInterpreter]: Interpreting procedure getEmailTo with input of size 242 for LOIs [2022-12-14 05:58:35,309 INFO L197 IcfgInterpreter]: Interpreting procedure setEmailFrom with input of size 456 for LOIs [2022-12-14 05:58:35,979 INFO L197 IcfgInterpreter]: Interpreting procedure getClientAddressBookSize with input of size 443 for LOIs [2022-12-14 05:58:36,263 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 05:58:53,971 WARN L233 SmtUtils]: Spent 6.34s on a formula simplification. DAG size of input: 584 DAG size of output: 331 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 06:00:05,475 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [547580546] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:00:05,475 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 06:00:05,475 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [44] imperfect sequences [4, 4, 4] total 50 [2022-12-14 06:00:05,475 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [350634570] [2022-12-14 06:00:05,475 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:00:05,476 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2022-12-14 06:00:05,476 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:00:05,476 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2022-12-14 06:00:05,477 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=143, Invalid=2307, Unknown=0, NotChecked=0, Total=2450 [2022-12-14 06:00:05,477 INFO L87 Difference]: Start difference. First operand 177 states and 257 transitions. Second operand has 45 states, 29 states have (on average 1.0689655172413792) internal successors, (31), 26 states have internal predecessors, (31), 12 states have call successors, (12), 9 states have call predecessors, (12), 6 states have return successors, (9), 9 states have call predecessors, (9), 9 states have call successors, (9) [2022-12-14 06:00:28,586 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:00:28,586 INFO L93 Difference]: Finished difference Result 457 states and 711 transitions. [2022-12-14 06:00:28,587 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-12-14 06:00:28,587 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 29 states have (on average 1.0689655172413792) internal successors, (31), 26 states have internal predecessors, (31), 12 states have call successors, (12), 9 states have call predecessors, (12), 6 states have return successors, (9), 9 states have call predecessors, (9), 9 states have call successors, (9) Word has length 56 [2022-12-14 06:00:28,587 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:00:28,589 INFO L225 Difference]: With dead ends: 457 [2022-12-14 06:00:28,589 INFO L226 Difference]: Without dead ends: 335 [2022-12-14 06:00:28,591 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 178 GetRequests, 121 SyntacticMatches, 1 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 738 ImplicationChecksByTransitivity, 103.8s TimeCoverageRelationStatistics Valid=197, Invalid=3109, Unknown=0, NotChecked=0, Total=3306 [2022-12-14 06:00:28,592 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 173 mSDsluCounter, 2318 mSDsCounter, 0 mSdLazyCounter, 3029 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 175 SdHoareTripleChecker+Valid, 2433 SdHoareTripleChecker+Invalid, 3046 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 3029 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.1s IncrementalHoareTripleChecker+Time [2022-12-14 06:00:28,592 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [175 Valid, 2433 Invalid, 3046 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [17 Valid, 3029 Invalid, 0 Unknown, 0 Unchecked, 8.1s Time] [2022-12-14 06:00:28,593 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 335 states. [2022-12-14 06:00:28,740 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 335 to 216. [2022-12-14 06:00:28,741 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 216 states, 160 states have (on average 1.45) internal successors, (232), 162 states have internal predecessors, (232), 37 states have call successors, (37), 21 states have call predecessors, (37), 18 states have return successors, (36), 32 states have call predecessors, (36), 36 states have call successors, (36) [2022-12-14 06:00:28,742 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 216 states to 216 states and 305 transitions. [2022-12-14 06:00:28,742 INFO L78 Accepts]: Start accepts. Automaton has 216 states and 305 transitions. Word has length 56 [2022-12-14 06:00:28,743 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:00:28,743 INFO L495 AbstractCegarLoop]: Abstraction has 216 states and 305 transitions. [2022-12-14 06:00:28,743 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 29 states have (on average 1.0689655172413792) internal successors, (31), 26 states have internal predecessors, (31), 12 states have call successors, (12), 9 states have call predecessors, (12), 6 states have return successors, (9), 9 states have call predecessors, (9), 9 states have call successors, (9) [2022-12-14 06:00:28,743 INFO L276 IsEmpty]: Start isEmpty. Operand 216 states and 305 transitions. [2022-12-14 06:00:28,745 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-12-14 06:00:28,745 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:00:28,745 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:00:28,750 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-14 06:00:28,946 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:00:28,947 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:00:28,948 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:00:28,948 INFO L85 PathProgramCache]: Analyzing trace with hash -5793433, now seen corresponding path program 1 times [2022-12-14 06:00:28,949 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:00:28,949 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2006839850] [2022-12-14 06:00:28,950 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:00:28,950 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:00:29,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:00:29,096 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-12-14 06:00:29,097 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:00:29,097 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2006839850] [2022-12-14 06:00:29,097 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2006839850] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 06:00:29,097 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [890336485] [2022-12-14 06:00:29,097 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:00:29,097 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:00:29,097 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 06:00:29,098 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 06:00:29,099 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-14 06:00:29,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:00:29,254 INFO L263 TraceCheckSpWp]: Trace formula consists of 837 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 06:00:29,256 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 06:00:29,269 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-12-14 06:00:29,269 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 06:00:29,298 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-12-14 06:00:29,298 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [890336485] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 06:00:29,298 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [645263540] [2022-12-14 06:00:29,301 INFO L159 IcfgInterpreter]: Started Sifa with 51 locations of interest [2022-12-14 06:00:29,301 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 06:00:29,302 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 06:00:29,302 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 06:00:29,302 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 06:00:38,445 INFO L197 IcfgInterpreter]: Interpreting procedure setClientId with input of size 451 for LOIs [2022-12-14 06:00:38,760 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 06:01:01,389 WARN L233 SmtUtils]: Spent 12.30s on a formula simplification. DAG size of input: 581 DAG size of output: 448 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 06:01:20,718 WARN L233 SmtUtils]: Spent 5.21s on a formula simplification. DAG size of input: 566 DAG size of output: 362 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 06:01:26,419 WARN L233 SmtUtils]: Spent 5.49s on a formula simplification. DAG size of input: 564 DAG size of output: 360 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 06:01:27,283 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [645263540] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:01:27,284 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 06:01:27,284 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [17] imperfect sequences [4, 4, 4] total 23 [2022-12-14 06:01:27,284 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2017724152] [2022-12-14 06:01:27,284 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:01:27,284 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-12-14 06:01:27,284 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:01:27,285 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-12-14 06:01:27,285 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=88, Invalid=418, Unknown=0, NotChecked=0, Total=506 [2022-12-14 06:01:27,285 INFO L87 Difference]: Start difference. First operand 216 states and 305 transitions. Second operand has 18 states, 14 states have (on average 2.357142857142857) internal successors, (33), 13 states have internal predecessors, (33), 4 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) [2022-12-14 06:01:29,929 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:01:29,929 INFO L93 Difference]: Finished difference Result 470 states and 723 transitions. [2022-12-14 06:01:29,930 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-12-14 06:01:29,930 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 14 states have (on average 2.357142857142857) internal successors, (33), 13 states have internal predecessors, (33), 4 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) Word has length 58 [2022-12-14 06:01:29,931 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:01:29,932 INFO L225 Difference]: With dead ends: 470 [2022-12-14 06:01:29,932 INFO L226 Difference]: Without dead ends: 348 [2022-12-14 06:01:29,932 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 176 GetRequests, 155 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 113 ImplicationChecksByTransitivity, 48.5s TimeCoverageRelationStatistics Valid=88, Invalid=418, Unknown=0, NotChecked=0, Total=506 [2022-12-14 06:01:29,933 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 207 mSDsluCounter, 1010 mSDsCounter, 0 mSdLazyCounter, 698 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 207 SdHoareTripleChecker+Valid, 1130 SdHoareTripleChecker+Invalid, 707 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 698 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2022-12-14 06:01:29,933 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [207 Valid, 1130 Invalid, 707 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 698 Invalid, 0 Unknown, 0 Unchecked, 2.3s Time] [2022-12-14 06:01:29,933 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 348 states. [2022-12-14 06:01:30,089 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 348 to 226. [2022-12-14 06:01:30,090 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 226 states, 170 states have (on average 1.4529411764705882) internal successors, (247), 172 states have internal predecessors, (247), 37 states have call successors, (37), 21 states have call predecessors, (37), 18 states have return successors, (36), 32 states have call predecessors, (36), 36 states have call successors, (36) [2022-12-14 06:01:30,090 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 226 states to 226 states and 320 transitions. [2022-12-14 06:01:30,091 INFO L78 Accepts]: Start accepts. Automaton has 226 states and 320 transitions. Word has length 58 [2022-12-14 06:01:30,091 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:01:30,091 INFO L495 AbstractCegarLoop]: Abstraction has 226 states and 320 transitions. [2022-12-14 06:01:30,091 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 14 states have (on average 2.357142857142857) internal successors, (33), 13 states have internal predecessors, (33), 4 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (9), 4 states have call predecessors, (9), 4 states have call successors, (9) [2022-12-14 06:01:30,091 INFO L276 IsEmpty]: Start isEmpty. Operand 226 states and 320 transitions. [2022-12-14 06:01:30,092 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-12-14 06:01:30,092 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:01:30,092 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:01:30,098 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-12-14 06:01:30,293 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:01:30,293 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:01:30,294 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:01:30,295 INFO L85 PathProgramCache]: Analyzing trace with hash -1373006140, now seen corresponding path program 1 times [2022-12-14 06:01:30,295 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:01:30,296 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1473528834] [2022-12-14 06:01:30,296 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:01:30,296 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:01:30,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:01:30,466 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-12-14 06:01:30,466 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:01:30,466 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1473528834] [2022-12-14 06:01:30,466 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1473528834] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:01:30,467 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 06:01:30,467 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-14 06:01:30,467 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1920286870] [2022-12-14 06:01:30,467 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:01:30,467 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 06:01:30,467 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:01:30,468 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 06:01:30,468 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-14 06:01:30,468 INFO L87 Difference]: Start difference. First operand 226 states and 320 transitions. Second operand has 6 states, 5 states have (on average 6.4) internal successors, (32), 5 states have internal predecessors, (32), 1 states have call successors, (12), 1 states have call predecessors, (12), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) [2022-12-14 06:01:30,714 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:01:30,714 INFO L93 Difference]: Finished difference Result 228 states and 324 transitions. [2022-12-14 06:01:30,715 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 06:01:30,715 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 6.4) internal successors, (32), 5 states have internal predecessors, (32), 1 states have call successors, (12), 1 states have call predecessors, (12), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) Word has length 59 [2022-12-14 06:01:30,715 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:01:30,715 INFO L225 Difference]: With dead ends: 228 [2022-12-14 06:01:30,716 INFO L226 Difference]: Without dead ends: 0 [2022-12-14 06:01:30,716 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-14 06:01:30,717 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 61 mSDsluCounter, 392 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 506 SdHoareTripleChecker+Invalid, 121 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 06:01:30,717 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 506 Invalid, 121 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 06:01:30,718 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-14 06:01:30,718 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-14 06:01:30,718 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 06:01:30,718 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-14 06:01:30,718 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 59 [2022-12-14 06:01:30,718 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:01:30,719 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-14 06:01:30,719 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 6.4) internal successors, (32), 5 states have internal predecessors, (32), 1 states have call successors, (12), 1 states have call predecessors, (12), 2 states have return successors, (9), 2 states have call predecessors, (9), 1 states have call successors, (9) [2022-12-14 06:01:30,719 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-14 06:01:30,719 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-14 06:01:30,721 INFO L805 garLoopResultBuilder]: Registering result SAFE for location outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-14 06:01:30,722 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-12-14 06:01:30,724 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-14 06:02:24,348 INFO L895 garLoopResultBuilder]: At program point L1760(line 1760) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:02:24,348 INFO L899 garLoopResultBuilder]: For program point L1760-1(line 1760) no Hoare annotation was computed. [2022-12-14 06:02:24,350 INFO L895 garLoopResultBuilder]: At program point L1756(lines 1756 1775) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (and (<= ~queued_message~0 0) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (<= 0 ~queued_message~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (<= 1 |outgoing_~msg#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= |outgoing_~size~2#1| |outgoing_~tmp~6#1|) (= |outgoing_~client#1| |outgoing_#in~client#1|) (<= |outgoing_~msg#1| 1) (<= 0 |outgoing_~tmp~6#1|) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= |outgoing_~tmp~6#1| 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:02:24,351 INFO L895 garLoopResultBuilder]: At program point L1753(line 1753) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |outgoing_#in~msg#1| |outgoing_~msg#1|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= |outgoing_~client#1| |outgoing_#in~client#1|)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:02:24,351 INFO L899 garLoopResultBuilder]: For program point L1753-1(line 1753) no Hoare annotation was computed. [2022-12-14 06:02:24,352 INFO L899 garLoopResultBuilder]: For program point outgoingEXIT(lines 1742 1778) no Hoare annotation was computed. [2022-12-14 06:02:24,353 INFO L895 garLoopResultBuilder]: At program point L1773(line 1773) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (and (<= ~queued_message~0 0) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (<= 0 ~queued_message~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (<= 1 |outgoing_~msg#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= |outgoing_~size~2#1| |outgoing_~tmp~6#1|) (= |outgoing_~client#1| |outgoing_#in~client#1|) (<= |outgoing_~msg#1| 1) (<= 0 |outgoing_~tmp~6#1|) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= |outgoing_~tmp~6#1| 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:02:24,354 INFO L899 garLoopResultBuilder]: For program point L1773-1(lines 1742 1778) no Hoare annotation was computed. [2022-12-14 06:02:24,356 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 1742 1778) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:02:24,357 INFO L895 garLoopResultBuilder]: At program point L1768(line 1768) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:02:24,357 INFO L899 garLoopResultBuilder]: For program point L1767(line 1767) no Hoare annotation was computed. [2022-12-14 06:02:24,359 INFO L895 garLoopResultBuilder]: At program point L1768-1(line 1768) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:02:24,360 INFO L895 garLoopResultBuilder]: At program point L1766(line 1766) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:02:24,361 INFO L895 garLoopResultBuilder]: At program point L1765(line 1765) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:02:24,363 INFO L895 garLoopResultBuilder]: At program point L1765-1(line 1765) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:02:24,364 INFO L895 garLoopResultBuilder]: At program point L1763(line 1763) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 1 |outgoing_#in~client#1|)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (= ~rjh~0 |old(~__ste_email_to0~0)|)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (<= |outgoing_#in~client#1| 1)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= |outgoing_#in~msg#1| 1)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:02:24,364 INFO L899 garLoopResultBuilder]: For program point L1763-1(line 1763) no Hoare annotation was computed. [2022-12-14 06:02:24,365 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 181 196) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (= |setEmailTo_#in~value| ~rjh~0)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= ~__ste_email_from0~0 0)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~queued_message~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~queued_client~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= |setEmailTo_#in~handle| 1)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (and (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~queue_empty~0 1)) (not (= ~__ste_client_name1~0.base 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-12-14 06:02:24,365 INFO L899 garLoopResultBuilder]: For program point setEmailToEXIT(lines 181 196) no Hoare annotation was computed. [2022-12-14 06:02:24,365 INFO L899 garLoopResultBuilder]: For program point getEmailToEXIT(lines 162 180) no Hoare annotation was computed. [2022-12-14 06:02:24,366 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 162 180) the Hoare annotation is: true [2022-12-14 06:02:24,366 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 629 648) the Hoare annotation is: true [2022-12-14 06:02:24,366 INFO L899 garLoopResultBuilder]: For program point setClientAddressBookSizeEXIT(lines 629 648) no Hoare annotation was computed. [2022-12-14 06:02:24,367 INFO L895 garLoopResultBuilder]: At program point L1968(line 1968) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= |#NULL.offset| 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (and (<= ~queued_message~0 0) (<= |sendEmail_createEmail_#in~from#1| 0) (<= 1 |sendEmail_createEmail_~msg~0#1|) (<= ~queue_empty~0 1) (<= 0 ~__ste_email_from0~0) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (<= |sendEmail_createEmail_~msg~0#1| 1) (<= 1 ~queue_empty~0) (<= |sendEmail_createEmail_~to#1| 2) (<= 0 ~queued_message~0) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (<= 1 |sendEmail_~sender#1|) (<= |sendEmail_~sender#1| 1) (<= ~__ste_email_from0~0 0) (= ~queued_client~0 |old(~queued_client~0)|) (<= |sendEmail_createEmail_#in~to#1| 2) (<= 2 |sendEmail_createEmail_#in~to#1|) (<= 2 ~__ste_email_to0~0) (<= 2 |sendEmail_createEmail_~to#1|) (<= ~__ste_email_to0~0 2) (<= 0 |sendEmail_createEmail_#in~from#1|)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:02:24,369 INFO L895 garLoopResultBuilder]: At program point L1840(line 1840) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= |#NULL.offset| 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (<= ~queue_empty~0 1) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |sendEmail_createEmail_~from#1| ~__ste_email_from0~0) (<= 1 ~queue_empty~0) (= |sendEmail_createEmail_~retValue_acc~35#1| |sendEmail_createEmail_~msg~0#1|) (<= |sendEmail_createEmail_~to#1| 2) (= |sendEmail_createEmail_#res#1| |sendEmail_~tmp~9#1|) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (<= 1 |sendEmail_~sender#1|) (<= |sendEmail_~sender#1| 1) (<= ~__ste_email_from0~0 0) (= ~queued_client~0 |old(~queued_client~0)|) (= |sendEmail_~email~0#1| |sendEmail_~tmp~9#1|) (<= |sendEmail_createEmail_#in~to#1| 2) (<= 2 |sendEmail_createEmail_#in~to#1|) (<= 2 ~__ste_email_to0~0) (<= 2 |sendEmail_createEmail_~to#1|) (<= ~__ste_email_to0~0 2) (= 1 |sendEmail_createEmail_~msg~0#1|) (= |sendEmail_createEmail_#res#1| |sendEmail_createEmail_~retValue_acc~35#1|) (<= 0 |sendEmail_createEmail_#in~from#1|)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:02:24,369 INFO L899 garLoopResultBuilder]: For program point sendEmailEXIT(lines 1832 1844) no Hoare annotation was computed. [2022-12-14 06:02:24,370 INFO L895 garLoopResultBuilder]: At program point L1967(line 1967) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= |sendEmail_createEmail_#in~from#1| 0) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_createEmail_~to#1|) (= |sendEmail_#in~sender#1| |sendEmail_~sender#1|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_~receiver#1|) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= 1 |sendEmail_createEmail_~msg~0#1|)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= |#NULL.offset| 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:02:24,372 INFO L895 garLoopResultBuilder]: At program point L1967-1(line 1967) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= |#NULL.offset| 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= |sendEmail_createEmail_#in~from#1| 0) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_createEmail_~to#1|) (= |sendEmail_#in~sender#1| |sendEmail_~sender#1|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_~receiver#1|) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |sendEmail_createEmail_~from#1| ~__ste_email_from0~0) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= 1 |sendEmail_createEmail_~msg~0#1|)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:02:24,372 INFO L899 garLoopResultBuilder]: For program point sendEmailFINAL(lines 1832 1844) no Hoare annotation was computed. [2022-12-14 06:02:24,373 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 1832 1844) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (= |old(~queued_message~0)| 0)) (not (= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= |#NULL.offset| 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= |old(~__ste_email_to0~0)| 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~bob~0 |sendEmail_#in~sender#1|)) (not (= |old(~__ste_email_to1~0)| 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (= |sendEmail_#in~receiver#1| ~rjh~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= |old(~queued_client~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= |old(~queue_empty~0)| 1)) (not (= |old(~__ste_email_from1~0)| 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:02:24,373 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 605 628) the Hoare annotation is: true [2022-12-14 06:02:24,373 INFO L899 garLoopResultBuilder]: For program point getClientAddressBookSizeEXIT(lines 605 628) no Hoare annotation was computed. [2022-12-14 06:02:24,374 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 886 954) the Hoare annotation is: true [2022-12-14 06:02:24,374 INFO L899 garLoopResultBuilder]: For program point getClientAddressBookAddressEXIT(lines 886 954) no Hoare annotation was computed. [2022-12-14 06:02:24,376 INFO L895 garLoopResultBuilder]: At program point L1724(line 1724) the Hoare annotation is: (or (and (<= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| 1) (= |outgoing__wrappee__AutoResponder_mail_#in~client#1| |outgoing__wrappee__AutoResponder_~client#1|) (<= |outgoing__wrappee__AutoResponder_~client#1| 1) (= |outgoing__wrappee__AutoResponder_mail_~client#1| |outgoing__wrappee__AutoResponder_mail_#in~client#1|) (<= ~queued_message~0 0) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~27#1| 2147483648)) (<= ~__ste_email_from0~0 2147483647) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (= |outgoing__wrappee__AutoResponder_mail_~msg#1| |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483647) (<= ~queue_empty~0 1) (<= 1 |outgoing__wrappee__AutoResponder_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (<= ~__ste_client_idCounter0~0 2147483647) (<= |outgoing__wrappee__AutoResponder_~tmp~5#1| 2147483647) (<= 1 ~queue_empty~0) (<= 0 ~queued_message~0) (= |outgoing__wrappee__AutoResponder_~msg#1| |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_~tmp~5#1| 2147483648)) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483648)) (<= 0 ~queued_client~0) (<= |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~27#1| 2147483647) (<= |outgoing__wrappee__AutoResponder_~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_~handle#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= 1 |outgoing__wrappee__AutoResponder_~client#1|) (<= ~queued_client~0 0)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 |old(~queued_message~0)|)) (not (<= 0 |old(~__ste_email_from0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (<= |old(~queued_message~0)| 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (<= |old(~queued_client~0)| 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (<= |old(~__ste_email_to0~0)| 2)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (<= 0 |old(~queued_client~0)|)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= |old(~queue_empty~0)| 1)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 2 |old(~__ste_email_to0~0)|)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1)) (not (<= 1 |old(~queue_empty~0)|)) (not (<= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-12-14 06:02:24,378 INFO L895 garLoopResultBuilder]: At program point L1724-1(line 1724) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 |old(~queued_message~0)|)) (not (<= 0 |old(~__ste_email_from0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (<= |old(~queued_message~0)| 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (<= |old(~queued_client~0)| 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (<= |old(~__ste_email_to0~0)| 2)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (<= 0 |old(~queued_client~0)|)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (and (<= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| 1) (<= |outgoing__wrappee__AutoResponder_~client#1| 1) (<= 2 |outgoing__wrappee__AutoResponder_mail_#t~ret17#1|) (<= ~queued_message~0 0) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~27#1| 2147483648)) (<= ~__ste_email_from0~0 2147483647) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (<= 1 |outgoing__wrappee__AutoResponder_mail_~client#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483647) (<= ~queue_empty~0 1) (<= |outgoing__wrappee__AutoResponder_mail_#in~client#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (<= ~__ste_client_idCounter0~0 2147483647) (<= |outgoing__wrappee__AutoResponder_mail_~client#1| 1) (<= |outgoing__wrappee__AutoResponder_~tmp~5#1| 2147483647) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~client#1|) (<= 1 ~queue_empty~0) (<= 1 |outgoing__wrappee__AutoResponder_mail_~msg#1|) (<= 0 ~queued_message~0) (<= 0 (+ |outgoing__wrappee__AutoResponder_~tmp~5#1| 2147483648)) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483648)) (<= 0 ~queued_client~0) (<= |outgoing__wrappee__AutoResponder_mail_~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_mail_#in~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~27#1| 2147483647) (<= |outgoing__wrappee__AutoResponder_mail_#t~ret17#1| 2) (<= |outgoing__wrappee__AutoResponder_~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_~handle#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= 1 |outgoing__wrappee__AutoResponder_~client#1|) (<= ~queued_client~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= |old(~queue_empty~0)| 1)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 2 |old(~__ste_email_to0~0)|)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1)) (not (<= 1 |old(~queue_empty~0)|)) (not (<= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-12-14 06:02:24,378 INFO L899 garLoopResultBuilder]: For program point L2587-1(line 2587) no Hoare annotation was computed. [2022-12-14 06:02:24,381 INFO L895 garLoopResultBuilder]: At program point L2587(line 2587) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 |old(~queued_message~0)|)) (not (<= 0 |old(~__ste_email_from0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (<= |old(~queued_message~0)| 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (<= |old(~queued_client~0)| 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (<= |old(~__ste_email_to0~0)| 2)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (<= 0 |old(~queued_client~0)|)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (and (= |outgoing__wrappee__AutoResponder_incoming__wrappee__Base_#in~client#1| |outgoing__wrappee__AutoResponder_incoming_~client#1|) (= |outgoing__wrappee__AutoResponder_incoming__wrappee__Base_#in~msg#1| |outgoing__wrappee__AutoResponder_incoming__wrappee__Base_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| 1) (= |outgoing__wrappee__AutoResponder_getClientAutoResponse_~retValue_acc~19#1| ~__ste_client_autoResponse1~0) (= |outgoing__wrappee__AutoResponder_autoRespond_#in~client#1| |outgoing__wrappee__AutoResponder_incoming_~client#1|) (= |outgoing__wrappee__AutoResponder_autoRespond_#in~client#1| |outgoing__wrappee__AutoResponder_autoRespond_~client#1|) (<= |outgoing__wrappee__AutoResponder_~client#1| 1) (= |outgoing__wrappee__AutoResponder_incoming__wrappee__Base_#in~client#1| |outgoing__wrappee__AutoResponder_incoming__wrappee__Base_~client#1|) (= |outgoing__wrappee__AutoResponder_autoRespond_#in~msg#1| |outgoing__wrappee__AutoResponder_autoRespond_~msg#1|) (<= ~queued_message~0 0) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~27#1| 2147483648)) (<= ~__ste_email_from0~0 2147483647) (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_~msg#1| |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_#in~msg#1|) (= |outgoing__wrappee__AutoResponder_autoRespond_~__utac__ad__arg2~0#1| |outgoing__wrappee__AutoResponder_autoRespond_~msg#1|) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (= |outgoing__wrappee__AutoResponder_deliver_#in~msg#1| |outgoing__wrappee__AutoResponder_deliver_~msg#1|) (= |outgoing__wrappee__AutoResponder_getClientAutoResponse_#in~handle#1| |outgoing__wrappee__AutoResponder_incoming_~client#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_~client#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483647) (<= ~queue_empty~0 1) (<= |outgoing__wrappee__AutoResponder_mail_#in~client#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (= |outgoing__wrappee__AutoResponder_getClientAutoResponse_~retValue_acc~19#1| |outgoing__wrappee__AutoResponder_getClientAutoResponse_#res#1|) (<= ~__ste_client_idCounter0~0 2147483647) (<= |outgoing__wrappee__AutoResponder_mail_~client#1| 1) (= |outgoing__wrappee__AutoResponder_incoming_#in~msg#1| |outgoing__wrappee__AutoResponder_mail_~msg#1|) (= |outgoing__wrappee__AutoResponder_incoming_#in~msg#1| |outgoing__wrappee__AutoResponder_incoming_~msg#1|) (<= |outgoing__wrappee__AutoResponder_~tmp~5#1| 2147483647) (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_~client#1| |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_#in~client#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~client#1|) (<= 1 ~queue_empty~0) (= |outgoing__wrappee__AutoResponder_deliver_~client#1| |outgoing__wrappee__AutoResponder_deliver_#in~client#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_~msg#1|) (<= 2 |outgoing__wrappee__AutoResponder_mail_~tmp~4#1|) (<= 0 ~queued_message~0) (<= 0 (+ |outgoing__wrappee__AutoResponder_~tmp~5#1| 2147483648)) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483648)) (<= 0 ~queued_client~0) (= |outgoing__wrappee__AutoResponder_getClientAutoResponse_#in~handle#1| |outgoing__wrappee__AutoResponder_getClientAutoResponse_~handle#1|) (= |outgoing__wrappee__AutoResponder_incoming_~client#1| |outgoing__wrappee__AutoResponder_incoming_#in~client#1|) (= |outgoing__wrappee__AutoResponder_incoming_~tmp~7#1| |outgoing__wrappee__AutoResponder_getClientAutoResponse_#res#1|) (= |outgoing__wrappee__AutoResponder_autoRespond_~__utac__ad__arg1~0#1| |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_#in~client#1|) (<= |outgoing__wrappee__AutoResponder_mail_~msg#1| 1) (= |outgoing__wrappee__AutoResponder_mail_~tmp~4#1| |outgoing__wrappee__AutoResponder_incoming_#in~client#1|) (= |outgoing__wrappee__AutoResponder_autoRespond_~__utac__ad__arg1~0#1| |outgoing__wrappee__AutoResponder_autoRespond_~client#1|) (<= |outgoing__wrappee__AutoResponder_mail_#in~msg#1| 1) (= |outgoing__wrappee__AutoResponder_incoming__wrappee__Base_#in~msg#1| |outgoing__wrappee__AutoResponder_incoming_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~27#1| 2147483647) (<= |outgoing__wrappee__AutoResponder_~msg#1| 1) (= |outgoing__wrappee__AutoResponder_incoming__wrappee__Base_~msg#1| |outgoing__wrappee__AutoResponder_deliver_#in~msg#1|) (= |outgoing__wrappee__AutoResponder_autoRespond_#in~msg#1| |outgoing__wrappee__AutoResponder_incoming_~msg#1|) (= |outgoing__wrappee__AutoResponder_autoRespond_~__utac__ad__arg2~0#1| |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_#in~msg#1|) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_~handle#1|) (<= |outgoing__wrappee__AutoResponder_mail_~tmp~4#1| 2) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= 1 |outgoing__wrappee__AutoResponder_~client#1|) (= |outgoing__wrappee__AutoResponder_deliver_#in~client#1| |outgoing__wrappee__AutoResponder_incoming__wrappee__Base_~client#1|) (<= ~queued_client~0 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= |old(~queue_empty~0)| 1)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 2 |old(~__ste_email_to0~0)|)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1)) (not (<= 1 |old(~queue_empty~0)|)) (not (<= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-12-14 06:02:24,381 INFO L899 garLoopResultBuilder]: For program point L1807(lines 1807 1813) no Hoare annotation was computed. [2022-12-14 06:02:24,383 INFO L895 garLoopResultBuilder]: At program point L1807-2(lines 1799 1816) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 |old(~queued_message~0)|)) (not (<= 0 |old(~__ste_email_from0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (<= |old(~queued_message~0)| 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (<= |old(~queued_client~0)| 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (<= |old(~__ste_email_to0~0)| 2)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (<= 0 |old(~queued_client~0)|)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_~tmp~16#1| 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= |old(~queue_empty~0)| 1)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 2 |old(~__ste_email_to0~0)|)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1)) (not (<= 1 |old(~queue_empty~0)|)) (not (<= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-12-14 06:02:24,383 INFO L899 garLoopResultBuilder]: For program point outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION(line 2210) no Hoare annotation was computed. [2022-12-14 06:02:24,383 INFO L899 garLoopResultBuilder]: For program point outgoing__wrappee__AutoResponderEXIT(lines 1730 1741) no Hoare annotation was computed. [2022-12-14 06:02:24,383 INFO L895 garLoopResultBuilder]: At program point L1895(line 1895) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_~tmp~16#1| 0)) [2022-12-14 06:02:24,383 INFO L899 garLoopResultBuilder]: For program point L1895-1(line 1895) no Hoare annotation was computed. [2022-12-14 06:02:24,383 INFO L899 garLoopResultBuilder]: For program point L2589(lines 2589 2595) no Hoare annotation was computed. [2022-12-14 06:02:24,383 INFO L895 garLoopResultBuilder]: At program point L2589-2(lines 2581 2598) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_~tmp~16#1| 0)) [2022-12-14 06:02:24,385 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 1730 1741) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 |old(~queued_message~0)|)) (not (<= 0 |old(~__ste_email_from0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (<= |old(~queued_message~0)| 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (<= |old(~queued_client~0)| 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (<= |old(~__ste_email_to0~0)| 2)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (<= 0 |old(~queued_client~0)|)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (and (= ~queued_message~0 |old(~queued_message~0)|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= |old(~queue_empty~0)| 1)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 2 |old(~__ste_email_to0~0)|)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1)) (not (<= 1 |old(~queue_empty~0)|)) (not (<= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-12-14 06:02:24,385 INFO L895 garLoopResultBuilder]: At program point L2210(line 2210) the Hoare annotation is: false [2022-12-14 06:02:24,385 INFO L895 garLoopResultBuilder]: At program point L1897(line 1897) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_~tmp~16#1| 0)) [2022-12-14 06:02:24,386 INFO L895 garLoopResultBuilder]: At program point L1736(line 1736) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 |old(~queued_message~0)|)) (not (<= 0 |old(~__ste_email_from0~0)|)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (<= |old(~queued_message~0)| 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (<= |old(~queued_client~0)| 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_client_privateKey2~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_client_privateKey1~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (<= |old(~__ste_email_to0~0)| 2)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_client_privateKey0~0 0)) (not (<= 0 |old(~queued_client~0)|)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= |old(~queue_empty~0)| 1)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 2 |old(~__ste_email_to0~0)|)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1)) (not (<= 1 |old(~queue_empty~0)|)) (not (<= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_name1~0.base 0)) (and (= |outgoing__wrappee__AutoResponder_getClientId_#res#1| |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~27#1|) (= ~queued_message~0 |old(~queued_message~0)|) (= |outgoing__wrappee__AutoResponder_~client#1| |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (<= |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483647) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |outgoing__wrappee__AutoResponder_~client#1| |outgoing__wrappee__AutoResponder_#in~client#1|) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483648)) (= ~queued_client~0 |old(~queued_client~0)|) (= ~__ste_client_idCounter0~0 |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~27#1|) (= |outgoing__wrappee__AutoResponder_~msg#1| |outgoing__wrappee__AutoResponder_#in~msg#1|) (= |outgoing__wrappee__AutoResponder_~tmp~5#1| |outgoing__wrappee__AutoResponder_getClientId_#res#1|)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (= ~__ste_ClientKeyring_size1~0 0))) [2022-12-14 06:02:24,386 INFO L895 garLoopResultBuilder]: At program point L1897-1(line 1897) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__DecryptAutoResponder_spec__1_~tmp~16#1| 0)) [2022-12-14 06:02:24,386 INFO L899 garLoopResultBuilder]: For program point L1736-1(line 1736) no Hoare annotation was computed. [2022-12-14 06:02:24,386 INFO L899 garLoopResultBuilder]: For program point setEmailFromEXIT(lines 144 159) no Hoare annotation was computed. [2022-12-14 06:02:24,388 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 144 159) the Hoare annotation is: (or (not (<= ~__ste_client_privateKey0~0 0)) (not (<= 0 ~queued_client~0)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= ~__ste_email_isEncrypted1~0 0)) (not (<= |setEmailFrom_#in~value| 2147483647)) (not (<= 0 ~__ste_client_privateKey0~0)) (not (<= 0 |old(~__ste_email_from0~0)|)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 ~head~0.base)) (not (<= |setEmailFrom_#in~handle| 1)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (<= 0 ~__ste_client_privateKey1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= ~queued_message~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (<= 0 ~__ste_email_to0~0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (<= 0 ~__ste_Client_Keyring1_User2~0)) (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~__ste_email_to0~0 2)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (<= ~bob~0 1)) (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= 0 ~queued_message~0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (<= 1 |setEmailFrom_#in~handle|)) (and (<= 0 ~__ste_email_from0~0) (<= ~__ste_email_from0~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 (+ |setEmailFrom_#in~value| 2147483648))) (not (<= ~__ste_client_privateKey2~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= 1 ~queue_empty~0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= 0 ~__ste_client_privateKey2~0)) (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (<= 0 ~__ste_email_isEncrypted1~0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= ~__ste_Client_Keyring2_User1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_ClientKeyring_size2~0 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~queue_empty~0 1)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= |old(~__ste_email_from0~0)| 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~__ste_client_autoResponse1~0 1)) (not (<= ~queued_client~0 0)) (not (<= 0 ~__ste_Client_Keyring1_User0~0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (<= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= 1 ~__ste_client_autoResponse1~0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:02:24,388 INFO L899 garLoopResultBuilder]: For program point L2051(lines 2050 2196) no Hoare annotation was computed. [2022-12-14 06:02:24,388 INFO L899 garLoopResultBuilder]: For program point L2167(lines 2167 2171) no Hoare annotation was computed. [2022-12-14 06:02:24,388 INFO L895 garLoopResultBuilder]: At program point L1622(line 1622) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,388 INFO L902 garLoopResultBuilder]: At program point L1622-1(lines 1605 1627) the Hoare annotation is: true [2022-12-14 06:02:24,388 INFO L899 garLoopResultBuilder]: For program point L1672(lines 1672 1679) no Hoare annotation was computed. [2022-12-14 06:02:24,388 INFO L902 garLoopResultBuilder]: At program point L1672-2(lines 1672 1679) the Hoare annotation is: true [2022-12-14 06:02:24,389 INFO L895 garLoopResultBuilder]: At program point L1590(line 1590) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| ~rjh~0) (= ~__ste_email_to0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 6) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~28#1| 2147483647) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~37#1|) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= ~__ste_client_idCounter0~0 1) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (<= 1 ~__ste_client_idCounter0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~28#1|)) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:02:24,390 INFO L895 garLoopResultBuilder]: At program point L1590-1(lines 1585 1594) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (= 0 ~__ste_email_subject0~0.base) (<= ~__ste_client_idCounter1~0 2) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 6) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~28#1| 2147483647) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~37#1|) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 2 ~__ste_client_idCounter1~0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~28#1|)) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:02:24,390 INFO L899 garLoopResultBuilder]: For program point L2120(lines 2120 2124) no Hoare annotation was computed. [2022-12-14 06:02:24,390 INFO L899 garLoopResultBuilder]: For program point L2087(lines 2087 2091) no Hoare annotation was computed. [2022-12-14 06:02:24,390 INFO L895 garLoopResultBuilder]: At program point $Ultimate##63(lines 2138 2188) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,390 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-14 06:02:24,390 INFO L895 garLoopResultBuilder]: At program point L2073(lines 2073 2080) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,390 INFO L899 garLoopResultBuilder]: For program point L2156(lines 2156 2160) no Hoare annotation was computed. [2022-12-14 06:02:24,390 INFO L895 garLoopResultBuilder]: At program point $Ultimate##51(lines 2116 2190) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,390 INFO L895 garLoopResultBuilder]: At program point $Ultimate##57(lines 2127 2189) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,390 INFO L899 garLoopResultBuilder]: For program point L2058(lines 2058 2195) no Hoare annotation was computed. [2022-12-14 06:02:24,390 INFO L895 garLoopResultBuilder]: At program point $Ultimate##45(lines 2105 2191) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,390 INFO L895 garLoopResultBuilder]: At program point $Ultimate##39(lines 2094 2192) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,390 INFO L895 garLoopResultBuilder]: At program point L1613(line 1613) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,392 INFO L895 garLoopResultBuilder]: At program point L1580(line 1580) the Hoare annotation is: (let ((.cse1 (select |#memory_int| 1)) (.cse0 (select |#memory_int| 31))) (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= (select |#valid| 30) 1) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (= ~__ste_Client_counter~0 0) (= ~rjh~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= (select |#length| 8) 11) (= 10 (select |#length| 16)) (= (select |#valid| 26) 1) (= ~__ste_client_autoResponse1~0 0) (= 30 (select |#length| 24)) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (= (select |#valid| 9) 1) (= (select |#length| 6) 9) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= (select |#valid| 11) 1) (= (select |#length| 9) 10) (= ~__ste_Client_AddressBook1_Address2~0 0) (= (select |#length| 15) 12) (= (select |#valid| 27) 1) (= 16 (select |#length| 12)) (= 21 (select |#length| 20)) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= (select |#length| 29) 25) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= |ULTIMATE.start_setup_bob_#in~bob___0#1| ~bob~0) (= ~__ste_ClientAddressBook_size0~0 0) (= 4 (select |#length| 31)) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= 9 (select |#length| 25)) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= (select |#length| 27) 30) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= 2 (select |#length| 1)) (= ~__ste_client_idCounter1~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= (select |#valid| 3) 1) (= ~__ste_email_signKey0~0 0) (= (select |#valid| 7) 1) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~28#1| 2147483647) (= (select |#length| 30) 20) (= ~__SELECTED_FEATURE_Keys~0 0) (= (select |#valid| 18) 1) (= (select |#valid| 22) 1) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= (select |#valid| 24) 1) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~37#1|) (= 30 (select |#length| 11)) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (= (select |#valid| 12) 1) (= (select |#length| 19) 9) (= ~__ste_Client_AddressBook2_Address2~0 0) (= (select .cse0 1) 115) (= (select |#valid| 28) 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= (select |#valid| 4) 1) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_valid_product_~retValue_acc~37#1|) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= (select |#valid| 1) 1) (= 44 (select |#length| 4)) (= ~__ste_client_forwardReceiver0~0 0) (= (select |#valid| 20) 1) (= 10 (select |#length| 14)) (= ~__ste_Client_Keyring2_User0~0 0) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= 22 (select |#length| 13)) (= ~__ste_Client_AddressBook2_Address0~0 0) (= (select |#length| 17) 18) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= (select |#valid| 21) 1) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_idCounter2~0 0) (= (select |#length| 28) 9) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (= (select |#length| 22) 9) (= (select .cse0 2) 10) (= (select |#valid| 14) 1) (= ~__ste_email_subject1~0.base 0) (= (select |#length| 21) 30) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= (select |#valid| 0) 0) (= ~__ste_Client_Keyring2_User2~0 0) (= (select |#valid| 25) 1) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= (select |#valid| 2) 1) (= 25 (select |#length| 26)) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= (select .cse1 0) 48) (= ~__ste_email_subject1~0.offset 0) (= (select |#valid| 23) 1) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= 34 (select |#length| 10)) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= ~__ste_client_idCounter0~0 0) (= 9 (select |#length| 7)) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= 29 (select |#length| 2)) (= ~__ste_client_outbuffer1~0 0) (= (select |#valid| 19) 1) (= (select |#valid| 31) 1) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= (select |#valid| 16) 1) (= (select .cse0 0) 37) (= (select |#valid| 6) 1) (= ~chuck~0 0) (= 30 (select |#length| 18)) (= (select .cse1 1) 0) (= 44 (select |#length| 5)) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= |ULTIMATE.start_setup_bob_#in~bob___0#1| |ULTIMATE.start_setup_bob_~bob___0#1|) (= 21 (select |#length| 23)) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~28#1|)) (= ~__ste_client_outbuffer2~0 0) (= (select |#valid| 29) 1) (= (select .cse0 3) 0) (= ~__ste_ClientAddressBook_size2~0 0) (= (select |#valid| 17) 1) (= (select |#valid| 10) 1) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= (select |#valid| 8) 1) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0))) [2022-12-14 06:02:24,392 INFO L895 garLoopResultBuilder]: At program point L1613-1(line 1613) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,393 INFO L895 garLoopResultBuilder]: At program point L1580-1(lines 1575 1584) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~rjh~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~28#1| 2147483647) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~37#1|) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= ~__ste_client_idCounter0~0 1) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (<= 1 ~__ste_client_idCounter0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~28#1|)) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:02:24,393 INFO L895 garLoopResultBuilder]: At program point $Ultimate##33(lines 2083 2193) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,393 INFO L899 garLoopResultBuilder]: For program point L2142(lines 2142 2149) no Hoare annotation was computed. [2022-12-14 06:02:24,393 INFO L899 garLoopResultBuilder]: For program point L2109(lines 2109 2113) no Hoare annotation was computed. [2022-12-14 06:02:24,393 INFO L895 garLoopResultBuilder]: At program point $Ultimate##18(lines 2069 2194) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,393 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(line -1) the Hoare annotation is: true [2022-12-14 06:02:24,393 INFO L895 garLoopResultBuilder]: At program point L1698(line 1698) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,393 INFO L895 garLoopResultBuilder]: At program point L1698-1(line 1698) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,394 INFO L895 garLoopResultBuilder]: At program point L1616(lines 1616 1624) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,394 INFO L899 garLoopResultBuilder]: For program point L2062(lines 2062 2066) no Hoare annotation was computed. [2022-12-14 06:02:24,394 INFO L899 garLoopResultBuilder]: For program point L2178(lines 2178 2182) no Hoare annotation was computed. [2022-12-14 06:02:24,394 INFO L895 garLoopResultBuilder]: At program point L1600(line 1600) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.offset| 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (= 0 ~__ste_email_subject0~0.base) (<= ~__ste_client_idCounter1~0 2) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| ~chuck~0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 6) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~28#1| 2147483647) (= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| |ULTIMATE.start_setup_chuck_~chuck___0#1|) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~37#1|) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= 3 ~chuck~0) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 2 ~__ste_client_idCounter1~0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= 7 |ULTIMATE.start_setup_~__cil_tmp2~0#1.base|) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~28#1|)) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:02:24,394 INFO L895 garLoopResultBuilder]: At program point L2178-1(lines 2050 2196) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,395 INFO L895 garLoopResultBuilder]: At program point L1600-1(lines 1595 1604) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.offset| 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (<= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| 3) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (<= ~__ste_client_idCounter2~0 3) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 6) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~28#1| 2147483647) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~37#1|) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (<= 3 ~__ste_client_idCounter2~0) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= 3 ~chuck~0) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (<= 3 |ULTIMATE.start_setup_chuck_~chuck___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (<= 3 |ULTIMATE.start_setup_chuck_#in~chuck___0#1|) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (= ~head~0.base 0) (<= |ULTIMATE.start_setup_chuck_~chuck___0#1| 3) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= 7 |ULTIMATE.start_setup_~__cil_tmp2~0#1.base|) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~28#1|)) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:02:24,395 INFO L895 garLoopResultBuilder]: At program point L1700(line 1700) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,395 INFO L895 garLoopResultBuilder]: At program point L1700-1(line 1700) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,395 INFO L895 garLoopResultBuilder]: At program point L1701(lines 1693 1705) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,395 INFO L895 garLoopResultBuilder]: At program point $Ultimate##105(lines 2152 2187) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,396 INFO L895 garLoopResultBuilder]: At program point L2197(lines 2049 2198) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,396 INFO L899 garLoopResultBuilder]: For program point L2098(lines 2098 2102) no Hoare annotation was computed. [2022-12-14 06:02:24,396 INFO L899 garLoopResultBuilder]: For program point L2131(lines 2131 2135) no Hoare annotation was computed. [2022-12-14 06:02:24,396 INFO L895 garLoopResultBuilder]: At program point $Ultimate##111(lines 2163 2186) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,396 INFO L895 garLoopResultBuilder]: At program point $Ultimate##117(lines 2174 2185) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~3#1| 1) [2022-12-14 06:02:24,396 INFO L899 garLoopResultBuilder]: For program point getEmailFromEXIT(lines 125 143) no Hoare annotation was computed. [2022-12-14 06:02:24,396 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 125 143) the Hoare annotation is: true [2022-12-14 06:02:24,396 INFO L899 garLoopResultBuilder]: For program point setClientAddressBookAddressEXIT(lines 955 1010) no Hoare annotation was computed. [2022-12-14 06:02:24,396 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 955 1010) the Hoare annotation is: true [2022-12-14 06:02:24,396 INFO L899 garLoopResultBuilder]: For program point isReadableEXIT(lines 1942 1950) no Hoare annotation was computed. [2022-12-14 06:02:24,396 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1942 1950) the Hoare annotation is: true [2022-12-14 06:02:24,396 INFO L899 garLoopResultBuilder]: For program point setClientIdEXIT(lines 1520 1539) no Hoare annotation was computed. [2022-12-14 06:02:24,396 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1520 1539) the Hoare annotation is: true [2022-12-14 06:02:24,398 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:02:24,400 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-14 06:02:24,450 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.12 06:02:24 BoogieIcfgContainer [2022-12-14 06:02:24,450 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-14 06:02:24,450 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-14 06:02:24,450 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-14 06:02:24,450 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-14 06:02:24,450 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:57:13" (3/4) ... [2022-12-14 06:02:24,453 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-14 06:02:24,457 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure outgoing [2022-12-14 06:02:24,457 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setEmailTo [2022-12-14 06:02:24,457 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getEmailTo [2022-12-14 06:02:24,457 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientAddressBookSize [2022-12-14 06:02:24,457 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure sendEmail [2022-12-14 06:02:24,457 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getClientAddressBookSize [2022-12-14 06:02:24,457 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getClientAddressBookAddress [2022-12-14 06:02:24,457 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure outgoing__wrappee__AutoResponder [2022-12-14 06:02:24,457 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setEmailFrom [2022-12-14 06:02:24,458 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getEmailFrom [2022-12-14 06:02:24,458 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientAddressBookAddress [2022-12-14 06:02:24,458 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isReadable [2022-12-14 06:02:24,458 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientId [2022-12-14 06:02:24,467 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 148 nodes and edges [2022-12-14 06:02:24,467 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 43 nodes and edges [2022-12-14 06:02:24,468 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2022-12-14 06:02:24,469 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2022-12-14 06:02:24,469 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 06:02:24,470 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 06:02:24,488 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && rjh == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && __ste_Client_AddressBook2_Alias0 == 0) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && retValue_acc <= 2147483647) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && 1 == retValue_acc) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && tmp == 1) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && __ste_client_idCounter0 <= 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && 1 <= __ste_client_idCounter0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && 0 <= 2147483648 + retValue_acc) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 [2022-12-14 06:02:24,488 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 0 == __ste_email_subject0) && __ste_client_idCounter1 <= 2) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __cil_tmp1 == 6) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && retValue_acc <= 2147483647) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && 1 == retValue_acc) && \old(rjh___0) <= 2) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && __ste_Client_AddressBook1_Alias2 == 0) && 2 <= __ste_client_idCounter1) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && tmp == 1) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && 0 <= 2147483648 + retValue_acc) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 [2022-12-14 06:02:24,489 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __cil_tmp2 == 0) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && \old(chuck___0) <= 3) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_client_idCounter2 <= 3) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __cil_tmp1 == 6) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && retValue_acc <= 2147483647) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && 1 == retValue_acc) && \old(rjh___0) <= 2) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && 3 <= __ste_client_idCounter2) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && 3 == chuck) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 3 <= chuck___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && 3 <= \old(chuck___0)) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && tmp == 1) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && chuck___0 <= 3) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && 7 == __cil_tmp2) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && 0 <= 2147483648 + retValue_acc) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 [2022-12-14 06:02:24,490 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_client_privateKey0 <= 0) || !(0 <= __ste_email_subject0)) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= __ste_Client_AddressBook2_Address1)) || !(0 <= __ste_client_privateKey0)) || !(\old(queued_message) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_email_signKey1 <= 0)) || !(__SELECTED_FEATURE_Verify <= 0)) || !(0 <= head)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_forwardReceiver1)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(__ste_Client_AddressBook2_Address1 <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(0 <= __ste_email_encryptionKey0)) || !(__ste_email_id0 == 0)) || !(__ste_ClientKeyring_size0 <= 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(head <= 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(bob <= 1)) || !(0 <= __ste_ClientKeyring_size1)) || !(__ste_client_name0 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(0 <= __ste_Client_AddressBook0_Alias2)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_Client_AddressBook1_Alias0 <= 0)) || !(\old(__ste_email_to0) == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_client_outbuffer0 == 0)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(0 <= __ste_Client_Keyring1_PublicKey2)) || !(__ste_email_isEncrypted1 == 0)) || !(1 <= bob)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(0 <= __ste_Client_Keyring2_User1)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_client_forwardReceiver3 <= 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || !(bob == \old(sender))) || !(\old(__ste_email_to1) == 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(0 <= __ste_Client_AddressBook1_Alias0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_client_name0 <= 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(__ste_client_privateKey2 <= 0)) || !(0 <= __ste_email_isSigned0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_Client_Keyring1_PublicKey2 <= 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_AddressBook0_Alias2 <= 0)) || !(0 <= __ste_client_privateKey2)) || !(\old(receiver) == rjh)) || !(__ste_ClientKeyring_size1 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_Client_AddressBook1_Alias2 <= 0)) || !(__ste_email_encryptionKey1 == 0)) || ((((((((((((((((((((queued_message <= 0 && \old(from) <= 0) && 1 <= msg) && queue_empty <= 1) && 0 <= __ste_email_from0) && \old(receiver) == receiver) && msg <= 1) && 1 <= queue_empty) && to <= 2) && 0 <= queued_message) && from == \old(from)) && 1 <= sender) && sender <= 1) && __ste_email_from0 <= 0) && queued_client == \old(queued_client)) && \old(to) <= 2) && 2 <= \old(to)) && 2 <= __ste_email_to0) && 2 <= to) && __ste_email_to0 <= 2) && 0 <= \old(from))) || !(0 <= __ste_client_forwardReceiver2)) || !(__ste_email_subject0 <= 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(0 <= __ste_ClientKeyring_size0)) || !(__ste_Client_AddressBook0_Address2 <= 0)) || !(0 <= __SELECTED_FEATURE_Verify)) || !(__ste_Client_Keyring2_User1 <= 0)) || !(0 <= __ste_client_forwardReceiver3)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(0 <= __ste_Client_AddressBook1_Alias2)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_client_forwardReceiver2 <= 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(\old(__ste_email_from1) == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(0 <= __ste_Client_Keyring0_PublicKey0)) || !(0 <= __ste_client_name1)) || !(__ste_Client_AddressBook0_Address0 <= 0)) || !(3 == chuck)) || !(0 <= __ste_Client_AddressBook0_Address0)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_forwardReceiver1 <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(0 <= __ste_client_name0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_email_encryptionKey0 <= 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_client_name1 <= 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(0 <= __ste_Client_AddressBook0_Address2)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_Client_Keyring0_PublicKey0 <= 0)) || !(__ste_email_isSigned0 <= 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0) [2022-12-14 06:02:24,490 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || ((((((queued_message == \old(queued_message) && __ste_email_to0 == \old(__ste_email_to0)) && __ste_email_to1 == \old(__ste_email_to1)) && \old(__ste_email_from0) == __ste_email_from0) && \old(__ste_email_from1) == __ste_email_from1) && \old(queue_empty) == queue_empty) && queued_client == \old(queued_client))) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) [2022-12-14 06:02:24,491 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || (((((((((((((((((((((((((((((((((((handle <= 1 && client <= 1) && 2 <= aux-getEmailTo(msg)-aux) && queued_message <= 0) && 0 <= retValue_acc + 2147483648) && __ste_email_from0 <= 2147483647) && 0 <= __ste_email_from0 + 2147483648) && 1 <= client) && \result <= 2147483647) && queue_empty <= 1) && \old(client) <= 1) && 1 <= msg) && \old(handle) <= 1) && 1 <= \old(handle)) && __ste_client_idCounter0 <= 2147483647) && client <= 1) && tmp <= 2147483647) && 1 <= \old(client)) && 1 <= queue_empty) && 1 <= msg) && 0 <= queued_message) && 0 <= tmp + 2147483648) && 1 <= \old(msg)) && 0 <= \result + 2147483648) && 0 <= queued_client) && msg <= 1) && \old(msg) <= 1) && retValue_acc <= 2147483647) && aux-getEmailTo(msg)-aux <= 2) && msg <= 1) && 1 <= handle) && 0 <= __ste_client_idCounter0 + 2147483648) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2) && 1 <= client) && queued_client <= 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) [2022-12-14 06:02:24,491 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(tmp == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) [2022-12-14 06:02:24,492 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_client_privateKey0 <= 0) || !(1 <= \old(client))) || !(0 <= __ste_email_subject0)) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= __ste_Client_AddressBook2_Address1)) || !(0 <= __ste_client_privateKey0)) || !(\old(queued_message) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_email_signKey1 <= 0)) || !(__SELECTED_FEATURE_Verify <= 0)) || !(rjh == \old(__ste_email_to0))) || !(0 <= head)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(0 <= #NULL)) || !(__ste_ClientAddressBook_size1 == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_forwardReceiver1)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 <= __ste_email_id1)) || !(__ste_Client_AddressBook2_Address1 <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(0 <= __ste_email_encryptionKey0)) || !(__ste_email_id0 == 0)) || !(__ste_ClientKeyring_size0 <= 0)) || !(0 <= __SELECTED_FEATURE_AddressBook)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(head <= 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(bob <= 1)) || !(0 <= __ste_ClientKeyring_size1)) || !(__ste_client_name0 == 0)) || !(\old(client) <= 1)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(0 <= __ste_Client_AddressBook0_Alias2)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_Client_AddressBook1_Alias0 <= 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_client_outbuffer0 == 0)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(0 <= __ste_Client_Keyring1_PublicKey2)) || !(__ste_email_isEncrypted1 == 0)) || !(1 <= bob)) || !(head == 0)) || !(0 <= __ste_Client_Keyring2_User1)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_client_forwardReceiver3 <= 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || ((((((((((((((queued_message <= 0 && __ste_email_to1 == \old(__ste_email_to1)) && \old(__ste_email_from0) == __ste_email_from0) && 0 <= queued_message) && \old(__ste_email_from1) == __ste_email_from1) && 1 <= msg) && \old(queue_empty) == queue_empty) && queued_client == \old(queued_client)) && size == tmp) && client == \old(client)) && msg <= 1) && 0 <= tmp) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2) && tmp <= 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(0 <= __ste_Client_AddressBook1_Alias0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_client_name0 <= 0)) || !(__ste_email_id1 <= 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(__ste_client_privateKey2 <= 0)) || !(0 <= __ste_email_isSigned0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_Client_Keyring1_PublicKey2 <= 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_AddressBook0_Alias2 <= 0)) || !(0 <= __ste_client_privateKey2)) || !(__ste_ClientKeyring_size1 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_Client_AddressBook1_Alias2 <= 0)) || !(__ste_email_encryptionKey1 == 0)) || !(#NULL <= 0)) || !(__ste_Client_AddressBook0_Address1 <= 0)) || !(0 <= __ste_client_forwardReceiver2)) || !(__ste_email_subject0 <= 0)) || !(__ste_Client_Keyring1_User0 <= 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(0 <= __ste_ClientKeyring_size0)) || !(__ste_Client_AddressBook0_Address2 <= 0)) || !(0 <= __SELECTED_FEATURE_Verify)) || !(__ste_Client_Keyring2_User1 <= 0)) || !(0 <= __ste_client_forwardReceiver3)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__SELECTED_FEATURE_AddressBook <= 0)) || !(__ste_email_subject1 == 0)) || !(0 <= __ste_Client_AddressBook1_Alias2)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_client_forwardReceiver2 <= 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(0 <= __ste_Client_Keyring0_PublicKey0)) || !(0 <= __ste_client_name1)) || !(__ste_Client_AddressBook0_Address0 <= 0)) || !(3 == chuck)) || !(0 <= __ste_Client_AddressBook0_Address0)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_forwardReceiver1 <= 0)) || !(__ste_email_isEncrypted0 <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(0 <= __ste_Client_Keyring1_User0)) || !(0 <= __ste_client_name0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_email_encryptionKey0 <= 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(0 <= __ste_Client_AddressBook0_Address1)) || !(__ste_client_name1 <= 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(0 <= __ste_Client_AddressBook0_Address2)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_Client_Keyring0_PublicKey0 <= 0)) || !(__ste_email_isSigned0 <= 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(0 <= __ste_email_isEncrypted0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0) [2022-12-14 06:02:24,525 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/witness.graphml [2022-12-14 06:02:24,525 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-14 06:02:24,525 INFO L158 Benchmark]: Toolchain (without parser) took 312824.28ms. Allocated memory was 130.0MB in the beginning and 327.2MB in the end (delta: 197.1MB). Free memory was 93.1MB in the beginning and 251.0MB in the end (delta: -157.9MB). Peak memory consumption was 41.6MB. Max. memory is 16.1GB. [2022-12-14 06:02:24,525 INFO L158 Benchmark]: CDTParser took 0.11ms. Allocated memory is still 130.0MB. Free memory is still 72.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-14 06:02:24,525 INFO L158 Benchmark]: CACSL2BoogieTranslator took 487.60ms. Allocated memory was 130.0MB in the beginning and 157.3MB in the end (delta: 27.3MB). Free memory was 93.1MB in the beginning and 123.4MB in the end (delta: -30.3MB). Peak memory consumption was 48.8MB. Max. memory is 16.1GB. [2022-12-14 06:02:24,526 INFO L158 Benchmark]: Boogie Procedure Inliner took 63.10ms. Allocated memory is still 157.3MB. Free memory was 123.4MB in the beginning and 119.2MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-12-14 06:02:24,526 INFO L158 Benchmark]: Boogie Preprocessor took 30.97ms. Allocated memory is still 157.3MB. Free memory was 119.2MB in the beginning and 115.9MB in the end (delta: 3.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-12-14 06:02:24,526 INFO L158 Benchmark]: RCFGBuilder took 770.97ms. Allocated memory is still 157.3MB. Free memory was 115.9MB in the beginning and 76.8MB in the end (delta: 39.1MB). Peak memory consumption was 58.7MB. Max. memory is 16.1GB. [2022-12-14 06:02:24,526 INFO L158 Benchmark]: TraceAbstraction took 311388.32ms. Allocated memory was 157.3MB in the beginning and 327.2MB in the end (delta: 169.9MB). Free memory was 75.7MB in the beginning and 264.6MB in the end (delta: -188.9MB). Peak memory consumption was 175.0MB. Max. memory is 16.1GB. [2022-12-14 06:02:24,526 INFO L158 Benchmark]: Witness Printer took 74.76ms. Allocated memory is still 327.2MB. Free memory was 264.6MB in the beginning and 251.0MB in the end (delta: 13.6MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2022-12-14 06:02:24,527 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11ms. Allocated memory is still 130.0MB. Free memory is still 72.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 487.60ms. Allocated memory was 130.0MB in the beginning and 157.3MB in the end (delta: 27.3MB). Free memory was 93.1MB in the beginning and 123.4MB in the end (delta: -30.3MB). Peak memory consumption was 48.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 63.10ms. Allocated memory is still 157.3MB. Free memory was 123.4MB in the beginning and 119.2MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 30.97ms. Allocated memory is still 157.3MB. Free memory was 119.2MB in the beginning and 115.9MB in the end (delta: 3.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * RCFGBuilder took 770.97ms. Allocated memory is still 157.3MB. Free memory was 115.9MB in the beginning and 76.8MB in the end (delta: 39.1MB). Peak memory consumption was 58.7MB. Max. memory is 16.1GB. * TraceAbstraction took 311388.32ms. Allocated memory was 157.3MB in the beginning and 327.2MB in the end (delta: 169.9MB). Free memory was 75.7MB in the beginning and 264.6MB in the end (delta: -188.9MB). Peak memory consumption was 175.0MB. Max. memory is 16.1GB. * Witness Printer took 74.76ms. Allocated memory is still 327.2MB. Free memory was 264.6MB in the beginning and 251.0MB in the end (delta: 13.6MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 2210]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 14 procedures, 107 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 311.3s, OverallIterations: 7, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 29.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 53.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 603 SdHoareTripleChecker+Valid, 13.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 588 mSDsluCounter, 6306 SdHoareTripleChecker+Invalid, 12.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5436 mSDsCounter, 37 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4843 IncrementalHoareTripleChecker+Invalid, 4880 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 37 mSolverCounterUnsat, 870 mSDtfsCounter, 4843 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 533 GetRequests, 432 SyntacticMatches, 1 SemanticMatches, 100 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 935 ImplicationChecksByTransitivity, 180.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=226occurred in iteration=6, InterpolantAutomatonStates: 95, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 7 MinimizatonAttempts, 302 StatesRemovedByMinimization, 4 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 68 LocationsWithAnnotation, 602 PreInvPairs, 708 NumberOfFragments, 17086 HoareAnnotationTreeSize, 602 FomulaSimplifications, 225635 FormulaSimplificationTreeSizeReduction, 14.8s HoareSimplificationTime, 68 FomulaSimplificationsInter, 12216 FormulaSimplificationTreeSizeReductionInter, 38.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 0.8s InterpolantComputationTime, 549 NumberOfCodeBlocks, 549 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 704 ConstructedInterpolants, 0 QuantifiedInterpolants, 868 SizeOfPredicates, 0 NumberOfNonLiveVariables, 2496 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 13 InterpolantComputations, 4 PerfectInterpolantSequences, 113/131 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 59.0s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 14, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 95, DAG_INTERPRETER_EARLY_EXITS: 3, TOOLS_POST_APPLICATIONS: 103, TOOLS_POST_TIME: 16.6s, TOOLS_POST_CALL_APPLICATIONS: 48, TOOLS_POST_CALL_TIME: 26.7s, TOOLS_POST_RETURN_APPLICATIONS: 30, TOOLS_POST_RETURN_TIME: 5.1s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 181, TOOLS_QUANTIFIERELIM_TIME: 48.2s, TOOLS_QUANTIFIERELIM_MAX_TIME: 5.5s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 275, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 48, DOMAIN_JOIN_TIME: 9.6s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 3, DOMAIN_WIDEN_TIME: 0.5s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 6, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 95, DOMAIN_ISBOTTOM_TIME: 0.3s, LOOP_SUMMARIZER_APPLICATIONS: 3, LOOP_SUMMARIZER_CACHE_MISSES: 3, LOOP_SUMMARIZER_OVERALL_TIME: 6.2s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 6.2s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 6, CALL_SUMMARIZER_APPLICATIONS: 30, CALL_SUMMARIZER_CACHE_MISSES: 8, CALL_SUMMARIZER_OVERALL_TIME: 0.0s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.0s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 1359, DAG_COMPRESSION_RETAINED_NODES: 283, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 2083]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1585]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 0 == __ste_email_subject0) && __ste_client_idCounter1 <= 2) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __cil_tmp1 == 6) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && retValue_acc <= 2147483647) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && 1 == retValue_acc) && \old(rjh___0) <= 2) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && __ste_Client_AddressBook1_Alias2 == 0) && 2 <= __ste_client_idCounter1) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && tmp == 1) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && 0 <= 2147483648 + retValue_acc) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 - InvariantResult [Line: 1693]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2138]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1605]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1698]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1595]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __cil_tmp2 == 0) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && \old(chuck___0) <= 3) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_client_idCounter2 <= 3) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __cil_tmp1 == 6) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && retValue_acc <= 2147483647) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && 1 == retValue_acc) && \old(rjh___0) <= 2) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && 3 <= __ste_client_idCounter2) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && 3 == chuck) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 3 <= chuck___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && 3 <= \old(chuck___0)) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && tmp == 1) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && chuck___0 <= 3) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && 7 == __cil_tmp2) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && 0 <= 2147483648 + retValue_acc) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 - InvariantResult [Line: 2152]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1575]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && rjh == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && __ste_client_autoResponse1 == 0) && __ste_Client_AddressBook2_Alias0 == 0) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && retValue_acc <= 2147483647) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && 1 == retValue_acc) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && tmp == 1) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && __ste_client_idCounter0 <= 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && 1 <= __ste_client_idCounter0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && 0 <= 2147483648 + retValue_acc) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 - InvariantResult [Line: 1724]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || (((((((((((((((((((((((((((((((((((handle <= 1 && client <= 1) && 2 <= aux-getEmailTo(msg)-aux) && queued_message <= 0) && 0 <= retValue_acc + 2147483648) && __ste_email_from0 <= 2147483647) && 0 <= __ste_email_from0 + 2147483648) && 1 <= client) && \result <= 2147483647) && queue_empty <= 1) && \old(client) <= 1) && 1 <= msg) && \old(handle) <= 1) && 1 <= \old(handle)) && __ste_client_idCounter0 <= 2147483647) && client <= 1) && tmp <= 2147483647) && 1 <= \old(client)) && 1 <= queue_empty) && 1 <= msg) && 0 <= queued_message) && 0 <= tmp + 2147483648) && 1 <= \old(msg)) && 0 <= \result + 2147483648) && 0 <= queued_client) && msg <= 1) && \old(msg) <= 1) && retValue_acc <= 2147483647) && aux-getEmailTo(msg)-aux <= 2) && msg <= 1) && 1 <= handle) && 0 <= __ste_client_idCounter0 + 2147483648) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2) && 1 <= client) && queued_client <= 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) - InvariantResult [Line: 2094]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1616]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2105]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1756]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_client_privateKey0 <= 0) || !(1 <= \old(client))) || !(0 <= __ste_email_subject0)) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= __ste_Client_AddressBook2_Address1)) || !(0 <= __ste_client_privateKey0)) || !(\old(queued_message) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_email_signKey1 <= 0)) || !(__SELECTED_FEATURE_Verify <= 0)) || !(rjh == \old(__ste_email_to0))) || !(0 <= head)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(0 <= #NULL)) || !(__ste_ClientAddressBook_size1 == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_forwardReceiver1)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 <= __ste_email_id1)) || !(__ste_Client_AddressBook2_Address1 <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(0 <= __ste_email_encryptionKey0)) || !(__ste_email_id0 == 0)) || !(__ste_ClientKeyring_size0 <= 0)) || !(0 <= __SELECTED_FEATURE_AddressBook)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(head <= 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(bob <= 1)) || !(0 <= __ste_ClientKeyring_size1)) || !(__ste_client_name0 == 0)) || !(\old(client) <= 1)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(0 <= __ste_Client_AddressBook0_Alias2)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_Client_AddressBook1_Alias0 <= 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_client_outbuffer0 == 0)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(0 <= __ste_Client_Keyring1_PublicKey2)) || !(__ste_email_isEncrypted1 == 0)) || !(1 <= bob)) || !(head == 0)) || !(0 <= __ste_Client_Keyring2_User1)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_client_forwardReceiver3 <= 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || ((((((((((((((queued_message <= 0 && __ste_email_to1 == \old(__ste_email_to1)) && \old(__ste_email_from0) == __ste_email_from0) && 0 <= queued_message) && \old(__ste_email_from1) == __ste_email_from1) && 1 <= msg) && \old(queue_empty) == queue_empty) && queued_client == \old(queued_client)) && size == tmp) && client == \old(client)) && msg <= 1) && 0 <= tmp) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2) && tmp <= 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(0 <= __ste_Client_AddressBook1_Alias0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_client_name0 <= 0)) || !(__ste_email_id1 <= 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(__ste_client_privateKey2 <= 0)) || !(0 <= __ste_email_isSigned0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_Client_Keyring1_PublicKey2 <= 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_AddressBook0_Alias2 <= 0)) || !(0 <= __ste_client_privateKey2)) || !(__ste_ClientKeyring_size1 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_Client_AddressBook1_Alias2 <= 0)) || !(__ste_email_encryptionKey1 == 0)) || !(#NULL <= 0)) || !(__ste_Client_AddressBook0_Address1 <= 0)) || !(0 <= __ste_client_forwardReceiver2)) || !(__ste_email_subject0 <= 0)) || !(__ste_Client_Keyring1_User0 <= 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(0 <= __ste_ClientKeyring_size0)) || !(__ste_Client_AddressBook0_Address2 <= 0)) || !(0 <= __SELECTED_FEATURE_Verify)) || !(__ste_Client_Keyring2_User1 <= 0)) || !(0 <= __ste_client_forwardReceiver3)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__SELECTED_FEATURE_AddressBook <= 0)) || !(__ste_email_subject1 == 0)) || !(0 <= __ste_Client_AddressBook1_Alias2)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_client_forwardReceiver2 <= 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(0 <= __ste_Client_Keyring0_PublicKey0)) || !(0 <= __ste_client_name1)) || !(__ste_Client_AddressBook0_Address0 <= 0)) || !(3 == chuck)) || !(0 <= __ste_Client_AddressBook0_Address0)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_forwardReceiver1 <= 0)) || !(__ste_email_isEncrypted0 <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(0 <= __ste_Client_Keyring1_User0)) || !(0 <= __ste_client_name0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_email_encryptionKey0 <= 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(0 <= __ste_Client_AddressBook0_Address1)) || !(__ste_client_name1 <= 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(0 <= __ste_Client_AddressBook0_Address2)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_Client_Keyring0_PublicKey0 <= 0)) || !(__ste_email_isSigned0 <= 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(0 <= __ste_email_isEncrypted0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0) - InvariantResult [Line: 1672]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2127]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2163]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2069]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2049]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1799]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(tmp == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) - InvariantResult [Line: 2174]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2210]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2073]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1730]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_client_privateKey2 == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_privateKey1 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(__ste_email_signKey0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_client_privateKey0 == 0)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || ((((((queued_message == \old(queued_message) && __ste_email_to0 == \old(__ste_email_to0)) && __ste_email_to1 == \old(__ste_email_to1)) && \old(__ste_email_from0) == __ste_email_from0) && \old(__ste_email_from1) == __ste_email_from1) && \old(queue_empty) == queue_empty) && queued_client == \old(queued_client))) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2581]: Loop Invariant Derived loop invariant: !(tmp == 0) - InvariantResult [Line: 1968]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_client_privateKey0 <= 0) || !(0 <= __ste_email_subject0)) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= __ste_Client_AddressBook2_Address1)) || !(0 <= __ste_client_privateKey0)) || !(\old(queued_message) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_email_signKey1 <= 0)) || !(__SELECTED_FEATURE_Verify <= 0)) || !(0 <= head)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_forwardReceiver1)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(__ste_Client_AddressBook2_Address1 <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(0 <= __ste_email_encryptionKey0)) || !(__ste_email_id0 == 0)) || !(__ste_ClientKeyring_size0 <= 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(head <= 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(bob <= 1)) || !(0 <= __ste_ClientKeyring_size1)) || !(__ste_client_name0 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(0 <= __ste_Client_AddressBook0_Alias2)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_Client_AddressBook1_Alias0 <= 0)) || !(\old(__ste_email_to0) == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_client_outbuffer0 == 0)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(0 <= __ste_Client_Keyring1_PublicKey2)) || !(__ste_email_isEncrypted1 == 0)) || !(1 <= bob)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(0 <= __ste_Client_Keyring2_User1)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_client_forwardReceiver3 <= 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || !(bob == \old(sender))) || !(\old(__ste_email_to1) == 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(0 <= __ste_Client_AddressBook1_Alias0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_client_name0 <= 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(__ste_client_privateKey2 <= 0)) || !(0 <= __ste_email_isSigned0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_Client_Keyring1_PublicKey2 <= 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_AddressBook0_Alias2 <= 0)) || !(0 <= __ste_client_privateKey2)) || !(\old(receiver) == rjh)) || !(__ste_ClientKeyring_size1 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_Client_AddressBook1_Alias2 <= 0)) || !(__ste_email_encryptionKey1 == 0)) || ((((((((((((((((((((queued_message <= 0 && \old(from) <= 0) && 1 <= msg) && queue_empty <= 1) && 0 <= __ste_email_from0) && \old(receiver) == receiver) && msg <= 1) && 1 <= queue_empty) && to <= 2) && 0 <= queued_message) && from == \old(from)) && 1 <= sender) && sender <= 1) && __ste_email_from0 <= 0) && queued_client == \old(queued_client)) && \old(to) <= 2) && 2 <= \old(to)) && 2 <= __ste_email_to0) && 2 <= to) && __ste_email_to0 <= 2) && 0 <= \old(from))) || !(0 <= __ste_client_forwardReceiver2)) || !(__ste_email_subject0 <= 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(0 <= __ste_ClientKeyring_size0)) || !(__ste_Client_AddressBook0_Address2 <= 0)) || !(0 <= __SELECTED_FEATURE_Verify)) || !(__ste_Client_Keyring2_User1 <= 0)) || !(0 <= __ste_client_forwardReceiver3)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(0 <= __ste_Client_AddressBook1_Alias2)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_client_forwardReceiver2 <= 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(\old(__ste_email_from1) == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(0 <= __ste_Client_Keyring0_PublicKey0)) || !(0 <= __ste_client_name1)) || !(__ste_Client_AddressBook0_Address0 <= 0)) || !(3 == chuck)) || !(0 <= __ste_Client_AddressBook0_Address0)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_forwardReceiver1 <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(0 <= __ste_client_name0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_email_encryptionKey0 <= 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_client_name1 <= 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(0 <= __ste_Client_AddressBook0_Address2)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_Client_Keyring0_PublicKey0 <= 0)) || !(__ste_email_isSigned0 <= 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(1 <= __ste_client_autoResponse1)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0) - InvariantResult [Line: 1897]: Loop Invariant Derived loop invariant: !(tmp == 0) - InvariantResult [Line: 2050]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1613]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2116]: Loop Invariant Derived loop invariant: tmp == 1 RESULT: Ultimate proved your program to be correct! [2022-12-14 06:02:24,556 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_81afadb2-d980-48b9-abfa-214d53be47da/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE