./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/email_spec7_product13.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/email_spec7_product13.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2fde44ff6f2aac911c03318478d3361889c0f9ce519411733d9129672caa5fa0 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 05:55:27,356 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 05:55:27,357 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 05:55:27,371 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 05:55:27,371 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 05:55:27,372 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 05:55:27,373 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 05:55:27,374 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 05:55:27,375 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 05:55:27,376 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 05:55:27,377 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 05:55:27,377 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 05:55:27,378 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 05:55:27,378 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 05:55:27,379 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 05:55:27,380 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 05:55:27,381 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 05:55:27,381 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 05:55:27,383 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 05:55:27,384 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 05:55:27,385 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 05:55:27,386 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 05:55:27,387 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 05:55:27,387 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 05:55:27,390 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 05:55:27,390 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 05:55:27,390 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 05:55:27,391 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 05:55:27,391 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 05:55:27,392 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 05:55:27,392 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 05:55:27,393 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 05:55:27,393 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 05:55:27,394 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 05:55:27,394 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 05:55:27,395 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 05:55:27,395 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 05:55:27,395 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 05:55:27,396 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 05:55:27,396 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 05:55:27,397 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 05:55:27,397 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-12-14 05:55:27,412 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 05:55:27,413 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 05:55:27,413 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 05:55:27,413 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 05:55:27,414 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 05:55:27,414 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 05:55:27,414 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 05:55:27,414 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 05:55:27,414 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 05:55:27,414 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 05:55:27,415 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 05:55:27,415 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 05:55:27,415 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 05:55:27,415 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 05:55:27,415 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 05:55:27,415 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 05:55:27,415 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 05:55:27,416 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 05:55:27,416 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 05:55:27,416 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 05:55:27,416 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 05:55:27,417 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 05:55:27,417 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 05:55:27,417 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-14 05:55:27,417 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 05:55:27,417 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-14 05:55:27,417 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 05:55:27,417 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-14 05:55:27,417 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 05:55:27,418 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-14 05:55:27,418 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 05:55:27,418 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 05:55:27,418 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 05:55:27,418 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 05:55:27,418 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 05:55:27,418 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 05:55:27,418 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-14 05:55:27,419 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 05:55:27,419 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 05:55:27,419 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-14 05:55:27,419 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 05:55:27,419 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2fde44ff6f2aac911c03318478d3361889c0f9ce519411733d9129672caa5fa0 [2022-12-14 05:55:27,593 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 05:55:27,613 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 05:55:27,615 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 05:55:27,616 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 05:55:27,617 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 05:55:27,618 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/product-lines/email_spec7_product13.cil.c [2022-12-14 05:55:30,185 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 05:55:30,427 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 05:55:30,427 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/sv-benchmarks/c/product-lines/email_spec7_product13.cil.c [2022-12-14 05:55:30,442 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/data/a9f9352dd/6d38e7064ee143ed82775d130e33c490/FLAGe68105c33 [2022-12-14 05:55:30,454 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/data/a9f9352dd/6d38e7064ee143ed82775d130e33c490 [2022-12-14 05:55:30,456 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 05:55:30,458 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 05:55:30,459 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 05:55:30,459 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 05:55:30,462 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 05:55:30,462 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 05:55:30" (1/1) ... [2022-12-14 05:55:30,463 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@781179c1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:55:30, skipping insertion in model container [2022-12-14 05:55:30,463 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 05:55:30" (1/1) ... [2022-12-14 05:55:30,469 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 05:55:30,515 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 05:55:30,708 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:55:30,711 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:55:30,717 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:55:30,781 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/sv-benchmarks/c/product-lines/email_spec7_product13.cil.c[16810,16823] [2022-12-14 05:55:30,863 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:55:30,866 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:55:30,941 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 05:55:30,954 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 05:55:30,967 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:55:30,968 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:55:30,971 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:55:30,992 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/sv-benchmarks/c/product-lines/email_spec7_product13.cil.c[16810,16823] [2022-12-14 05:55:31,008 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:55:31,009 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 05:55:31,038 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 05:55:31,059 INFO L208 MainTranslator]: Completed translation [2022-12-14 05:55:31,060 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:55:31 WrapperNode [2022-12-14 05:55:31,060 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 05:55:31,061 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 05:55:31,061 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 05:55:31,061 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 05:55:31,067 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:55:31" (1/1) ... [2022-12-14 05:55:31,086 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:55:31" (1/1) ... [2022-12-14 05:55:31,127 INFO L138 Inliner]: procedures = 124, calls = 186, calls flagged for inlining = 54, calls inlined = 45, statements flattened = 843 [2022-12-14 05:55:31,128 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 05:55:31,128 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 05:55:31,128 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 05:55:31,128 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 05:55:31,136 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:55:31" (1/1) ... [2022-12-14 05:55:31,136 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:55:31" (1/1) ... [2022-12-14 05:55:31,139 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:55:31" (1/1) ... [2022-12-14 05:55:31,139 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:55:31" (1/1) ... [2022-12-14 05:55:31,153 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:55:31" (1/1) ... [2022-12-14 05:55:31,158 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:55:31" (1/1) ... [2022-12-14 05:55:31,161 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:55:31" (1/1) ... [2022-12-14 05:55:31,163 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:55:31" (1/1) ... [2022-12-14 05:55:31,167 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 05:55:31,168 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 05:55:31,168 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 05:55:31,168 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 05:55:31,169 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:55:31" (1/1) ... [2022-12-14 05:55:31,173 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 05:55:31,182 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 05:55:31,193 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 05:55:31,195 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 05:55:31,233 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailTo [2022-12-14 05:55:31,234 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailTo [2022-12-14 05:55:31,234 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailFrom [2022-12-14 05:55:31,234 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailFrom [2022-12-14 05:55:31,234 INFO L130 BoogieDeclarations]: Found specification of procedure isReadable [2022-12-14 05:55:31,234 INFO L138 BoogieDeclarations]: Found implementation of procedure isReadable [2022-12-14 05:55:31,234 INFO L130 BoogieDeclarations]: Found specification of procedure createClientKeyringEntry [2022-12-14 05:55:31,235 INFO L138 BoogieDeclarations]: Found implementation of procedure createClientKeyringEntry [2022-12-14 05:55:31,235 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailSignKey [2022-12-14 05:55:31,235 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailSignKey [2022-12-14 05:55:31,235 INFO L130 BoogieDeclarations]: Found specification of procedure chuckKeyAdd [2022-12-14 05:55:31,235 INFO L138 BoogieDeclarations]: Found implementation of procedure chuckKeyAdd [2022-12-14 05:55:31,235 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2022-12-14 05:55:31,235 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailFrom [2022-12-14 05:55:31,236 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailFrom [2022-12-14 05:55:31,236 INFO L130 BoogieDeclarations]: Found specification of procedure setClientId [2022-12-14 05:55:31,236 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientId [2022-12-14 05:55:31,236 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-14 05:55:31,236 INFO L130 BoogieDeclarations]: Found specification of procedure isSigned [2022-12-14 05:55:31,236 INFO L138 BoogieDeclarations]: Found implementation of procedure isSigned [2022-12-14 05:55:31,236 INFO L130 BoogieDeclarations]: Found specification of procedure setClientKeyringUser [2022-12-14 05:55:31,237 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientKeyringUser [2022-12-14 05:55:31,237 INFO L130 BoogieDeclarations]: Found specification of procedure setClientKeyringPublicKey [2022-12-14 05:55:31,237 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientKeyringPublicKey [2022-12-14 05:55:31,237 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing [2022-12-14 05:55:31,237 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing [2022-12-14 05:55:31,237 INFO L130 BoogieDeclarations]: Found specification of procedure sendEmail [2022-12-14 05:55:31,237 INFO L138 BoogieDeclarations]: Found implementation of procedure sendEmail [2022-12-14 05:55:31,238 INFO L130 BoogieDeclarations]: Found specification of procedure setClientPrivateKey [2022-12-14 05:55:31,238 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientPrivateKey [2022-12-14 05:55:31,238 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-14 05:55:31,238 INFO L130 BoogieDeclarations]: Found specification of procedure generateKeyPair [2022-12-14 05:55:31,238 INFO L138 BoogieDeclarations]: Found implementation of procedure generateKeyPair [2022-12-14 05:55:31,238 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 05:55:31,239 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 05:55:31,385 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 05:55:31,387 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 05:55:31,857 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 05:55:32,137 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 05:55:32,137 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-12-14 05:55:32,139 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:55:32 BoogieIcfgContainer [2022-12-14 05:55:32,139 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 05:55:32,141 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 05:55:32,141 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 05:55:32,143 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 05:55:32,144 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 05:55:30" (1/3) ... [2022-12-14 05:55:32,144 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7262ade9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 05:55:32, skipping insertion in model container [2022-12-14 05:55:32,144 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 05:55:31" (2/3) ... [2022-12-14 05:55:32,145 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7262ade9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 05:55:32, skipping insertion in model container [2022-12-14 05:55:32,145 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:55:32" (3/3) ... [2022-12-14 05:55:32,146 INFO L112 eAbstractionObserver]: Analyzing ICFG email_spec7_product13.cil.c [2022-12-14 05:55:32,162 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 05:55:32,163 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-14 05:55:32,203 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 05:55:32,208 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@493fa361, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 05:55:32,208 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-14 05:55:32,212 INFO L276 IsEmpty]: Start isEmpty. Operand has 133 states, 81 states have (on average 1.382716049382716) internal successors, (112), 83 states have internal predecessors, (112), 35 states have call successors, (35), 15 states have call predecessors, (35), 15 states have return successors, (35), 35 states have call predecessors, (35), 35 states have call successors, (35) [2022-12-14 05:55:32,221 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-12-14 05:55:32,221 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:55:32,221 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:55:32,222 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:55:32,226 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:55:32,227 INFO L85 PathProgramCache]: Analyzing trace with hash 307475697, now seen corresponding path program 1 times [2022-12-14 05:55:32,234 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:55:32,234 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1304086604] [2022-12-14 05:55:32,235 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:55:32,235 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:55:32,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:55:32,486 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 05:55:32,486 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:55:32,486 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1304086604] [2022-12-14 05:55:32,487 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1304086604] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 05:55:32,487 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 05:55:32,487 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 05:55:32,488 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1105531166] [2022-12-14 05:55:32,488 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 05:55:32,491 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-14 05:55:32,491 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:55:32,511 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-14 05:55:32,511 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 05:55:32,513 INFO L87 Difference]: Start difference. First operand has 133 states, 81 states have (on average 1.382716049382716) internal successors, (112), 83 states have internal predecessors, (112), 35 states have call successors, (35), 15 states have call predecessors, (35), 15 states have return successors, (35), 35 states have call predecessors, (35), 35 states have call successors, (35) Second operand has 2 states, 2 states have (on average 11.5) internal successors, (23), 2 states have internal predecessors, (23), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-12-14 05:55:32,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:55:32,594 INFO L93 Difference]: Finished difference Result 183 states and 242 transitions. [2022-12-14 05:55:32,595 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-14 05:55:32,596 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 11.5) internal successors, (23), 2 states have internal predecessors, (23), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 50 [2022-12-14 05:55:32,596 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:55:32,602 INFO L225 Difference]: With dead ends: 183 [2022-12-14 05:55:32,602 INFO L226 Difference]: Without dead ends: 130 [2022-12-14 05:55:32,605 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 05:55:32,607 INFO L413 NwaCegarLoop]: 156 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 156 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 05:55:32,608 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 156 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 05:55:32,620 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130 states. [2022-12-14 05:55:32,638 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130 to 130. [2022-12-14 05:55:32,639 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 130 states, 79 states have (on average 1.3417721518987342) internal successors, (106), 80 states have internal predecessors, (106), 35 states have call successors, (35), 15 states have call predecessors, (35), 15 states have return successors, (34), 34 states have call predecessors, (34), 34 states have call successors, (34) [2022-12-14 05:55:32,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 130 states to 130 states and 175 transitions. [2022-12-14 05:55:32,642 INFO L78 Accepts]: Start accepts. Automaton has 130 states and 175 transitions. Word has length 50 [2022-12-14 05:55:32,643 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:55:32,643 INFO L495 AbstractCegarLoop]: Abstraction has 130 states and 175 transitions. [2022-12-14 05:55:32,643 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 11.5) internal successors, (23), 2 states have internal predecessors, (23), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-12-14 05:55:32,643 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 175 transitions. [2022-12-14 05:55:32,645 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-12-14 05:55:32,645 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:55:32,645 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:55:32,645 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 05:55:32,646 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:55:32,646 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:55:32,646 INFO L85 PathProgramCache]: Analyzing trace with hash 1250499650, now seen corresponding path program 1 times [2022-12-14 05:55:32,646 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:55:32,647 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1631352245] [2022-12-14 05:55:32,647 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:55:32,647 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:55:32,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:55:32,847 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 05:55:32,848 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:55:32,848 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1631352245] [2022-12-14 05:55:32,848 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1631352245] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 05:55:32,848 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 05:55:32,848 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 05:55:32,849 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1842578438] [2022-12-14 05:55:32,849 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 05:55:32,850 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 05:55:32,850 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:55:32,851 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 05:55:32,851 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 05:55:32,851 INFO L87 Difference]: Start difference. First operand 130 states and 175 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-12-14 05:55:32,927 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:55:32,927 INFO L93 Difference]: Finished difference Result 179 states and 230 transitions. [2022-12-14 05:55:32,927 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 05:55:32,928 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 51 [2022-12-14 05:55:32,928 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:55:32,929 INFO L225 Difference]: With dead ends: 179 [2022-12-14 05:55:32,930 INFO L226 Difference]: Without dead ends: 132 [2022-12-14 05:55:32,930 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 05:55:32,932 INFO L413 NwaCegarLoop]: 153 mSDtfsCounter, 0 mSDsluCounter, 152 mSDsCounter, 0 mSdLazyCounter, 44 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 305 SdHoareTripleChecker+Invalid, 44 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 44 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 05:55:32,932 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 305 Invalid, 44 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 44 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 05:55:32,933 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 132 states. [2022-12-14 05:55:32,946 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 132 to 132. [2022-12-14 05:55:32,946 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 132 states, 81 states have (on average 1.3333333333333333) internal successors, (108), 82 states have internal predecessors, (108), 35 states have call successors, (35), 15 states have call predecessors, (35), 15 states have return successors, (34), 34 states have call predecessors, (34), 34 states have call successors, (34) [2022-12-14 05:55:32,949 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 132 states to 132 states and 177 transitions. [2022-12-14 05:55:32,949 INFO L78 Accepts]: Start accepts. Automaton has 132 states and 177 transitions. Word has length 51 [2022-12-14 05:55:32,949 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:55:32,949 INFO L495 AbstractCegarLoop]: Abstraction has 132 states and 177 transitions. [2022-12-14 05:55:32,950 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 3 states have internal predecessors, (24), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-12-14 05:55:32,950 INFO L276 IsEmpty]: Start isEmpty. Operand 132 states and 177 transitions. [2022-12-14 05:55:32,952 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-12-14 05:55:32,952 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:55:32,952 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:55:32,952 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-14 05:55:32,952 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:55:32,953 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:55:32,953 INFO L85 PathProgramCache]: Analyzing trace with hash 670623592, now seen corresponding path program 1 times [2022-12-14 05:55:32,953 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:55:32,953 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2095901629] [2022-12-14 05:55:32,953 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:55:32,954 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:55:32,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:55:33,046 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 05:55:33,047 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:55:33,047 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2095901629] [2022-12-14 05:55:33,047 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2095901629] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 05:55:33,047 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 05:55:33,047 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 05:55:33,047 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1182132147] [2022-12-14 05:55:33,047 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 05:55:33,048 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 05:55:33,048 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:55:33,048 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 05:55:33,049 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 05:55:33,049 INFO L87 Difference]: Start difference. First operand 132 states and 177 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-12-14 05:55:33,130 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:55:33,130 INFO L93 Difference]: Finished difference Result 294 states and 413 transitions. [2022-12-14 05:55:33,131 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 05:55:33,131 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 56 [2022-12-14 05:55:33,131 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:55:33,133 INFO L225 Difference]: With dead ends: 294 [2022-12-14 05:55:33,133 INFO L226 Difference]: Without dead ends: 180 [2022-12-14 05:55:33,134 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 05:55:33,134 INFO L413 NwaCegarLoop]: 169 mSDtfsCounter, 57 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 316 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 05:55:33,135 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 316 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 05:55:33,135 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2022-12-14 05:55:33,147 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 175. [2022-12-14 05:55:33,148 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 175 states, 113 states have (on average 1.424778761061947) internal successors, (161), 114 states have internal predecessors, (161), 46 states have call successors, (46), 15 states have call predecessors, (46), 15 states have return successors, (45), 45 states have call predecessors, (45), 45 states have call successors, (45) [2022-12-14 05:55:33,149 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 175 states to 175 states and 252 transitions. [2022-12-14 05:55:33,149 INFO L78 Accepts]: Start accepts. Automaton has 175 states and 252 transitions. Word has length 56 [2022-12-14 05:55:33,150 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:55:33,150 INFO L495 AbstractCegarLoop]: Abstraction has 175 states and 252 transitions. [2022-12-14 05:55:33,150 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (12), 2 states have call predecessors, (12), 1 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-12-14 05:55:33,150 INFO L276 IsEmpty]: Start isEmpty. Operand 175 states and 252 transitions. [2022-12-14 05:55:33,151 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-12-14 05:55:33,152 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:55:33,152 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:55:33,152 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-14 05:55:33,152 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:55:33,152 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:55:33,153 INFO L85 PathProgramCache]: Analyzing trace with hash -419603929, now seen corresponding path program 1 times [2022-12-14 05:55:33,153 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:55:33,153 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1846351100] [2022-12-14 05:55:33,153 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:55:33,153 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:55:33,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:55:33,264 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 05:55:33,265 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:55:33,265 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1846351100] [2022-12-14 05:55:33,265 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1846351100] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 05:55:33,265 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1473024879] [2022-12-14 05:55:33,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:55:33,265 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 05:55:33,265 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 05:55:33,267 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 05:55:33,268 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 05:55:33,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:55:33,480 INFO L263 TraceCheckSpWp]: Trace formula consists of 884 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 05:55:33,487 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 05:55:33,537 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 05:55:33,538 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 05:55:33,585 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 05:55:33,585 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1473024879] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 05:55:33,585 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1888667403] [2022-12-14 05:55:33,600 INFO L159 IcfgInterpreter]: Started Sifa with 46 locations of interest [2022-12-14 05:55:33,600 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 05:55:33,603 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 05:55:33,607 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 05:55:33,607 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 05:55:56,224 INFO L197 IcfgInterpreter]: Interpreting procedure setClientId with input of size 439 for LOIs [2022-12-14 05:55:56,523 INFO L197 IcfgInterpreter]: Interpreting procedure setClientPrivateKey with input of size 441 for LOIs [2022-12-14 05:55:56,818 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 05:56:37,410 WARN L233 SmtUtils]: Spent 11.60s on a formula simplification. DAG size of input: 582 DAG size of output: 453 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 05:56:43,748 WARN L233 SmtUtils]: Spent 6.11s on a formula simplification. DAG size of input: 570 DAG size of output: 434 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 05:56:49,690 WARN L233 SmtUtils]: Spent 5.70s on a formula simplification. DAG size of input: 570 DAG size of output: 396 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 05:56:55,457 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1888667403] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 05:56:55,457 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 05:56:55,457 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [20] imperfect sequences [4, 4, 4] total 26 [2022-12-14 05:56:55,458 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [854887705] [2022-12-14 05:56:55,458 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 05:56:55,458 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2022-12-14 05:56:55,458 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:56:55,459 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2022-12-14 05:56:55,459 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=83, Invalid=567, Unknown=0, NotChecked=0, Total=650 [2022-12-14 05:56:55,459 INFO L87 Difference]: Start difference. First operand 175 states and 252 transitions. Second operand has 21 states, 16 states have (on average 1.8125) internal successors, (29), 15 states have internal predecessors, (29), 7 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (10), 7 states have call predecessors, (10), 7 states have call successors, (10) [2022-12-14 05:57:01,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:57:01,119 INFO L93 Difference]: Finished difference Result 429 states and 665 transitions. [2022-12-14 05:57:01,119 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-12-14 05:57:01,120 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 16 states have (on average 1.8125) internal successors, (29), 15 states have internal predecessors, (29), 7 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (10), 7 states have call predecessors, (10), 7 states have call successors, (10) Word has length 57 [2022-12-14 05:57:01,120 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:57:01,122 INFO L225 Difference]: With dead ends: 429 [2022-12-14 05:57:01,122 INFO L226 Difference]: Without dead ends: 272 [2022-12-14 05:57:01,123 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 149 SyntacticMatches, 0 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 145 ImplicationChecksByTransitivity, 58.6s TimeCoverageRelationStatistics Valid=83, Invalid=567, Unknown=0, NotChecked=0, Total=650 [2022-12-14 05:57:01,124 INFO L413 NwaCegarLoop]: 197 mSDtfsCounter, 131 mSDsluCounter, 2208 mSDsCounter, 0 mSdLazyCounter, 1837 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 131 SdHoareTripleChecker+Valid, 2405 SdHoareTripleChecker+Invalid, 1846 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 1837 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.5s IncrementalHoareTripleChecker+Time [2022-12-14 05:57:01,124 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [131 Valid, 2405 Invalid, 1846 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [9 Valid, 1837 Invalid, 0 Unknown, 0 Unchecked, 5.5s Time] [2022-12-14 05:57:01,124 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2022-12-14 05:57:01,270 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 198. [2022-12-14 05:57:01,270 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 198 states, 135 states have (on average 1.4370370370370371) internal successors, (194), 136 states have internal predecessors, (194), 46 states have call successors, (46), 16 states have call predecessors, (46), 16 states have return successors, (45), 45 states have call predecessors, (45), 45 states have call successors, (45) [2022-12-14 05:57:01,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 285 transitions. [2022-12-14 05:57:01,273 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 285 transitions. Word has length 57 [2022-12-14 05:57:01,273 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:57:01,273 INFO L495 AbstractCegarLoop]: Abstraction has 198 states and 285 transitions. [2022-12-14 05:57:01,273 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 16 states have (on average 1.8125) internal successors, (29), 15 states have internal predecessors, (29), 7 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (10), 7 states have call predecessors, (10), 7 states have call successors, (10) [2022-12-14 05:57:01,273 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 285 transitions. [2022-12-14 05:57:01,278 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-12-14 05:57:01,278 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:57:01,278 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:57:01,285 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 05:57:01,478 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 05:57:01,480 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:57:01,481 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:57:01,481 INFO L85 PathProgramCache]: Analyzing trace with hash -1191173164, now seen corresponding path program 1 times [2022-12-14 05:57:01,482 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:57:01,482 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [782877417] [2022-12-14 05:57:01,482 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:57:01,483 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:57:01,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:57:01,549 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-12-14 05:57:01,549 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:57:01,549 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [782877417] [2022-12-14 05:57:01,549 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [782877417] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 05:57:01,549 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 05:57:01,549 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 05:57:01,549 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [906313619] [2022-12-14 05:57:01,550 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 05:57:01,550 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 05:57:01,550 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:57:01,551 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 05:57:01,551 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 05:57:01,551 INFO L87 Difference]: Start difference. First operand 198 states and 285 transitions. Second operand has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (13), 2 states have call predecessors, (13), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-12-14 05:57:01,768 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:57:01,768 INFO L93 Difference]: Finished difference Result 489 states and 734 transitions. [2022-12-14 05:57:01,769 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 05:57:01,769 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (13), 2 states have call predecessors, (13), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 62 [2022-12-14 05:57:01,769 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:57:01,770 INFO L225 Difference]: With dead ends: 489 [2022-12-14 05:57:01,771 INFO L226 Difference]: Without dead ends: 315 [2022-12-14 05:57:01,771 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 05:57:01,772 INFO L413 NwaCegarLoop]: 172 mSDtfsCounter, 55 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 46 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 322 SdHoareTripleChecker+Invalid, 47 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 46 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 05:57:01,772 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 322 Invalid, 47 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 46 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 05:57:01,773 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 315 states. [2022-12-14 05:57:01,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 315 to 310. [2022-12-14 05:57:01,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 310 states, 222 states have (on average 1.4864864864864864) internal successors, (330), 223 states have internal predecessors, (330), 71 states have call successors, (71), 16 states have call predecessors, (71), 16 states have return successors, (70), 70 states have call predecessors, (70), 70 states have call successors, (70) [2022-12-14 05:57:01,913 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 310 states to 310 states and 471 transitions. [2022-12-14 05:57:01,913 INFO L78 Accepts]: Start accepts. Automaton has 310 states and 471 transitions. Word has length 62 [2022-12-14 05:57:01,913 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:57:01,913 INFO L495 AbstractCegarLoop]: Abstraction has 310 states and 471 transitions. [2022-12-14 05:57:01,913 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (13), 2 states have call predecessors, (13), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-12-14 05:57:01,913 INFO L276 IsEmpty]: Start isEmpty. Operand 310 states and 471 transitions. [2022-12-14 05:57:01,915 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-12-14 05:57:01,915 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:57:01,915 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:57:01,915 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-14 05:57:01,915 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:57:01,915 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:57:01,915 INFO L85 PathProgramCache]: Analyzing trace with hash 34156784, now seen corresponding path program 1 times [2022-12-14 05:57:01,915 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:57:01,915 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [95719554] [2022-12-14 05:57:01,916 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:57:01,916 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:57:01,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:57:02,008 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-12-14 05:57:02,008 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:57:02,008 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [95719554] [2022-12-14 05:57:02,008 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [95719554] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 05:57:02,009 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [574027741] [2022-12-14 05:57:02,009 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:57:02,009 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 05:57:02,009 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 05:57:02,010 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 05:57:02,011 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 05:57:02,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:57:02,187 INFO L263 TraceCheckSpWp]: Trace formula consists of 914 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 05:57:02,189 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 05:57:02,209 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-12-14 05:57:02,209 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 05:57:02,253 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-12-14 05:57:02,253 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [574027741] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 05:57:02,253 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1568079888] [2022-12-14 05:57:02,257 INFO L159 IcfgInterpreter]: Started Sifa with 50 locations of interest [2022-12-14 05:57:02,257 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 05:57:02,257 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 05:57:02,257 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 05:57:02,258 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 05:57:32,883 INFO L197 IcfgInterpreter]: Interpreting procedure setClientId with input of size 444 for LOIs [2022-12-14 05:57:33,193 INFO L197 IcfgInterpreter]: Interpreting procedure setClientPrivateKey with input of size 442 for LOIs [2022-12-14 05:57:33,489 INFO L197 IcfgInterpreter]: Interpreting procedure sendEmail with input of size 249 for LOIs [2022-12-14 05:57:34,098 INFO L197 IcfgInterpreter]: Interpreting procedure outgoing with input of size 244 for LOIs [2022-12-14 05:57:43,993 INFO L197 IcfgInterpreter]: Interpreting procedure isReadable with input of size 246 for LOIs [2022-12-14 05:57:44,027 INFO L197 IcfgInterpreter]: Interpreting procedure getEmailTo with input of size 246 for LOIs [2022-12-14 05:57:44,066 INFO L197 IcfgInterpreter]: Interpreting procedure setEmailFrom with input of size 451 for LOIs [2022-12-14 05:57:44,728 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 05:58:30,711 WARN L233 SmtUtils]: Spent 12.29s on a formula simplification. DAG size of input: 587 DAG size of output: 458 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 05:59:05,421 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1568079888] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 05:59:05,421 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 05:59:05,421 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [43] imperfect sequences [4, 4, 4] total 49 [2022-12-14 05:59:05,421 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [462965141] [2022-12-14 05:59:05,421 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 05:59:05,422 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2022-12-14 05:59:05,422 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 05:59:05,423 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2022-12-14 05:59:05,424 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=157, Invalid=2195, Unknown=0, NotChecked=0, Total=2352 [2022-12-14 05:59:05,424 INFO L87 Difference]: Start difference. First operand 310 states and 471 transitions. Second operand has 44 states, 30 states have (on average 1.0666666666666667) internal successors, (32), 28 states have internal predecessors, (32), 13 states have call successors, (13), 7 states have call predecessors, (13), 5 states have return successors, (11), 11 states have call predecessors, (11), 11 states have call successors, (11) [2022-12-14 05:59:17,485 WARN L233 SmtUtils]: Spent 10.06s on a formula simplification. DAG size of input: 550 DAG size of output: 436 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 05:59:39,343 WARN L233 SmtUtils]: Spent 5.96s on a formula simplification. DAG size of input: 584 DAG size of output: 420 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 05:59:48,711 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 05:59:48,711 INFO L93 Difference]: Finished difference Result 750 states and 1189 transitions. [2022-12-14 05:59:48,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2022-12-14 05:59:48,712 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 30 states have (on average 1.0666666666666667) internal successors, (32), 28 states have internal predecessors, (32), 13 states have call successors, (13), 7 states have call predecessors, (13), 5 states have return successors, (11), 11 states have call predecessors, (11), 11 states have call successors, (11) Word has length 63 [2022-12-14 05:59:48,712 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 05:59:48,714 INFO L225 Difference]: With dead ends: 750 [2022-12-14 05:59:48,714 INFO L226 Difference]: Without dead ends: 503 [2022-12-14 05:59:48,715 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 200 GetRequests, 144 SyntacticMatches, 0 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 690 ImplicationChecksByTransitivity, 111.0s TimeCoverageRelationStatistics Valid=240, Invalid=3066, Unknown=0, NotChecked=0, Total=3306 [2022-12-14 05:59:48,715 INFO L413 NwaCegarLoop]: 174 mSDtfsCounter, 222 mSDsluCounter, 3052 mSDsCounter, 0 mSdLazyCounter, 4231 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 230 SdHoareTripleChecker+Valid, 3226 SdHoareTripleChecker+Invalid, 4257 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 4231 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.3s IncrementalHoareTripleChecker+Time [2022-12-14 05:59:48,715 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [230 Valid, 3226 Invalid, 4257 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [26 Valid, 4231 Invalid, 0 Unknown, 0 Unchecked, 12.3s Time] [2022-12-14 05:59:48,716 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 503 states. [2022-12-14 05:59:48,951 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 503 to 404. [2022-12-14 05:59:48,951 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 404 states, 299 states have (on average 1.5117056856187292) internal successors, (452), 303 states have internal predecessors, (452), 83 states have call successors, (83), 22 states have call predecessors, (83), 21 states have return successors, (83), 78 states have call predecessors, (83), 82 states have call successors, (83) [2022-12-14 05:59:48,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 404 states to 404 states and 618 transitions. [2022-12-14 05:59:48,953 INFO L78 Accepts]: Start accepts. Automaton has 404 states and 618 transitions. Word has length 63 [2022-12-14 05:59:48,953 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 05:59:48,953 INFO L495 AbstractCegarLoop]: Abstraction has 404 states and 618 transitions. [2022-12-14 05:59:48,953 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 30 states have (on average 1.0666666666666667) internal successors, (32), 28 states have internal predecessors, (32), 13 states have call successors, (13), 7 states have call predecessors, (13), 5 states have return successors, (11), 11 states have call predecessors, (11), 11 states have call successors, (11) [2022-12-14 05:59:48,953 INFO L276 IsEmpty]: Start isEmpty. Operand 404 states and 618 transitions. [2022-12-14 05:59:48,954 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-12-14 05:59:48,954 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 05:59:48,954 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 05:59:48,960 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-12-14 05:59:49,155 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 05:59:49,156 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 05:59:49,158 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 05:59:49,158 INFO L85 PathProgramCache]: Analyzing trace with hash -388388894, now seen corresponding path program 1 times [2022-12-14 05:59:49,159 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 05:59:49,159 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1040186754] [2022-12-14 05:59:49,160 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:59:49,160 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 05:59:49,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:59:49,275 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 05:59:49,275 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 05:59:49,275 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1040186754] [2022-12-14 05:59:49,275 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1040186754] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 05:59:49,275 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [955398644] [2022-12-14 05:59:49,275 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 05:59:49,275 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 05:59:49,276 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 05:59:49,276 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 05:59:49,277 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-14 05:59:49,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 05:59:49,490 INFO L263 TraceCheckSpWp]: Trace formula consists of 1020 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 05:59:49,493 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 05:59:49,507 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 05:59:49,508 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 05:59:49,543 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 05:59:49,543 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [955398644] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 05:59:49,543 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [825428740] [2022-12-14 05:59:49,547 INFO L159 IcfgInterpreter]: Started Sifa with 55 locations of interest [2022-12-14 05:59:49,547 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 05:59:49,547 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 05:59:49,547 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 05:59:49,547 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 06:01:20,649 INFO L197 IcfgInterpreter]: Interpreting procedure setClientId with input of size 440 for LOIs [2022-12-14 06:01:20,943 INFO L197 IcfgInterpreter]: Interpreting procedure setClientKeyringPublicKey with input of size 418 for LOIs [2022-12-14 06:01:21,220 INFO L197 IcfgInterpreter]: Interpreting procedure createClientKeyringEntry with input of size 211 for LOIs [2022-12-14 06:01:21,275 INFO L197 IcfgInterpreter]: Interpreting procedure setClientPrivateKey with input of size 441 for LOIs [2022-12-14 06:01:21,564 INFO L197 IcfgInterpreter]: Interpreting procedure setClientKeyringUser with input of size 415 for LOIs [2022-12-14 06:01:21,835 INFO L197 IcfgInterpreter]: Interpreting procedure sendEmail with input of size 232 for LOIs [2022-12-14 06:01:22,352 INFO L197 IcfgInterpreter]: Interpreting procedure outgoing with input of size 227 for LOIs [2022-12-14 06:01:35,616 INFO L197 IcfgInterpreter]: Interpreting procedure isReadable with input of size 396 for LOIs [2022-12-14 06:01:35,807 INFO L197 IcfgInterpreter]: Interpreting procedure getEmailTo with input of size 228 for LOIs [2022-12-14 06:01:35,840 INFO L197 IcfgInterpreter]: Interpreting procedure setEmailFrom with input of size 402 for LOIs [2022-12-14 06:01:36,338 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 06:02:19,024 WARN L233 SmtUtils]: Spent 5.31s on a formula simplification. DAG size of input: 529 DAG size of output: 402 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 06:03:17,308 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [825428740] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:03:17,308 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 06:03:17,308 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [48] imperfect sequences [4, 4, 4] total 54 [2022-12-14 06:03:17,309 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [347267282] [2022-12-14 06:03:17,309 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:03:17,309 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-12-14 06:03:17,309 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:03:17,310 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-12-14 06:03:17,312 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=155, Invalid=2707, Unknown=0, NotChecked=0, Total=2862 [2022-12-14 06:03:17,312 INFO L87 Difference]: Start difference. First operand 404 states and 618 transitions. Second operand has 49 states, 30 states have (on average 1.0666666666666667) internal successors, (32), 28 states have internal predecessors, (32), 15 states have call successors, (15), 10 states have call predecessors, (15), 8 states have return successors, (13), 13 states have call predecessors, (13), 13 states have call successors, (13) [2022-12-14 06:03:54,100 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:03:54,100 INFO L93 Difference]: Finished difference Result 825 states and 1294 transitions. [2022-12-14 06:03:54,101 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2022-12-14 06:03:54,101 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 30 states have (on average 1.0666666666666667) internal successors, (32), 28 states have internal predecessors, (32), 15 states have call successors, (15), 10 states have call predecessors, (15), 8 states have return successors, (13), 13 states have call predecessors, (13), 13 states have call successors, (13) Word has length 66 [2022-12-14 06:03:54,101 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:03:54,103 INFO L225 Difference]: With dead ends: 825 [2022-12-14 06:03:54,103 INFO L226 Difference]: Without dead ends: 578 [2022-12-14 06:03:54,104 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 209 GetRequests, 148 SyntacticMatches, 0 SemanticMatches, 61 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 770 ImplicationChecksByTransitivity, 120.8s TimeCoverageRelationStatistics Valid=236, Invalid=3670, Unknown=0, NotChecked=0, Total=3906 [2022-12-14 06:03:54,105 INFO L413 NwaCegarLoop]: 202 mSDtfsCounter, 294 mSDsluCounter, 3627 mSDsCounter, 0 mSdLazyCounter, 5516 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 298 SdHoareTripleChecker+Valid, 3829 SdHoareTripleChecker+Invalid, 5561 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 5516 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 16.3s IncrementalHoareTripleChecker+Time [2022-12-14 06:03:54,105 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [298 Valid, 3829 Invalid, 5561 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [45 Valid, 5516 Invalid, 0 Unknown, 0 Unchecked, 16.3s Time] [2022-12-14 06:03:54,105 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 578 states. [2022-12-14 06:03:54,440 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 578 to 472. [2022-12-14 06:03:54,441 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 472 states, 359 states have (on average 1.5208913649025069) internal successors, (546), 365 states have internal predecessors, (546), 88 states have call successors, (88), 25 states have call predecessors, (88), 24 states have return successors, (88), 81 states have call predecessors, (88), 87 states have call successors, (88) [2022-12-14 06:03:54,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 472 states to 472 states and 722 transitions. [2022-12-14 06:03:54,443 INFO L78 Accepts]: Start accepts. Automaton has 472 states and 722 transitions. Word has length 66 [2022-12-14 06:03:54,443 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:03:54,443 INFO L495 AbstractCegarLoop]: Abstraction has 472 states and 722 transitions. [2022-12-14 06:03:54,443 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 30 states have (on average 1.0666666666666667) internal successors, (32), 28 states have internal predecessors, (32), 15 states have call successors, (15), 10 states have call predecessors, (15), 8 states have return successors, (13), 13 states have call predecessors, (13), 13 states have call successors, (13) [2022-12-14 06:03:54,443 INFO L276 IsEmpty]: Start isEmpty. Operand 472 states and 722 transitions. [2022-12-14 06:03:54,444 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-12-14 06:03:54,444 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:03:54,444 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:03:54,451 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-12-14 06:03:54,645 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:03:54,645 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:03:54,646 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:03:54,646 INFO L85 PathProgramCache]: Analyzing trace with hash -1034111793, now seen corresponding path program 1 times [2022-12-14 06:03:54,647 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:03:54,647 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1662320057] [2022-12-14 06:03:54,647 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:03:54,648 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:03:54,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:03:54,789 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-12-14 06:03:54,789 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:03:54,789 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1662320057] [2022-12-14 06:03:54,790 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1662320057] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:03:54,790 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 06:03:54,790 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-14 06:03:54,790 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2043538744] [2022-12-14 06:03:54,790 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:03:54,790 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 06:03:54,790 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:03:54,791 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 06:03:54,791 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-14 06:03:54,791 INFO L87 Difference]: Start difference. First operand 472 states and 722 transitions. Second operand has 6 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (13), 1 states have call predecessors, (13), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) [2022-12-14 06:03:55,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:03:55,224 INFO L93 Difference]: Finished difference Result 472 states and 722 transitions. [2022-12-14 06:03:55,224 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 06:03:55,225 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (13), 1 states have call predecessors, (13), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) Word has length 68 [2022-12-14 06:03:55,225 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:03:55,225 INFO L225 Difference]: With dead ends: 472 [2022-12-14 06:03:55,225 INFO L226 Difference]: Without dead ends: 0 [2022-12-14 06:03:55,226 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-14 06:03:55,227 INFO L413 NwaCegarLoop]: 148 mSDtfsCounter, 81 mSDsluCounter, 491 mSDsCounter, 0 mSdLazyCounter, 116 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 639 SdHoareTripleChecker+Invalid, 116 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 06:03:55,227 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [106 Valid, 639 Invalid, 116 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 116 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 06:03:55,228 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-14 06:03:55,228 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-14 06:03:55,228 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 06:03:55,228 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-14 06:03:55,228 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 68 [2022-12-14 06:03:55,228 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:03:55,228 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-14 06:03:55,229 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (13), 1 states have call predecessors, (13), 2 states have return successors, (11), 2 states have call predecessors, (11), 1 states have call successors, (11) [2022-12-14 06:03:55,229 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-14 06:03:55,229 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-14 06:03:55,231 INFO L805 garLoopResultBuilder]: Registering result SAFE for location outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-14 06:03:55,231 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-12-14 06:03:55,233 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-14 06:05:18,825 INFO L899 garLoopResultBuilder]: For program point getEmailSignKeyEXIT(lines 1121 1139) no Hoare annotation was computed. [2022-12-14 06:05:18,825 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1121 1139) the Hoare annotation is: true [2022-12-14 06:05:18,825 INFO L899 garLoopResultBuilder]: For program point L69(lines 69 75) no Hoare annotation was computed. [2022-12-14 06:05:18,829 INFO L895 garLoopResultBuilder]: At program point L69-2(lines 62 78) the Hoare annotation is: (and (not (= |outgoing___utac_acc__EncryptVerify_spec__1_~tmp~0#1| 0)) (or (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse2 (not (= |old(~__ste_email_from0~0)| 0))) (.cse3 (not (= ~__ste_client_autoResponse2~0 0))) (.cse4 (not (= ~__ste_client_name2~0.base 0))) (.cse5 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse6 (not (= ~rjh~0 2))) (.cse7 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse8 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= ~__ste_Client_counter~0 0))) (.cse11 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse12 (not (= ~bob~0 1))) (.cse13 (not (= ~queued_message~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~queued_client~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse24 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse39 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse40 (not (= ~head~0.offset 0))) (.cse41 (not (= ~__ste_email_id1~0 0))) (.cse42 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse43 (not (= ~__ste_client_outbuffer1~0 0))) (.cse44 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse45 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse47 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse48 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse49 (not (= ~__ste_client_outbuffer3~0 0))) (.cse50 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse51 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse52 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse53 (not (= ~__ste_email_subject0~0.offset 0))) (.cse54 (not (= ~__ste_email_to1~0 0))) (.cse55 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse56 (not (= |#NULL.base| 0))) (.cse57 (not (= ~__ste_email_to0~0 ~rjh~0))) (.cse58 (not (= ~__ste_email_subject1~0.base 0))) (.cse59 (not (= ~__ste_client_autoResponse1~0 0))) (.cse60 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse61 (not (= ~__ste_client_name1~0.offset 0))) (.cse62 (not (= ~__ste_email_body0~0.base 0))) (.cse63 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse64 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse65 (not (= ~__ste_client_name0~0.offset 0))) (.cse66 (not (= 3 ~chuck~0))) (.cse67 (not (<= ~__ste_client_idCounter2~0 3))) (.cse68 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse69 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse70 (not (<= 0 |#StackHeapBarrier|))) (.cse71 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse72 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse73 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse74 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse75 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse76 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse77 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse78 (not (= ~__ste_client_outbuffer2~0 0))) (.cse79 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse80 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse81 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse82 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse83 (not (= ~__ste_client_autoResponse0~0 0))) (.cse84 (not (= ~queue_empty~0 1))) (.cse85 (not (= ~__ste_client_name1~0.base 0))) (.cse86 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse87 (not (= ~head~0.base 0))) (.cse88 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse89 (not (= ~__ste_Email_counter~0 0))) (.cse90 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse91 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse92 (not (= ~__ste_email_subject1~0.offset 0))) (.cse93 (not (= 0 ~__ste_email_subject0~0.base))) (.cse94 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse10 .cse11 .cse12 .cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 (not (= ~__ste_Client_Keyring0_User0~0 0)) .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 (not (= ~__ste_Client_Keyring1_User0~0 0)) .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (= ~__ste_ClientKeyring_size0~0 0)) .cse44 .cse45 .cse46 .cse47 (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) .cse48 .cse49 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) .cse56 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 (not (= ~__ste_ClientKeyring_size2~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 (not (= ~__ste_Client_Keyring2_User0~0 0)) .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 (not (= ~__ste_ClientKeyring_size1~0 0))) (or .cse0 .cse1 (not (<= ~__ste_Client_Keyring0_User0~0 2)) .cse2 (not (<= ~__ste_ClientKeyring_size0~0 2147483647)) .cse3 .cse4 .cse5 .cse6 (not (<= ~__ste_client_privateKey2~0 789)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 (not (<= 0 ~__ste_Client_Keyring0_User0~0)) (not (<= 0 (+ 2147483647 ~__ste_ClientKeyring_size0~0))) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 (not (<= 789 ~__ste_client_privateKey2~0)) .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 (not (<= ~__ste_Client_Keyring0_PublicKey0~0 456)) .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94))) (and (<= 1 |outgoing_outgoing__wrappee__Keys_~msg#1|) (<= 1 |outgoing_mail_#in~client#1|) (<= |outgoing_mail_#in~msg#1| 1) (<= 0 (+ 2147483648 |outgoing_getClientId_#res#1|)) (<= ~__ste_client_privateKey0~0 2147483647) (= |outgoing_verify_~__utac__ad__arg1~0#1| |outgoing___utac_acc__EncryptVerify_spec__1_#in~msg#1|) (= |outgoing_incoming_~msg#1| |outgoing_verify_#in~msg#1|) (<= |outgoing_getClientId_~retValue_acc~42#1| 2147483647) (<= ~__ste_email_isSignatureVerified1~0 0) (<= 1 |outgoing_sign_~client#1|) (= |outgoing_incoming_~msg#1| |outgoing_incoming_#in~msg#1|) (<= 0 (+ |outgoing_getClientId_~retValue_acc~42#1| 2147483648)) (= |outgoing_incoming_~client#1| |outgoing_incoming_#in~client#1|) (= |outgoing_verify_~__utac__ad__arg1~0#1| |outgoing_verify_~msg#1|) (<= |outgoing_sign_~msg#1| 1) (<= ~__ste_email_isSignatureVerified0~0 0) (<= 0 (+ |outgoing_sign_~privkey~0#1| 2147483648)) (<= 0 (+ ~__ste_client_privateKey0~0 2147483648)) (= |outgoing___utac_acc__EncryptVerify_spec__1_~msg#1| |outgoing___utac_acc__EncryptVerify_spec__1_#in~msg#1|) (<= ~__ste_email_from0~0 2147483647) (<= |outgoing_sign_~privkey~0#1| 2147483647) (<= |outgoing_sign_~client#1| 1) (<= 1 |outgoing_~client#1|) (<= 0 ~__ste_email_isSigned1~0) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (<= |outgoing_getClientId_#res#1| 2147483647) (<= 1 |outgoing_outgoing__wrappee__Keys_~client#1|) (<= |outgoing_sign_#in~client#1| 1) (<= |outgoing_getClientPrivateKey_~retValue_acc~35#1| 2147483647) (<= 1 |outgoing_getClientId_~handle#1|) (<= 0 (+ ~__ste_email_signKey0~0 2147483648)) (<= |outgoing_getClientPrivateKey_~handle#1| 1) (<= ~__ste_email_signKey0~0 2147483647) (<= |outgoing_outgoing__wrappee__Keys_~tmp~11#1| 2147483647) (<= 1 |outgoing_mail_#in~msg#1|) (= |outgoing_mail_~msg#1| |outgoing_incoming_#in~msg#1|) (<= ~__ste_client_idCounter0~0 2147483647) (<= ~__ste_email_isSigned0~0 1) (<= 1 |outgoing_outgoing__wrappee__Keys_#in~msg#1|) (<= 0 (+ |outgoing_getClientPrivateKey_~retValue_acc~35#1| 2147483648)) (<= 0 (+ 2147483648 |outgoing_sign_~tmp~14#1|)) (<= 0 ~__ste_email_signKey1~0) (<= ~__ste_email_signKey1~0 0) (<= ~__ste_email_isSigned1~0 0) (<= |outgoing_sign_~tmp~14#1| 2147483647) (<= 0 ~__ste_email_isSignatureVerified1~0) (<= |outgoing_outgoing__wrappee__Keys_~client#1| 1) (<= 1 |outgoing_sign_#in~client#1|) (<= |outgoing_getClientId_#in~handle#1| 1) (<= 1 |outgoing_sign_~msg#1|) (<= 1 |outgoing_~msg#1|) (<= |outgoing_mail_~client#1| 1) (<= 0 ~__ste_email_isSignatureVerified0~0) (<= 1 |outgoing_getClientPrivateKey_#in~handle#1|) (= |outgoing_mail_~tmp~10#1| |outgoing_incoming_#in~client#1|) (<= |outgoing_mail_#in~client#1| 1) (<= |outgoing_outgoing__wrappee__Keys_#in~client#1| 1) (<= |outgoing_sign_#in~msg#1| 1) (<= 1 |outgoing_incoming_~msg#1|) (<= 0 ~__ste_email_isSigned0~0) (<= |outgoing___utac_acc__EncryptVerify_spec__1_~msg#1| 1) (<= |outgoing_~msg#1| 1) (<= |outgoing_outgoing__wrappee__Keys_~msg#1| 1) (<= 0 (+ |outgoing_outgoing__wrappee__Keys_~tmp~11#1| 2147483648)) (<= |outgoing_getClientPrivateKey_#res#1| 2147483647) (<= 1 |outgoing_getClientId_#in~handle#1|) (<= |outgoing_getClientId_~handle#1| 1) (<= 1 |outgoing_sign_#in~msg#1|) (= |outgoing___utac_acc__EncryptVerify_spec__1_~tmp~0#1| 1) (<= |outgoing_~client#1| 1) (<= 0 (+ |outgoing_getClientPrivateKey_#res#1| 2147483648)) (<= 2 |outgoing_verify_#in~client#1|) (<= 2 |outgoing_incoming_#in~client#1|) (= |outgoing_verify_~client#1| |outgoing_verify_#in~client#1|) (<= 1 |outgoing_outgoing__wrappee__Keys_#in~client#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 1 |outgoing_mail_~client#1|) (= |outgoing_verify_~msg#1| |outgoing_verify_#in~msg#1|) (<= |outgoing_verify_~client#1| 2) (<= 1 |outgoing_getClientPrivateKey_~handle#1|) (<= |outgoing_getClientPrivateKey_#in~handle#1| 1) (<= |outgoing_incoming_#in~client#1| 2) (<= |outgoing_outgoing__wrappee__Keys_#in~msg#1| 1)))) [2022-12-14 06:05:18,829 INFO L899 garLoopResultBuilder]: For program point L1531(lines 1531 1535) no Hoare annotation was computed. [2022-12-14 06:05:18,832 INFO L895 garLoopResultBuilder]: At program point L1531-1(lines 1527 1538) the Hoare annotation is: (and (not (= |outgoing___utac_acc__EncryptVerify_spec__1_~tmp~0#1| 0)) (or (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse2 (not (= |old(~__ste_email_from0~0)| 0))) (.cse3 (not (= ~__ste_client_autoResponse2~0 0))) (.cse4 (not (= ~__ste_client_name2~0.base 0))) (.cse5 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse6 (not (= ~rjh~0 2))) (.cse7 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse8 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= ~__ste_Client_counter~0 0))) (.cse11 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse12 (not (= ~bob~0 1))) (.cse13 (not (= ~queued_message~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~queued_client~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse24 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse39 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse40 (not (= ~head~0.offset 0))) (.cse41 (not (= ~__ste_email_id1~0 0))) (.cse42 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse43 (not (= ~__ste_client_outbuffer1~0 0))) (.cse44 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse45 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse47 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse48 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse49 (not (= ~__ste_client_outbuffer3~0 0))) (.cse50 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse51 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse52 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse53 (not (= ~__ste_email_subject0~0.offset 0))) (.cse54 (not (= ~__ste_email_to1~0 0))) (.cse55 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse56 (not (= |#NULL.base| 0))) (.cse57 (not (= ~__ste_email_to0~0 ~rjh~0))) (.cse58 (not (= ~__ste_email_subject1~0.base 0))) (.cse59 (not (= ~__ste_client_autoResponse1~0 0))) (.cse60 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse61 (not (= ~__ste_client_name1~0.offset 0))) (.cse62 (not (= ~__ste_email_body0~0.base 0))) (.cse63 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse64 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse65 (not (= ~__ste_client_name0~0.offset 0))) (.cse66 (not (= 3 ~chuck~0))) (.cse67 (not (<= ~__ste_client_idCounter2~0 3))) (.cse68 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse69 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse70 (not (<= 0 |#StackHeapBarrier|))) (.cse71 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse72 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse73 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse74 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse75 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse76 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse77 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse78 (not (= ~__ste_client_outbuffer2~0 0))) (.cse79 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse80 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse81 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse82 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse83 (not (= ~__ste_client_autoResponse0~0 0))) (.cse84 (not (= ~queue_empty~0 1))) (.cse85 (not (= ~__ste_client_name1~0.base 0))) (.cse86 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse87 (not (= ~head~0.base 0))) (.cse88 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse89 (not (= ~__ste_Email_counter~0 0))) (.cse90 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse91 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse92 (not (= ~__ste_email_subject1~0.offset 0))) (.cse93 (not (= 0 ~__ste_email_subject0~0.base))) (.cse94 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse10 .cse11 .cse12 .cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 (not (= ~__ste_Client_Keyring0_User0~0 0)) .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 (not (= ~__ste_Client_Keyring1_User0~0 0)) .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (= ~__ste_ClientKeyring_size0~0 0)) .cse44 .cse45 .cse46 .cse47 (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) .cse48 .cse49 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) .cse56 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 (not (= ~__ste_ClientKeyring_size2~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 (not (= ~__ste_Client_Keyring2_User0~0 0)) .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 (not (= ~__ste_ClientKeyring_size1~0 0))) (or .cse0 .cse1 (not (<= ~__ste_Client_Keyring0_User0~0 2)) .cse2 (not (<= ~__ste_ClientKeyring_size0~0 2147483647)) .cse3 .cse4 .cse5 .cse6 (not (<= ~__ste_client_privateKey2~0 789)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 (not (<= 0 ~__ste_Client_Keyring0_User0~0)) (not (<= 0 (+ 2147483647 ~__ste_ClientKeyring_size0~0))) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 (not (<= 789 ~__ste_client_privateKey2~0)) .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 (not (<= ~__ste_Client_Keyring0_PublicKey0~0 456)) .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94))) (and (<= 1 |outgoing_outgoing__wrappee__Keys_~msg#1|) (<= 1 |outgoing_mail_#in~client#1|) (<= |outgoing_mail_#in~msg#1| 1) (<= 0 (+ 2147483648 |outgoing_getClientId_#res#1|)) (<= ~__ste_client_privateKey0~0 2147483647) (= |outgoing_verify_~__utac__ad__arg1~0#1| |outgoing___utac_acc__EncryptVerify_spec__1_#in~msg#1|) (= |outgoing_incoming_~msg#1| |outgoing_verify_#in~msg#1|) (<= |outgoing_getClientId_~retValue_acc~42#1| 2147483647) (<= ~__ste_email_isSignatureVerified1~0 0) (<= 1 |outgoing_sign_~client#1|) (= |outgoing_incoming_~msg#1| |outgoing_incoming_#in~msg#1|) (<= 0 (+ |outgoing_getClientId_~retValue_acc~42#1| 2147483648)) (= |outgoing_incoming_~client#1| |outgoing_incoming_#in~client#1|) (= |outgoing_verify_~__utac__ad__arg1~0#1| |outgoing_verify_~msg#1|) (<= |outgoing_sign_~msg#1| 1) (<= ~__ste_email_isSignatureVerified0~0 0) (<= 0 (+ |outgoing_sign_~privkey~0#1| 2147483648)) (<= 0 (+ ~__ste_client_privateKey0~0 2147483648)) (= |outgoing___utac_acc__EncryptVerify_spec__1_~msg#1| |outgoing___utac_acc__EncryptVerify_spec__1_#in~msg#1|) (<= ~__ste_email_from0~0 2147483647) (<= |outgoing_sign_~privkey~0#1| 2147483647) (<= |outgoing_sign_~client#1| 1) (<= 1 |outgoing_~client#1|) (<= 0 ~__ste_email_isSigned1~0) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (<= |outgoing_getClientId_#res#1| 2147483647) (<= 1 |outgoing_outgoing__wrappee__Keys_~client#1|) (<= |outgoing_sign_#in~client#1| 1) (<= |outgoing_getClientPrivateKey_~retValue_acc~35#1| 2147483647) (<= 1 |outgoing_getClientId_~handle#1|) (<= 0 (+ ~__ste_email_signKey0~0 2147483648)) (<= |outgoing_getClientPrivateKey_~handle#1| 1) (<= ~__ste_email_signKey0~0 2147483647) (<= |outgoing_outgoing__wrappee__Keys_~tmp~11#1| 2147483647) (<= 1 |outgoing_mail_#in~msg#1|) (= |outgoing_mail_~msg#1| |outgoing_incoming_#in~msg#1|) (<= ~__ste_client_idCounter0~0 2147483647) (<= ~__ste_email_isSigned0~0 1) (<= 1 |outgoing_outgoing__wrappee__Keys_#in~msg#1|) (<= 0 (+ |outgoing_getClientPrivateKey_~retValue_acc~35#1| 2147483648)) (<= 0 (+ 2147483648 |outgoing_sign_~tmp~14#1|)) (<= 0 ~__ste_email_signKey1~0) (<= ~__ste_email_signKey1~0 0) (<= ~__ste_email_isSigned1~0 0) (<= |outgoing_sign_~tmp~14#1| 2147483647) (<= 0 ~__ste_email_isSignatureVerified1~0) (<= |outgoing_outgoing__wrappee__Keys_~client#1| 1) (<= 1 |outgoing_sign_#in~client#1|) (<= |outgoing_getClientId_#in~handle#1| 1) (<= 1 |outgoing_sign_~msg#1|) (<= 1 |outgoing_~msg#1|) (<= |outgoing_mail_~client#1| 1) (<= 0 ~__ste_email_isSignatureVerified0~0) (<= 1 |outgoing_getClientPrivateKey_#in~handle#1|) (= |outgoing_mail_~tmp~10#1| |outgoing_incoming_#in~client#1|) (<= |outgoing_mail_#in~client#1| 1) (<= |outgoing_outgoing__wrappee__Keys_#in~client#1| 1) (<= |outgoing_sign_#in~msg#1| 1) (<= 1 |outgoing_incoming_~msg#1|) (<= 0 ~__ste_email_isSigned0~0) (<= |outgoing___utac_acc__EncryptVerify_spec__1_~msg#1| 1) (<= |outgoing_~msg#1| 1) (<= |outgoing_outgoing__wrappee__Keys_~msg#1| 1) (<= 0 (+ |outgoing_outgoing__wrappee__Keys_~tmp~11#1| 2147483648)) (<= |outgoing_getClientPrivateKey_#res#1| 2147483647) (<= 1 |outgoing_getClientId_#in~handle#1|) (<= |outgoing_getClientId_~handle#1| 1) (<= 1 |outgoing_sign_#in~msg#1|) (= |outgoing___utac_acc__EncryptVerify_spec__1_~tmp~0#1| 1) (<= |outgoing_~client#1| 1) (<= 0 (+ |outgoing_getClientPrivateKey_#res#1| 2147483648)) (<= 2 |outgoing_verify_#in~client#1|) (<= 2 |outgoing_incoming_#in~client#1|) (= |outgoing_verify_~client#1| |outgoing_verify_#in~client#1|) (<= 1 |outgoing_outgoing__wrappee__Keys_#in~client#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 1 |outgoing_mail_~client#1|) (= |outgoing_verify_~msg#1| |outgoing_verify_#in~msg#1|) (<= |outgoing_verify_~client#1| 2) (<= 1 |outgoing_getClientPrivateKey_~handle#1|) (<= |outgoing_getClientPrivateKey_#in~handle#1| 1) (<= |outgoing_incoming_#in~client#1| 2) (<= |outgoing_outgoing__wrappee__Keys_#in~msg#1| 1)))) [2022-12-14 06:05:18,836 INFO L895 garLoopResultBuilder]: At program point L1540(line 1540) the Hoare annotation is: (and (not (= |outgoing___utac_acc__EncryptVerify_spec__1_~tmp~0#1| 0)) (or (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse2 (not (= |old(~__ste_email_from0~0)| 0))) (.cse3 (not (= ~__ste_client_autoResponse2~0 0))) (.cse4 (not (= ~__ste_client_name2~0.base 0))) (.cse5 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse6 (not (= ~rjh~0 2))) (.cse7 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse8 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= ~__ste_Client_counter~0 0))) (.cse11 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse12 (not (= ~bob~0 1))) (.cse13 (not (= ~queued_message~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~queued_client~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse24 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse39 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse40 (not (= ~head~0.offset 0))) (.cse41 (not (= ~__ste_email_id1~0 0))) (.cse42 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse43 (not (= ~__ste_client_outbuffer1~0 0))) (.cse44 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse45 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse47 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse48 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse49 (not (= ~__ste_client_outbuffer3~0 0))) (.cse50 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse51 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse52 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse53 (not (= ~__ste_email_subject0~0.offset 0))) (.cse54 (not (= ~__ste_email_to1~0 0))) (.cse55 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse56 (not (= |#NULL.base| 0))) (.cse57 (not (= ~__ste_email_to0~0 ~rjh~0))) (.cse58 (not (= ~__ste_email_subject1~0.base 0))) (.cse59 (not (= ~__ste_client_autoResponse1~0 0))) (.cse60 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse61 (not (= ~__ste_client_name1~0.offset 0))) (.cse62 (not (= ~__ste_email_body0~0.base 0))) (.cse63 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse64 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse65 (not (= ~__ste_client_name0~0.offset 0))) (.cse66 (not (= 3 ~chuck~0))) (.cse67 (not (<= ~__ste_client_idCounter2~0 3))) (.cse68 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse69 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse70 (not (<= 0 |#StackHeapBarrier|))) (.cse71 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse72 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse73 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse74 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse75 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse76 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse77 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse78 (not (= ~__ste_client_outbuffer2~0 0))) (.cse79 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse80 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse81 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse82 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse83 (not (= ~__ste_client_autoResponse0~0 0))) (.cse84 (not (= ~queue_empty~0 1))) (.cse85 (not (= ~__ste_client_name1~0.base 0))) (.cse86 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse87 (not (= ~head~0.base 0))) (.cse88 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse89 (not (= ~__ste_Email_counter~0 0))) (.cse90 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse91 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse92 (not (= ~__ste_email_subject1~0.offset 0))) (.cse93 (not (= 0 ~__ste_email_subject0~0.base))) (.cse94 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse10 .cse11 .cse12 .cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 (not (= ~__ste_Client_Keyring0_User0~0 0)) .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 (not (= ~__ste_Client_Keyring1_User0~0 0)) .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (= ~__ste_ClientKeyring_size0~0 0)) .cse44 .cse45 .cse46 .cse47 (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) .cse48 .cse49 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) .cse56 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 (not (= ~__ste_ClientKeyring_size2~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 (not (= ~__ste_Client_Keyring2_User0~0 0)) .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 (not (= ~__ste_ClientKeyring_size1~0 0))) (or .cse0 .cse1 (not (<= ~__ste_Client_Keyring0_User0~0 2)) .cse2 (not (<= ~__ste_ClientKeyring_size0~0 2147483647)) .cse3 .cse4 .cse5 .cse6 (not (<= ~__ste_client_privateKey2~0 789)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 (not (<= 0 ~__ste_Client_Keyring0_User0~0)) (not (<= 0 (+ 2147483647 ~__ste_ClientKeyring_size0~0))) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 (not (<= 789 ~__ste_client_privateKey2~0)) .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 (not (<= ~__ste_Client_Keyring0_PublicKey0~0 456)) .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94))) (and (<= 1 |outgoing_outgoing__wrappee__Keys_~msg#1|) (<= 1 |outgoing_mail_#in~client#1|) (<= |outgoing_mail_#in~msg#1| 1) (<= 0 (+ 2147483648 |outgoing_getClientId_#res#1|)) (<= ~__ste_client_privateKey0~0 2147483647) (= |outgoing_verify_~__utac__ad__arg1~0#1| |outgoing___utac_acc__EncryptVerify_spec__1_#in~msg#1|) (= |outgoing_incoming_~msg#1| |outgoing_verify_#in~msg#1|) (<= |outgoing_getClientId_~retValue_acc~42#1| 2147483647) (<= ~__ste_email_isSignatureVerified1~0 0) (<= 1 |outgoing_sign_~client#1|) (= |outgoing_incoming_~msg#1| |outgoing_incoming_#in~msg#1|) (<= 0 (+ |outgoing_getClientId_~retValue_acc~42#1| 2147483648)) (= |outgoing_incoming_~client#1| |outgoing_incoming_#in~client#1|) (= |outgoing_verify_~__utac__ad__arg1~0#1| |outgoing_verify_~msg#1|) (<= |outgoing_sign_~msg#1| 1) (<= ~__ste_email_isSignatureVerified0~0 0) (<= 0 (+ |outgoing_sign_~privkey~0#1| 2147483648)) (<= 0 (+ ~__ste_client_privateKey0~0 2147483648)) (= |outgoing___utac_acc__EncryptVerify_spec__1_~msg#1| |outgoing___utac_acc__EncryptVerify_spec__1_#in~msg#1|) (<= ~__ste_email_from0~0 2147483647) (<= |outgoing_sign_~privkey~0#1| 2147483647) (<= |outgoing_sign_~client#1| 1) (<= 1 |outgoing_~client#1|) (<= 0 ~__ste_email_isSigned1~0) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (<= |outgoing_getClientId_#res#1| 2147483647) (<= 1 |outgoing_outgoing__wrappee__Keys_~client#1|) (<= |outgoing_sign_#in~client#1| 1) (<= |outgoing_getClientPrivateKey_~retValue_acc~35#1| 2147483647) (<= 1 |outgoing_getClientId_~handle#1|) (<= 0 (+ ~__ste_email_signKey0~0 2147483648)) (<= |outgoing_getClientPrivateKey_~handle#1| 1) (<= ~__ste_email_signKey0~0 2147483647) (<= |outgoing_outgoing__wrappee__Keys_~tmp~11#1| 2147483647) (<= 1 |outgoing_mail_#in~msg#1|) (= |outgoing_mail_~msg#1| |outgoing_incoming_#in~msg#1|) (<= ~__ste_client_idCounter0~0 2147483647) (<= ~__ste_email_isSigned0~0 1) (<= 1 |outgoing_outgoing__wrappee__Keys_#in~msg#1|) (<= 0 (+ |outgoing_getClientPrivateKey_~retValue_acc~35#1| 2147483648)) (<= 0 (+ 2147483648 |outgoing_sign_~tmp~14#1|)) (<= 0 ~__ste_email_signKey1~0) (<= ~__ste_email_signKey1~0 0) (<= ~__ste_email_isSigned1~0 0) (<= |outgoing_sign_~tmp~14#1| 2147483647) (<= 0 ~__ste_email_isSignatureVerified1~0) (<= |outgoing_outgoing__wrappee__Keys_~client#1| 1) (<= 1 |outgoing_sign_#in~client#1|) (<= |outgoing_getClientId_#in~handle#1| 1) (<= 1 |outgoing_sign_~msg#1|) (<= 1 |outgoing_~msg#1|) (<= |outgoing_mail_~client#1| 1) (<= 0 ~__ste_email_isSignatureVerified0~0) (<= 1 |outgoing_getClientPrivateKey_#in~handle#1|) (= |outgoing_mail_~tmp~10#1| |outgoing_incoming_#in~client#1|) (<= |outgoing_mail_#in~client#1| 1) (<= |outgoing_outgoing__wrappee__Keys_#in~client#1| 1) (<= |outgoing_sign_#in~msg#1| 1) (<= 1 |outgoing_incoming_~msg#1|) (<= 0 ~__ste_email_isSigned0~0) (<= |outgoing___utac_acc__EncryptVerify_spec__1_~msg#1| 1) (<= |outgoing_~msg#1| 1) (<= |outgoing_outgoing__wrappee__Keys_~msg#1| 1) (<= 0 (+ |outgoing_outgoing__wrappee__Keys_~tmp~11#1| 2147483648)) (<= |outgoing_getClientPrivateKey_#res#1| 2147483647) (<= 1 |outgoing_getClientId_#in~handle#1|) (<= |outgoing_getClientId_~handle#1| 1) (<= 1 |outgoing_sign_#in~msg#1|) (= |outgoing___utac_acc__EncryptVerify_spec__1_~tmp~0#1| 1) (<= |outgoing_~client#1| 1) (<= 0 (+ |outgoing_getClientPrivateKey_#res#1| 2147483648)) (<= 2 |outgoing_verify_#in~client#1|) (<= 2 |outgoing_incoming_#in~client#1|) (= |outgoing_verify_~client#1| |outgoing_verify_#in~client#1|) (<= 1 |outgoing_outgoing__wrappee__Keys_#in~client#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 1 |outgoing_mail_~client#1|) (= |outgoing_verify_~msg#1| |outgoing_verify_#in~msg#1|) (<= |outgoing_verify_~client#1| 2) (<= 1 |outgoing_getClientPrivateKey_~handle#1|) (<= |outgoing_getClientPrivateKey_#in~handle#1| 1) (<= |outgoing_incoming_#in~client#1| 2) (<= |outgoing_outgoing__wrappee__Keys_#in~msg#1| 1)))) [2022-12-14 06:05:18,838 INFO L895 garLoopResultBuilder]: At program point L1342(line 1342) the Hoare annotation is: (or (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse2 (not (= |old(~__ste_email_from0~0)| 0))) (.cse3 (not (= ~__ste_client_autoResponse2~0 0))) (.cse4 (not (= ~__ste_client_name2~0.base 0))) (.cse5 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse6 (not (= ~rjh~0 2))) (.cse7 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse8 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= ~__ste_Client_counter~0 0))) (.cse11 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse12 (not (= ~bob~0 1))) (.cse13 (not (= ~queued_message~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~queued_client~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse24 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse39 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse40 (not (= ~head~0.offset 0))) (.cse41 (not (= ~__ste_email_id1~0 0))) (.cse42 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse43 (not (= ~__ste_client_outbuffer1~0 0))) (.cse44 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse45 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse47 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse48 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse49 (not (= ~__ste_client_outbuffer3~0 0))) (.cse50 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse51 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse52 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse53 (not (= ~__ste_email_subject0~0.offset 0))) (.cse54 (not (= ~__ste_email_to1~0 0))) (.cse55 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse56 (not (= |#NULL.base| 0))) (.cse57 (not (= ~__ste_email_to0~0 ~rjh~0))) (.cse58 (not (= ~__ste_email_subject1~0.base 0))) (.cse59 (not (= ~__ste_client_autoResponse1~0 0))) (.cse60 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse61 (not (= ~__ste_client_name1~0.offset 0))) (.cse62 (not (= ~__ste_email_body0~0.base 0))) (.cse63 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse64 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse65 (not (= ~__ste_client_name0~0.offset 0))) (.cse66 (not (= 3 ~chuck~0))) (.cse67 (not (<= ~__ste_client_idCounter2~0 3))) (.cse68 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse69 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse70 (not (<= 0 |#StackHeapBarrier|))) (.cse71 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse72 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse73 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse74 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse75 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse76 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse77 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse78 (not (= ~__ste_client_outbuffer2~0 0))) (.cse79 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse80 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse81 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse82 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse83 (not (= ~__ste_client_autoResponse0~0 0))) (.cse84 (not (= ~queue_empty~0 1))) (.cse85 (not (= ~__ste_client_name1~0.base 0))) (.cse86 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse87 (not (= ~head~0.base 0))) (.cse88 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse89 (not (= ~__ste_Email_counter~0 0))) (.cse90 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse91 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse92 (not (= ~__ste_email_subject1~0.offset 0))) (.cse93 (not (= 0 ~__ste_email_subject0~0.base))) (.cse94 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse10 .cse11 .cse12 .cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 (not (= ~__ste_Client_Keyring0_User0~0 0)) .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 (not (= ~__ste_Client_Keyring1_User0~0 0)) .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (= ~__ste_ClientKeyring_size0~0 0)) .cse44 .cse45 .cse46 .cse47 (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) .cse48 .cse49 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) .cse56 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 (not (= ~__ste_ClientKeyring_size2~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 (not (= ~__ste_Client_Keyring2_User0~0 0)) .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 (not (= ~__ste_ClientKeyring_size1~0 0))) (or .cse0 .cse1 (not (<= ~__ste_Client_Keyring0_User0~0 2)) .cse2 (not (<= ~__ste_ClientKeyring_size0~0 2147483647)) .cse3 .cse4 .cse5 .cse6 (not (<= ~__ste_client_privateKey2~0 789)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 (not (<= 0 ~__ste_Client_Keyring0_User0~0)) (not (<= 0 (+ 2147483647 ~__ste_ClientKeyring_size0~0))) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 (not (<= 789 ~__ste_client_privateKey2~0)) .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 (not (<= ~__ste_Client_Keyring0_PublicKey0~0 456)) .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94))) (and (= |outgoing_sign_#in~msg#1| |outgoing_~msg#1|) (= |outgoing_getClientPrivateKey_~handle#1| |outgoing_getClientPrivateKey_#in~handle#1|) (= |outgoing_getClientPrivateKey_~retValue_acc~35#1| |outgoing_getClientPrivateKey_#res#1|) (= |outgoing_sign_~privkey~0#1| |outgoing_sign_~tmp~14#1|) (= |outgoing_sign_#in~client#1| |outgoing_sign_~client#1|) (= |outgoing_outgoing__wrappee__Keys_#in~msg#1| |outgoing_~msg#1|) (= |outgoing_sign_#in~msg#1| |outgoing_sign_~msg#1|) (= |outgoing_getClientId_~retValue_acc~42#1| ~__ste_client_idCounter0~0) (= |outgoing_outgoing__wrappee__Keys_#in~client#1| |outgoing_~client#1|) (= |outgoing_outgoing__wrappee__Keys_~msg#1| |outgoing_outgoing__wrappee__Keys_#in~msg#1|) (= |outgoing_getClientId_#in~handle#1| |outgoing_outgoing__wrappee__Keys_~client#1|) (= |outgoing_sign_~client#1| |outgoing_getClientPrivateKey_#in~handle#1|) (= |outgoing_getClientId_~retValue_acc~42#1| |outgoing_getClientId_#res#1|) (= |outgoing_#in~msg#1| |outgoing_~msg#1|) (= |outgoing_getClientPrivateKey_~retValue_acc~35#1| ~__ste_client_privateKey0~0) (<= |outgoing_outgoing__wrappee__Keys_~tmp~11#1| 2147483647) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |outgoing_outgoing__wrappee__Keys_~tmp~11#1| |outgoing_getClientId_#res#1|) (= |outgoing_sign_#in~client#1| |outgoing_~client#1|) (= ~__ste_email_isSignatureVerified0~0 |old(~__ste_email_isSignatureVerified0~0)|) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |outgoing_outgoing__wrappee__Keys_~client#1| |outgoing_outgoing__wrappee__Keys_#in~client#1|) (= |outgoing_getClientId_#in~handle#1| |outgoing_getClientId_~handle#1|) (= |outgoing_getClientPrivateKey_#res#1| |outgoing_sign_~tmp~14#1|) (= |outgoing_~client#1| |outgoing_#in~client#1|) (= ~__ste_email_isSignatureVerified1~0 |old(~__ste_email_isSignatureVerified1~0)|) (let ((.cse95 (= |outgoing_sign_~privkey~0#1| 0)) (.cse96 (= ~__ste_email_isSigned1~0 |old(~__ste_email_isSigned1~0)|)) (.cse97 (= ~__ste_email_signKey1~0 |old(~__ste_email_signKey1~0)|))) (or (and (= ~__ste_email_signKey0~0 |old(~__ste_email_signKey0~0)|) .cse95 .cse96 (= ~__ste_email_isSigned0~0 |old(~__ste_email_isSigned0~0)|) .cse97) (and (= ~__ste_email_signKey0~0 |outgoing_setEmailSignKey_~value#1|) (= ~__ste_email_isSigned0~0 |outgoing_setEmailIsSigned_~value#1|) (= |outgoing_setEmailSignKey_#in~value#1| |outgoing_setEmailSignKey_~value#1|) (= |outgoing_setEmailIsSigned_#in~value#1| |outgoing_setEmailIsSigned_~value#1|) (= |outgoing_setEmailIsSigned_#in~handle#1| |outgoing_sign_~msg#1|) (= |outgoing_setEmailSignKey_#in~value#1| |outgoing_sign_~privkey~0#1|) (= |outgoing_setEmailIsSigned_#in~value#1| 1) (not .cse95) (= |outgoing_setEmailSignKey_#in~handle#1| |outgoing_setEmailSignKey_~handle#1|) (= |outgoing_setEmailIsSigned_~handle#1| |outgoing_setEmailIsSigned_#in~handle#1|) (= |outgoing_setEmailSignKey_#in~handle#1| |outgoing_sign_~msg#1|) .cse96 .cse97))) (<= 0 (+ |outgoing_outgoing__wrappee__Keys_~tmp~11#1| 2147483648)) (<= |outgoing_getClientPrivateKey_#res#1| 2147483647) (<= 0 (+ |outgoing_getClientPrivateKey_#res#1| 2147483648)))) [2022-12-14 06:05:18,838 INFO L899 garLoopResultBuilder]: For program point L1342-1(line 1342) no Hoare annotation was computed. [2022-12-14 06:05:18,839 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 1348 1358) the Hoare annotation is: (or (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse2 (not (= |old(~__ste_email_from0~0)| 0))) (.cse3 (not (= ~__ste_client_autoResponse2~0 0))) (.cse4 (not (= ~__ste_client_name2~0.base 0))) (.cse5 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse6 (not (= ~rjh~0 2))) (.cse7 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse8 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= ~__ste_Client_counter~0 0))) (.cse11 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse12 (not (= ~bob~0 1))) (.cse13 (not (= ~queued_message~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~queued_client~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse24 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse39 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse40 (not (= ~head~0.offset 0))) (.cse41 (not (= ~__ste_email_id1~0 0))) (.cse42 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse43 (not (= ~__ste_client_outbuffer1~0 0))) (.cse44 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse45 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse47 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse48 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse49 (not (= ~__ste_client_outbuffer3~0 0))) (.cse50 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse51 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse52 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse53 (not (= ~__ste_email_subject0~0.offset 0))) (.cse54 (not (= ~__ste_email_to1~0 0))) (.cse55 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse56 (not (= |#NULL.base| 0))) (.cse57 (not (= ~__ste_email_to0~0 ~rjh~0))) (.cse58 (not (= ~__ste_email_subject1~0.base 0))) (.cse59 (not (= ~__ste_client_autoResponse1~0 0))) (.cse60 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse61 (not (= ~__ste_client_name1~0.offset 0))) (.cse62 (not (= ~__ste_email_body0~0.base 0))) (.cse63 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse64 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse65 (not (= ~__ste_client_name0~0.offset 0))) (.cse66 (not (= 3 ~chuck~0))) (.cse67 (not (<= ~__ste_client_idCounter2~0 3))) (.cse68 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse69 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse70 (not (<= 0 |#StackHeapBarrier|))) (.cse71 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse72 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse73 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse74 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse75 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse76 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse77 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse78 (not (= ~__ste_client_outbuffer2~0 0))) (.cse79 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse80 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse81 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse82 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse83 (not (= ~__ste_client_autoResponse0~0 0))) (.cse84 (not (= ~queue_empty~0 1))) (.cse85 (not (= ~__ste_client_name1~0.base 0))) (.cse86 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse87 (not (= ~head~0.base 0))) (.cse88 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse89 (not (= ~__ste_Email_counter~0 0))) (.cse90 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse91 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse92 (not (= ~__ste_email_subject1~0.offset 0))) (.cse93 (not (= 0 ~__ste_email_subject0~0.base))) (.cse94 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse10 .cse11 .cse12 .cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 (not (= ~__ste_Client_Keyring0_User0~0 0)) .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 (not (= ~__ste_Client_Keyring1_User0~0 0)) .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (= ~__ste_ClientKeyring_size0~0 0)) .cse44 .cse45 .cse46 .cse47 (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) .cse48 .cse49 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) .cse56 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 (not (= ~__ste_ClientKeyring_size2~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 (not (= ~__ste_Client_Keyring2_User0~0 0)) .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 (not (= ~__ste_ClientKeyring_size1~0 0))) (or .cse0 .cse1 (not (<= ~__ste_Client_Keyring0_User0~0 2)) .cse2 (not (<= ~__ste_ClientKeyring_size0~0 2147483647)) .cse3 .cse4 .cse5 .cse6 (not (<= ~__ste_client_privateKey2~0 789)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 (not (<= 0 ~__ste_Client_Keyring0_User0~0)) (not (<= 0 (+ 2147483647 ~__ste_ClientKeyring_size0~0))) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 (not (<= 789 ~__ste_client_privateKey2~0)) .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 (not (<= ~__ste_Client_Keyring0_PublicKey0~0 456)) .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94))) (and (= ~__ste_email_signKey0~0 |old(~__ste_email_signKey0~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= ~__ste_email_isSignatureVerified0~0 |old(~__ste_email_isSignatureVerified0~0)|) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= ~__ste_email_isSigned1~0 |old(~__ste_email_isSigned1~0)|) (= ~__ste_email_isSignatureVerified1~0 |old(~__ste_email_isSignatureVerified1~0)|) (= ~__ste_email_isSigned0~0 |old(~__ste_email_isSigned0~0)|) (= ~__ste_email_signKey1~0 |old(~__ste_email_signKey1~0)|))) [2022-12-14 06:05:18,842 INFO L895 garLoopResultBuilder]: At program point L1525(line 1525) the Hoare annotation is: (and (not (= |outgoing___utac_acc__EncryptVerify_spec__1_~tmp~0#1| 0)) (or (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse2 (not (= |old(~__ste_email_from0~0)| 0))) (.cse3 (not (= ~__ste_client_autoResponse2~0 0))) (.cse4 (not (= ~__ste_client_name2~0.base 0))) (.cse5 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse6 (not (= ~rjh~0 2))) (.cse7 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse8 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= ~__ste_Client_counter~0 0))) (.cse11 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse12 (not (= ~bob~0 1))) (.cse13 (not (= ~queued_message~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~queued_client~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse24 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse39 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse40 (not (= ~head~0.offset 0))) (.cse41 (not (= ~__ste_email_id1~0 0))) (.cse42 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse43 (not (= ~__ste_client_outbuffer1~0 0))) (.cse44 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse45 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse47 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse48 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse49 (not (= ~__ste_client_outbuffer3~0 0))) (.cse50 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse51 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse52 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse53 (not (= ~__ste_email_subject0~0.offset 0))) (.cse54 (not (= ~__ste_email_to1~0 0))) (.cse55 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse56 (not (= |#NULL.base| 0))) (.cse57 (not (= ~__ste_email_to0~0 ~rjh~0))) (.cse58 (not (= ~__ste_email_subject1~0.base 0))) (.cse59 (not (= ~__ste_client_autoResponse1~0 0))) (.cse60 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse61 (not (= ~__ste_client_name1~0.offset 0))) (.cse62 (not (= ~__ste_email_body0~0.base 0))) (.cse63 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse64 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse65 (not (= ~__ste_client_name0~0.offset 0))) (.cse66 (not (= 3 ~chuck~0))) (.cse67 (not (<= ~__ste_client_idCounter2~0 3))) (.cse68 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse69 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse70 (not (<= 0 |#StackHeapBarrier|))) (.cse71 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse72 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse73 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse74 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse75 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse76 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse77 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse78 (not (= ~__ste_client_outbuffer2~0 0))) (.cse79 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse80 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse81 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse82 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse83 (not (= ~__ste_client_autoResponse0~0 0))) (.cse84 (not (= ~queue_empty~0 1))) (.cse85 (not (= ~__ste_client_name1~0.base 0))) (.cse86 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse87 (not (= ~head~0.base 0))) (.cse88 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse89 (not (= ~__ste_Email_counter~0 0))) (.cse90 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse91 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse92 (not (= ~__ste_email_subject1~0.offset 0))) (.cse93 (not (= 0 ~__ste_email_subject0~0.base))) (.cse94 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse10 .cse11 .cse12 .cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 (not (= ~__ste_Client_Keyring0_User0~0 0)) .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 (not (= ~__ste_Client_Keyring1_User0~0 0)) .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (= ~__ste_ClientKeyring_size0~0 0)) .cse44 .cse45 .cse46 .cse47 (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) .cse48 .cse49 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) .cse56 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 (not (= ~__ste_ClientKeyring_size2~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 (not (= ~__ste_Client_Keyring2_User0~0 0)) .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 (not (= ~__ste_ClientKeyring_size1~0 0))) (or .cse0 .cse1 (not (<= ~__ste_Client_Keyring0_User0~0 2)) .cse2 (not (<= ~__ste_ClientKeyring_size0~0 2147483647)) .cse3 .cse4 .cse5 .cse6 (not (<= ~__ste_client_privateKey2~0 789)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 (not (<= 0 ~__ste_Client_Keyring0_User0~0)) (not (<= 0 (+ 2147483647 ~__ste_ClientKeyring_size0~0))) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 (not (<= 789 ~__ste_client_privateKey2~0)) .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 (not (<= ~__ste_Client_Keyring0_PublicKey0~0 456)) .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94))) (and (<= 1 |outgoing_outgoing__wrappee__Keys_~msg#1|) (<= 1 |outgoing_mail_#in~client#1|) (<= |outgoing_mail_#in~msg#1| 1) (<= 0 (+ 2147483648 |outgoing_getClientId_#res#1|)) (<= ~__ste_client_privateKey0~0 2147483647) (= |outgoing_verify_~__utac__ad__arg1~0#1| |outgoing___utac_acc__EncryptVerify_spec__1_#in~msg#1|) (= |outgoing_incoming_~msg#1| |outgoing_verify_#in~msg#1|) (<= |outgoing_getClientId_~retValue_acc~42#1| 2147483647) (<= ~__ste_email_isSignatureVerified1~0 0) (<= 1 |outgoing_sign_~client#1|) (= |outgoing_incoming_~msg#1| |outgoing_incoming_#in~msg#1|) (<= 0 (+ |outgoing_getClientId_~retValue_acc~42#1| 2147483648)) (= |outgoing_incoming_~client#1| |outgoing_incoming_#in~client#1|) (= |outgoing_verify_~__utac__ad__arg1~0#1| |outgoing_verify_~msg#1|) (<= |outgoing_sign_~msg#1| 1) (<= ~__ste_email_isSignatureVerified0~0 0) (<= 0 (+ |outgoing_sign_~privkey~0#1| 2147483648)) (<= 0 (+ ~__ste_client_privateKey0~0 2147483648)) (= |outgoing___utac_acc__EncryptVerify_spec__1_~msg#1| |outgoing___utac_acc__EncryptVerify_spec__1_#in~msg#1|) (<= ~__ste_email_from0~0 2147483647) (<= |outgoing_sign_~privkey~0#1| 2147483647) (<= |outgoing_sign_~client#1| 1) (<= 1 |outgoing_~client#1|) (<= 0 ~__ste_email_isSigned1~0) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (<= |outgoing_getClientId_#res#1| 2147483647) (<= 1 |outgoing_outgoing__wrappee__Keys_~client#1|) (<= |outgoing_sign_#in~client#1| 1) (<= |outgoing_getClientPrivateKey_~retValue_acc~35#1| 2147483647) (<= 1 |outgoing_getClientId_~handle#1|) (<= 0 (+ ~__ste_email_signKey0~0 2147483648)) (<= |outgoing_getClientPrivateKey_~handle#1| 1) (<= ~__ste_email_signKey0~0 2147483647) (<= |outgoing_outgoing__wrappee__Keys_~tmp~11#1| 2147483647) (<= 1 |outgoing_mail_#in~msg#1|) (= |outgoing_mail_~msg#1| |outgoing_incoming_#in~msg#1|) (<= ~__ste_client_idCounter0~0 2147483647) (<= ~__ste_email_isSigned0~0 1) (<= 1 |outgoing_outgoing__wrappee__Keys_#in~msg#1|) (<= 0 (+ |outgoing_getClientPrivateKey_~retValue_acc~35#1| 2147483648)) (<= 0 (+ 2147483648 |outgoing_sign_~tmp~14#1|)) (<= 0 ~__ste_email_signKey1~0) (<= ~__ste_email_signKey1~0 0) (<= ~__ste_email_isSigned1~0 0) (<= |outgoing_sign_~tmp~14#1| 2147483647) (<= 0 ~__ste_email_isSignatureVerified1~0) (<= |outgoing_outgoing__wrappee__Keys_~client#1| 1) (<= 1 |outgoing_sign_#in~client#1|) (<= |outgoing_getClientId_#in~handle#1| 1) (<= 1 |outgoing_sign_~msg#1|) (<= 1 |outgoing_~msg#1|) (<= |outgoing_mail_~client#1| 1) (<= 0 ~__ste_email_isSignatureVerified0~0) (<= 1 |outgoing_getClientPrivateKey_#in~handle#1|) (= |outgoing_mail_~tmp~10#1| |outgoing_incoming_#in~client#1|) (<= |outgoing_mail_#in~client#1| 1) (<= |outgoing_outgoing__wrappee__Keys_#in~client#1| 1) (<= |outgoing_sign_#in~msg#1| 1) (<= 1 |outgoing_incoming_~msg#1|) (<= 0 ~__ste_email_isSigned0~0) (<= |outgoing___utac_acc__EncryptVerify_spec__1_~msg#1| 1) (<= |outgoing_~msg#1| 1) (<= |outgoing_outgoing__wrappee__Keys_~msg#1| 1) (<= 0 (+ |outgoing_outgoing__wrappee__Keys_~tmp~11#1| 2147483648)) (<= |outgoing_getClientPrivateKey_#res#1| 2147483647) (<= 1 |outgoing_getClientId_#in~handle#1|) (<= |outgoing_getClientId_~handle#1| 1) (<= 1 |outgoing_sign_#in~msg#1|) (= |outgoing___utac_acc__EncryptVerify_spec__1_~tmp~0#1| 1) (<= |outgoing_~client#1| 1) (<= 0 (+ |outgoing_getClientPrivateKey_#res#1| 2147483648)) (<= 2 |outgoing_verify_#in~client#1|) (<= 2 |outgoing_incoming_#in~client#1|) (= |outgoing_verify_~client#1| |outgoing_verify_#in~client#1|) (<= 1 |outgoing_outgoing__wrappee__Keys_#in~client#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 1 |outgoing_mail_~client#1|) (= |outgoing_verify_~msg#1| |outgoing_verify_#in~msg#1|) (<= |outgoing_verify_~client#1| 2) (<= 1 |outgoing_getClientPrivateKey_~handle#1|) (<= |outgoing_getClientPrivateKey_#in~handle#1| 1) (<= |outgoing_incoming_#in~client#1| 2) (<= |outgoing_outgoing__wrappee__Keys_#in~msg#1| 1)))) [2022-12-14 06:05:18,842 INFO L899 garLoopResultBuilder]: For program point L1525-1(line 1525) no Hoare annotation was computed. [2022-12-14 06:05:18,843 INFO L895 garLoopResultBuilder]: At program point L742(line 742) the Hoare annotation is: false [2022-12-14 06:05:18,843 INFO L899 garLoopResultBuilder]: For program point L1527(lines 1527 1538) no Hoare annotation was computed. [2022-12-14 06:05:18,843 INFO L899 garLoopResultBuilder]: For program point L1544(lines 1544 1558) no Hoare annotation was computed. [2022-12-14 06:05:18,843 INFO L895 garLoopResultBuilder]: At program point L1544-1(lines 1511 1561) the Hoare annotation is: (not (= |outgoing___utac_acc__EncryptVerify_spec__1_~tmp~0#1| 0)) [2022-12-14 06:05:18,843 INFO L899 garLoopResultBuilder]: For program point outgoingErr0ASSERT_VIOLATIONERROR_FUNCTION(line 742) no Hoare annotation was computed. [2022-12-14 06:05:18,847 INFO L895 garLoopResultBuilder]: At program point L1330(line 1330) the Hoare annotation is: (or (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse2 (not (= |old(~__ste_email_from0~0)| 0))) (.cse3 (not (= ~__ste_client_autoResponse2~0 0))) (.cse4 (not (= ~__ste_client_name2~0.base 0))) (.cse5 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse6 (not (= ~rjh~0 2))) (.cse7 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse8 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= ~__ste_Client_counter~0 0))) (.cse11 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse12 (not (= ~bob~0 1))) (.cse13 (not (= ~queued_message~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~queued_client~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse24 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse39 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse40 (not (= ~head~0.offset 0))) (.cse41 (not (= ~__ste_email_id1~0 0))) (.cse42 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse43 (not (= ~__ste_client_outbuffer1~0 0))) (.cse44 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse45 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse47 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse48 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse49 (not (= ~__ste_client_outbuffer3~0 0))) (.cse50 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse51 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse52 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse53 (not (= ~__ste_email_subject0~0.offset 0))) (.cse54 (not (= ~__ste_email_to1~0 0))) (.cse55 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse56 (not (= |#NULL.base| 0))) (.cse57 (not (= ~__ste_email_to0~0 ~rjh~0))) (.cse58 (not (= ~__ste_email_subject1~0.base 0))) (.cse59 (not (= ~__ste_client_autoResponse1~0 0))) (.cse60 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse61 (not (= ~__ste_client_name1~0.offset 0))) (.cse62 (not (= ~__ste_email_body0~0.base 0))) (.cse63 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse64 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse65 (not (= ~__ste_client_name0~0.offset 0))) (.cse66 (not (= 3 ~chuck~0))) (.cse67 (not (<= ~__ste_client_idCounter2~0 3))) (.cse68 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse69 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse70 (not (<= 0 |#StackHeapBarrier|))) (.cse71 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse72 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse73 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse74 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse75 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse76 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse77 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse78 (not (= ~__ste_client_outbuffer2~0 0))) (.cse79 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse80 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse81 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse82 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse83 (not (= ~__ste_client_autoResponse0~0 0))) (.cse84 (not (= ~queue_empty~0 1))) (.cse85 (not (= ~__ste_client_name1~0.base 0))) (.cse86 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse87 (not (= ~head~0.base 0))) (.cse88 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse89 (not (= ~__ste_Email_counter~0 0))) (.cse90 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse91 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse92 (not (= ~__ste_email_subject1~0.offset 0))) (.cse93 (not (= 0 ~__ste_email_subject0~0.base))) (.cse94 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse10 .cse11 .cse12 .cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 (not (= ~__ste_Client_Keyring0_User0~0 0)) .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 (not (= ~__ste_Client_Keyring1_User0~0 0)) .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (= ~__ste_ClientKeyring_size0~0 0)) .cse44 .cse45 .cse46 .cse47 (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) .cse48 .cse49 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) .cse56 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 (not (= ~__ste_ClientKeyring_size2~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 (not (= ~__ste_Client_Keyring2_User0~0 0)) .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 (not (= ~__ste_ClientKeyring_size1~0 0))) (or .cse0 .cse1 (not (<= ~__ste_Client_Keyring0_User0~0 2)) .cse2 (not (<= ~__ste_ClientKeyring_size0~0 2147483647)) .cse3 .cse4 .cse5 .cse6 (not (<= ~__ste_client_privateKey2~0 789)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 (not (<= 0 ~__ste_Client_Keyring0_User0~0)) (not (<= 0 (+ 2147483647 ~__ste_ClientKeyring_size0~0))) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 (not (<= 789 ~__ste_client_privateKey2~0)) .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 (not (<= ~__ste_Client_Keyring0_PublicKey0~0 456)) .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94))) (and (<= 1 |outgoing_outgoing__wrappee__Keys_~msg#1|) (= |outgoing_mail_~msg#1| |outgoing_mail_#in~msg#1|) (<= 0 (+ 2147483648 |outgoing_getClientId_#res#1|)) (<= ~__ste_client_privateKey0~0 2147483647) (<= |outgoing_getClientId_~retValue_acc~42#1| 2147483647) (<= ~__ste_email_isSignatureVerified1~0 0) (<= 1 |outgoing_sign_~client#1|) (<= 0 (+ |outgoing_getClientId_~retValue_acc~42#1| 2147483648)) (= |outgoing_mail_#in~client#1| |outgoing_mail_~client#1|) (<= |outgoing_sign_~msg#1| 1) (<= ~__ste_email_isSignatureVerified0~0 0) (<= 0 (+ |outgoing_sign_~privkey~0#1| 2147483648)) (<= 0 (+ ~__ste_client_privateKey0~0 2147483648)) (<= ~__ste_email_from0~0 2147483647) (<= |outgoing_sign_~privkey~0#1| 2147483647) (<= |outgoing_sign_~client#1| 1) (<= 1 |outgoing_~client#1|) (<= 0 ~__ste_email_isSigned1~0) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (<= |outgoing_getClientId_#res#1| 2147483647) (<= 1 |outgoing_outgoing__wrappee__Keys_~client#1|) (<= |outgoing_sign_#in~client#1| 1) (<= |outgoing_getClientPrivateKey_~retValue_acc~35#1| 2147483647) (<= 1 |outgoing_getClientId_~handle#1|) (<= 0 (+ ~__ste_email_signKey0~0 2147483648)) (<= |outgoing_getClientPrivateKey_~handle#1| 1) (<= ~__ste_email_signKey0~0 2147483647) (<= |outgoing_outgoing__wrappee__Keys_~tmp~11#1| 2147483647) (<= ~__ste_client_idCounter0~0 2147483647) (<= ~__ste_email_isSigned0~0 1) (= |outgoing_outgoing__wrappee__Keys_~msg#1| |outgoing_mail_#in~msg#1|) (<= 1 |outgoing_outgoing__wrappee__Keys_#in~msg#1|) (<= 0 (+ |outgoing_getClientPrivateKey_~retValue_acc~35#1| 2147483648)) (<= 0 (+ 2147483648 |outgoing_sign_~tmp~14#1|)) (<= 0 ~__ste_email_signKey1~0) (<= ~__ste_email_signKey1~0 0) (<= ~__ste_email_isSigned1~0 0) (<= |outgoing_sign_~tmp~14#1| 2147483647) (<= 0 ~__ste_email_isSignatureVerified1~0) (<= |outgoing_outgoing__wrappee__Keys_~client#1| 1) (<= 1 |outgoing_sign_#in~client#1|) (<= |outgoing_getClientId_#in~handle#1| 1) (<= 1 |outgoing_sign_~msg#1|) (<= 1 |outgoing_~msg#1|) (<= 0 ~__ste_email_isSignatureVerified0~0) (<= 1 |outgoing_getClientPrivateKey_#in~handle#1|) (<= |outgoing_outgoing__wrappee__Keys_#in~client#1| 1) (<= |outgoing_sign_#in~msg#1| 1) (<= 0 ~__ste_email_isSigned0~0) (= |outgoing_mail_#in~client#1| |outgoing_outgoing__wrappee__Keys_~client#1|) (<= |outgoing_~msg#1| 1) (<= |outgoing_outgoing__wrappee__Keys_~msg#1| 1) (<= 0 (+ |outgoing_outgoing__wrappee__Keys_~tmp~11#1| 2147483648)) (<= |outgoing_getClientPrivateKey_#res#1| 2147483647) (<= 1 |outgoing_getClientId_#in~handle#1|) (<= |outgoing_getClientId_~handle#1| 1) (<= 1 |outgoing_sign_#in~msg#1|) (<= |outgoing_~client#1| 1) (<= 0 (+ |outgoing_getClientPrivateKey_#res#1| 2147483648)) (<= 1 |outgoing_outgoing__wrappee__Keys_#in~client#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 1 |outgoing_getClientPrivateKey_~handle#1|) (<= |outgoing_getClientPrivateKey_#in~handle#1| 1) (<= |outgoing_outgoing__wrappee__Keys_#in~msg#1| 1))) [2022-12-14 06:05:18,847 INFO L899 garLoopResultBuilder]: For program point L1330-1(line 1330) no Hoare annotation was computed. [2022-12-14 06:05:18,849 INFO L895 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (or (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse2 (not (= |old(~__ste_email_from0~0)| 0))) (.cse3 (not (= ~__ste_client_autoResponse2~0 0))) (.cse4 (not (= ~__ste_client_name2~0.base 0))) (.cse5 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse6 (not (= ~rjh~0 2))) (.cse7 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse8 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= ~__ste_Client_counter~0 0))) (.cse11 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse12 (not (= ~bob~0 1))) (.cse13 (not (= ~queued_message~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~queued_client~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse24 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse39 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse40 (not (= ~head~0.offset 0))) (.cse41 (not (= ~__ste_email_id1~0 0))) (.cse42 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse43 (not (= ~__ste_client_outbuffer1~0 0))) (.cse44 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse45 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse47 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse48 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse49 (not (= ~__ste_client_outbuffer3~0 0))) (.cse50 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse51 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse52 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse53 (not (= ~__ste_email_subject0~0.offset 0))) (.cse54 (not (= ~__ste_email_to1~0 0))) (.cse55 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse56 (not (= |#NULL.base| 0))) (.cse57 (not (= ~__ste_email_to0~0 ~rjh~0))) (.cse58 (not (= ~__ste_email_subject1~0.base 0))) (.cse59 (not (= ~__ste_client_autoResponse1~0 0))) (.cse60 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse61 (not (= ~__ste_client_name1~0.offset 0))) (.cse62 (not (= ~__ste_email_body0~0.base 0))) (.cse63 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse64 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse65 (not (= ~__ste_client_name0~0.offset 0))) (.cse66 (not (= 3 ~chuck~0))) (.cse67 (not (<= ~__ste_client_idCounter2~0 3))) (.cse68 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse69 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse70 (not (<= 0 |#StackHeapBarrier|))) (.cse71 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse72 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse73 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse74 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse75 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse76 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse77 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse78 (not (= ~__ste_client_outbuffer2~0 0))) (.cse79 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse80 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse81 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse82 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse83 (not (= ~__ste_client_autoResponse0~0 0))) (.cse84 (not (= ~queue_empty~0 1))) (.cse85 (not (= ~__ste_client_name1~0.base 0))) (.cse86 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse87 (not (= ~head~0.base 0))) (.cse88 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse89 (not (= ~__ste_Email_counter~0 0))) (.cse90 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse91 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse92 (not (= ~__ste_email_subject1~0.offset 0))) (.cse93 (not (= 0 ~__ste_email_subject0~0.base))) (.cse94 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse10 .cse11 .cse12 .cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 (not (= ~__ste_Client_Keyring0_User0~0 0)) .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 (not (= ~__ste_Client_Keyring1_User0~0 0)) .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (= ~__ste_ClientKeyring_size0~0 0)) .cse44 .cse45 .cse46 .cse47 (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) .cse48 .cse49 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) .cse56 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 (not (= ~__ste_ClientKeyring_size2~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 (not (= ~__ste_Client_Keyring2_User0~0 0)) .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 (not (= ~__ste_ClientKeyring_size1~0 0))) (or .cse0 .cse1 (not (<= ~__ste_Client_Keyring0_User0~0 2)) .cse2 (not (<= ~__ste_ClientKeyring_size0~0 2147483647)) .cse3 .cse4 .cse5 .cse6 (not (<= ~__ste_client_privateKey2~0 789)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 (not (<= 0 ~__ste_Client_Keyring0_User0~0)) (not (<= 0 (+ 2147483647 ~__ste_ClientKeyring_size0~0))) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 (not (<= 789 ~__ste_client_privateKey2~0)) .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 (not (<= ~__ste_Client_Keyring0_PublicKey0~0 456)) .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94))) (and (= |outgoing_incoming_~client#1| |outgoing_verify_#in~client#1|) (<= 1 |outgoing_outgoing__wrappee__Keys_~msg#1|) (<= 1 |outgoing_mail_#in~client#1|) (<= |outgoing_mail_#in~msg#1| 1) (<= 0 (+ 2147483648 |outgoing_getClientId_#res#1|)) (<= ~__ste_client_privateKey0~0 2147483647) (= |outgoing_verify_~__utac__ad__arg1~0#1| |outgoing___utac_acc__EncryptVerify_spec__1_#in~msg#1|) (= |outgoing_incoming_~msg#1| |outgoing_verify_#in~msg#1|) (<= |outgoing_getClientId_~retValue_acc~42#1| 2147483647) (<= ~__ste_email_isSignatureVerified1~0 0) (<= 1 |outgoing_sign_~client#1|) (<= 1 |outgoing_mail_~msg#1|) (= |outgoing_incoming_~msg#1| |outgoing_incoming_#in~msg#1|) (<= 0 (+ |outgoing_getClientId_~retValue_acc~42#1| 2147483648)) (= |outgoing_incoming_~client#1| |outgoing_incoming_#in~client#1|) (= |outgoing_verify_~__utac__ad__arg1~0#1| |outgoing_verify_~msg#1|) (<= |outgoing_sign_~msg#1| 1) (<= ~__ste_email_isSignatureVerified0~0 0) (<= 0 (+ |outgoing_sign_~privkey~0#1| 2147483648)) (<= 0 (+ ~__ste_client_privateKey0~0 2147483648)) (= |outgoing___utac_acc__EncryptVerify_spec__1_~msg#1| |outgoing___utac_acc__EncryptVerify_spec__1_#in~msg#1|) (<= ~__ste_email_from0~0 2147483647) (<= |outgoing_sign_~privkey~0#1| 2147483647) (<= |outgoing_sign_~client#1| 1) (<= 1 |outgoing_~client#1|) (<= 0 ~__ste_email_isSigned1~0) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (<= |outgoing_getClientId_#res#1| 2147483647) (<= 1 |outgoing_outgoing__wrappee__Keys_~client#1|) (<= |outgoing_sign_#in~client#1| 1) (<= |outgoing_getClientPrivateKey_~retValue_acc~35#1| 2147483647) (<= 1 |outgoing_getClientId_~handle#1|) (<= 0 (+ ~__ste_email_signKey0~0 2147483648)) (<= |outgoing_getClientPrivateKey_~handle#1| 1) (<= ~__ste_email_signKey0~0 2147483647) (<= |outgoing_outgoing__wrappee__Keys_~tmp~11#1| 2147483647) (<= 1 |outgoing_mail_#in~msg#1|) (= |outgoing_mail_~msg#1| |outgoing_incoming_#in~msg#1|) (<= ~__ste_client_idCounter0~0 2147483647) (<= ~__ste_email_isSigned0~0 1) (<= 1 |outgoing_outgoing__wrappee__Keys_#in~msg#1|) (<= 0 (+ |outgoing_getClientPrivateKey_~retValue_acc~35#1| 2147483648)) (<= 0 (+ 2147483648 |outgoing_sign_~tmp~14#1|)) (<= 0 ~__ste_email_signKey1~0) (<= ~__ste_email_signKey1~0 0) (<= ~__ste_email_isSigned1~0 0) (<= |outgoing_mail_~tmp~10#1| 2) (<= |outgoing_sign_~tmp~14#1| 2147483647) (<= 0 ~__ste_email_isSignatureVerified1~0) (<= |outgoing_outgoing__wrappee__Keys_~client#1| 1) (<= 1 |outgoing_sign_#in~client#1|) (<= |outgoing_getClientId_#in~handle#1| 1) (<= 1 |outgoing_sign_~msg#1|) (<= 1 |outgoing_~msg#1|) (<= |outgoing_mail_~client#1| 1) (<= 2 |outgoing_mail_~tmp~10#1|) (<= 0 ~__ste_email_isSignatureVerified0~0) (<= |outgoing_mail_~msg#1| 1) (<= 1 |outgoing_getClientPrivateKey_#in~handle#1|) (= |outgoing_mail_~tmp~10#1| |outgoing_incoming_#in~client#1|) (<= |outgoing_mail_#in~client#1| 1) (<= |outgoing_outgoing__wrappee__Keys_#in~client#1| 1) (<= |outgoing_sign_#in~msg#1| 1) (<= 0 ~__ste_email_isSigned0~0) (<= |outgoing_~msg#1| 1) (<= |outgoing_outgoing__wrappee__Keys_~msg#1| 1) (<= 0 (+ |outgoing_outgoing__wrappee__Keys_~tmp~11#1| 2147483648)) (<= |outgoing_getClientPrivateKey_#res#1| 2147483647) (<= 1 |outgoing_getClientId_#in~handle#1|) (<= |outgoing_getClientId_~handle#1| 1) (<= 1 |outgoing_sign_#in~msg#1|) (<= |outgoing_~client#1| 1) (<= 0 (+ |outgoing_getClientPrivateKey_#res#1| 2147483648)) (= |outgoing_verify_~client#1| |outgoing_verify_#in~client#1|) (<= 1 |outgoing_outgoing__wrappee__Keys_#in~client#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 1 |outgoing_mail_~client#1|) (= |outgoing_verify_~msg#1| |outgoing_verify_#in~msg#1|) (<= 1 |outgoing_getClientPrivateKey_~handle#1|) (<= |outgoing_getClientPrivateKey_#in~handle#1| 1) (<= |outgoing_outgoing__wrappee__Keys_#in~msg#1| 1))) [2022-12-14 06:05:18,849 INFO L899 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2022-12-14 06:05:18,852 INFO L895 garLoopResultBuilder]: At program point L1529(line 1529) the Hoare annotation is: (and (not (= |outgoing___utac_acc__EncryptVerify_spec__1_~tmp~0#1| 0)) (or (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse2 (not (= |old(~__ste_email_from0~0)| 0))) (.cse3 (not (= ~__ste_client_autoResponse2~0 0))) (.cse4 (not (= ~__ste_client_name2~0.base 0))) (.cse5 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse6 (not (= ~rjh~0 2))) (.cse7 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse8 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= ~__ste_Client_counter~0 0))) (.cse11 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse12 (not (= ~bob~0 1))) (.cse13 (not (= ~queued_message~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~queued_client~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse24 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse39 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse40 (not (= ~head~0.offset 0))) (.cse41 (not (= ~__ste_email_id1~0 0))) (.cse42 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse43 (not (= ~__ste_client_outbuffer1~0 0))) (.cse44 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse45 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse47 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse48 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse49 (not (= ~__ste_client_outbuffer3~0 0))) (.cse50 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse51 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse52 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse53 (not (= ~__ste_email_subject0~0.offset 0))) (.cse54 (not (= ~__ste_email_to1~0 0))) (.cse55 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse56 (not (= |#NULL.base| 0))) (.cse57 (not (= ~__ste_email_to0~0 ~rjh~0))) (.cse58 (not (= ~__ste_email_subject1~0.base 0))) (.cse59 (not (= ~__ste_client_autoResponse1~0 0))) (.cse60 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse61 (not (= ~__ste_client_name1~0.offset 0))) (.cse62 (not (= ~__ste_email_body0~0.base 0))) (.cse63 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse64 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse65 (not (= ~__ste_client_name0~0.offset 0))) (.cse66 (not (= 3 ~chuck~0))) (.cse67 (not (<= ~__ste_client_idCounter2~0 3))) (.cse68 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse69 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse70 (not (<= 0 |#StackHeapBarrier|))) (.cse71 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse72 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse73 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse74 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse75 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse76 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse77 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse78 (not (= ~__ste_client_outbuffer2~0 0))) (.cse79 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse80 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse81 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse82 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse83 (not (= ~__ste_client_autoResponse0~0 0))) (.cse84 (not (= ~queue_empty~0 1))) (.cse85 (not (= ~__ste_client_name1~0.base 0))) (.cse86 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse87 (not (= ~head~0.base 0))) (.cse88 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse89 (not (= ~__ste_Email_counter~0 0))) (.cse90 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse91 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse92 (not (= ~__ste_email_subject1~0.offset 0))) (.cse93 (not (= 0 ~__ste_email_subject0~0.base))) (.cse94 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse10 .cse11 .cse12 .cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 (not (= ~__ste_Client_Keyring0_User0~0 0)) .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 (not (= ~__ste_Client_Keyring1_User0~0 0)) .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (= ~__ste_ClientKeyring_size0~0 0)) .cse44 .cse45 .cse46 .cse47 (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) .cse48 .cse49 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) .cse56 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 (not (= ~__ste_ClientKeyring_size2~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 (not (= ~__ste_Client_Keyring2_User0~0 0)) .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 (not (= ~__ste_ClientKeyring_size1~0 0))) (or .cse0 .cse1 (not (<= ~__ste_Client_Keyring0_User0~0 2)) .cse2 (not (<= ~__ste_ClientKeyring_size0~0 2147483647)) .cse3 .cse4 .cse5 .cse6 (not (<= ~__ste_client_privateKey2~0 789)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 (not (<= 0 ~__ste_Client_Keyring0_User0~0)) (not (<= 0 (+ 2147483647 ~__ste_ClientKeyring_size0~0))) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 (not (<= 789 ~__ste_client_privateKey2~0)) .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 (not (<= ~__ste_Client_Keyring0_PublicKey0~0 456)) .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94))) (and (<= 1 |outgoing_outgoing__wrappee__Keys_~msg#1|) (<= 1 |outgoing_mail_#in~client#1|) (<= |outgoing_mail_#in~msg#1| 1) (<= 0 (+ 2147483648 |outgoing_getClientId_#res#1|)) (<= ~__ste_client_privateKey0~0 2147483647) (= |outgoing_verify_~__utac__ad__arg1~0#1| |outgoing___utac_acc__EncryptVerify_spec__1_#in~msg#1|) (= |outgoing_incoming_~msg#1| |outgoing_verify_#in~msg#1|) (<= |outgoing_getClientId_~retValue_acc~42#1| 2147483647) (<= ~__ste_email_isSignatureVerified1~0 0) (<= 1 |outgoing_sign_~client#1|) (= |outgoing_incoming_~msg#1| |outgoing_incoming_#in~msg#1|) (<= 0 (+ |outgoing_getClientId_~retValue_acc~42#1| 2147483648)) (= |outgoing_incoming_~client#1| |outgoing_incoming_#in~client#1|) (= |outgoing_verify_~__utac__ad__arg1~0#1| |outgoing_verify_~msg#1|) (<= |outgoing_sign_~msg#1| 1) (<= ~__ste_email_isSignatureVerified0~0 0) (<= 0 (+ |outgoing_sign_~privkey~0#1| 2147483648)) (<= 0 (+ ~__ste_client_privateKey0~0 2147483648)) (= |outgoing___utac_acc__EncryptVerify_spec__1_~msg#1| |outgoing___utac_acc__EncryptVerify_spec__1_#in~msg#1|) (<= ~__ste_email_from0~0 2147483647) (<= |outgoing_sign_~privkey~0#1| 2147483647) (<= |outgoing_sign_~client#1| 1) (<= 1 |outgoing_~client#1|) (<= 0 ~__ste_email_isSigned1~0) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (<= |outgoing_getClientId_#res#1| 2147483647) (<= 1 |outgoing_outgoing__wrappee__Keys_~client#1|) (<= |outgoing_sign_#in~client#1| 1) (<= |outgoing_getClientPrivateKey_~retValue_acc~35#1| 2147483647) (<= 1 |outgoing_getClientId_~handle#1|) (<= 0 (+ ~__ste_email_signKey0~0 2147483648)) (<= |outgoing_getClientPrivateKey_~handle#1| 1) (<= ~__ste_email_signKey0~0 2147483647) (<= |outgoing_outgoing__wrappee__Keys_~tmp~11#1| 2147483647) (<= 1 |outgoing_mail_#in~msg#1|) (= |outgoing_mail_~msg#1| |outgoing_incoming_#in~msg#1|) (<= ~__ste_client_idCounter0~0 2147483647) (<= ~__ste_email_isSigned0~0 1) (<= 1 |outgoing_outgoing__wrappee__Keys_#in~msg#1|) (<= 0 (+ |outgoing_getClientPrivateKey_~retValue_acc~35#1| 2147483648)) (<= 0 (+ 2147483648 |outgoing_sign_~tmp~14#1|)) (<= 0 ~__ste_email_signKey1~0) (<= ~__ste_email_signKey1~0 0) (<= ~__ste_email_isSigned1~0 0) (<= |outgoing_sign_~tmp~14#1| 2147483647) (<= 0 ~__ste_email_isSignatureVerified1~0) (<= |outgoing_outgoing__wrappee__Keys_~client#1| 1) (<= 1 |outgoing_sign_#in~client#1|) (<= |outgoing_getClientId_#in~handle#1| 1) (<= 1 |outgoing_sign_~msg#1|) (<= 1 |outgoing_~msg#1|) (<= |outgoing_mail_~client#1| 1) (<= 0 ~__ste_email_isSignatureVerified0~0) (<= 1 |outgoing_getClientPrivateKey_#in~handle#1|) (= |outgoing_mail_~tmp~10#1| |outgoing_incoming_#in~client#1|) (<= |outgoing_mail_#in~client#1| 1) (<= |outgoing_outgoing__wrappee__Keys_#in~client#1| 1) (<= |outgoing_sign_#in~msg#1| 1) (<= 1 |outgoing_incoming_~msg#1|) (<= 0 ~__ste_email_isSigned0~0) (<= |outgoing___utac_acc__EncryptVerify_spec__1_~msg#1| 1) (<= |outgoing_~msg#1| 1) (<= |outgoing_outgoing__wrappee__Keys_~msg#1| 1) (<= 0 (+ |outgoing_outgoing__wrappee__Keys_~tmp~11#1| 2147483648)) (<= |outgoing_getClientPrivateKey_#res#1| 2147483647) (<= 1 |outgoing_getClientId_#in~handle#1|) (<= |outgoing_getClientId_~handle#1| 1) (<= 1 |outgoing_sign_#in~msg#1|) (= |outgoing___utac_acc__EncryptVerify_spec__1_~tmp~0#1| 1) (<= |outgoing_~client#1| 1) (<= 0 (+ |outgoing_getClientPrivateKey_#res#1| 2147483648)) (<= 2 |outgoing_verify_#in~client#1|) (<= 2 |outgoing_incoming_#in~client#1|) (= |outgoing_verify_~client#1| |outgoing_verify_#in~client#1|) (<= 1 |outgoing_outgoing__wrappee__Keys_#in~client#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 1 |outgoing_mail_~client#1|) (= |outgoing_verify_~msg#1| |outgoing_verify_#in~msg#1|) (<= |outgoing_verify_~client#1| 2) (<= 1 |outgoing_getClientPrivateKey_~handle#1|) (<= |outgoing_getClientPrivateKey_#in~handle#1| 1) (<= |outgoing_incoming_#in~client#1| 2) (<= |outgoing_outgoing__wrappee__Keys_#in~msg#1| 1)))) [2022-12-14 06:05:18,852 INFO L899 garLoopResultBuilder]: For program point L1529-1(line 1529) no Hoare annotation was computed. [2022-12-14 06:05:18,852 INFO L899 garLoopResultBuilder]: For program point outgoingEXIT(lines 1348 1358) no Hoare annotation was computed. [2022-12-14 06:05:18,853 INFO L895 garLoopResultBuilder]: At program point L1546(line 1546) the Hoare annotation is: (not (= |outgoing___utac_acc__EncryptVerify_spec__1_~tmp~0#1| 0)) [2022-12-14 06:05:18,853 INFO L895 garLoopResultBuilder]: At program point L1546-1(line 1546) the Hoare annotation is: (not (= |outgoing___utac_acc__EncryptVerify_spec__1_~tmp~0#1| 0)) [2022-12-14 06:05:18,853 INFO L899 garLoopResultBuilder]: For program point isSignedEXIT(lines 1084 1102) no Hoare annotation was computed. [2022-12-14 06:05:18,853 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1084 1102) the Hoare annotation is: true [2022-12-14 06:05:18,853 INFO L899 garLoopResultBuilder]: For program point setClientPrivateKeyEXIT(lines 2176 2195) no Hoare annotation was computed. [2022-12-14 06:05:18,853 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 2176 2195) the Hoare annotation is: true [2022-12-14 06:05:18,853 INFO L899 garLoopResultBuilder]: For program point chuckKeyAddEXIT(lines 317 328) no Hoare annotation was computed. [2022-12-14 06:05:18,853 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 317 328) the Hoare annotation is: true [2022-12-14 06:05:18,853 INFO L902 garLoopResultBuilder]: At program point L323(line 323) the Hoare annotation is: true [2022-12-14 06:05:18,853 INFO L899 garLoopResultBuilder]: For program point L322(line 322) no Hoare annotation was computed. [2022-12-14 06:05:18,853 INFO L902 garLoopResultBuilder]: At program point L323-1(line 323) the Hoare annotation is: true [2022-12-14 06:05:18,853 INFO L899 garLoopResultBuilder]: For program point chuckKeyAddFINAL(lines 317 328) no Hoare annotation was computed. [2022-12-14 06:05:18,853 INFO L899 garLoopResultBuilder]: For program point getEmailToEXIT(lines 895 913) no Hoare annotation was computed. [2022-12-14 06:05:18,853 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 895 913) the Hoare annotation is: true [2022-12-14 06:05:18,854 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 2243 2267) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (and (= |old(~__ste_ClientKeyring_size1~0)| ~__ste_ClientKeyring_size1~0) (= |old(~__ste_ClientKeyring_size2~0)| ~__ste_ClientKeyring_size2~0) (= |old(~__ste_ClientKeyring_size0~0)| ~__ste_ClientKeyring_size0~0)) (not (= ~__ste_email_from0~0 0)) (not (= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= ~__ste_client_privateKey2~0 789)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (= ~queued_message~0 0)) (not (<= 0 ~__ste_Client_Keyring0_User0~0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~queued_client~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_email_to0~0 0)) (not (= |createClientKeyringEntry_#in~handle#1| ~bob~0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (<= 789 ~__ste_client_privateKey2~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_email_to1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_client_autoResponse1~0 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_autoResponse0~0 0)) (not (= ~queue_empty~0 1)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_from1~0 0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:05:18,854 INFO L899 garLoopResultBuilder]: For program point createClientKeyringEntryEXIT(lines 2243 2267) no Hoare annotation was computed. [2022-12-14 06:05:18,854 INFO L899 garLoopResultBuilder]: For program point generateKeyPairFINAL(lines 1480 1489) no Hoare annotation was computed. [2022-12-14 06:05:18,854 INFO L902 garLoopResultBuilder]: At program point L1485(line 1485) the Hoare annotation is: true [2022-12-14 06:05:18,854 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1480 1489) the Hoare annotation is: true [2022-12-14 06:05:18,854 INFO L899 garLoopResultBuilder]: For program point generateKeyPairEXIT(lines 1480 1489) no Hoare annotation was computed. [2022-12-14 06:05:18,855 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 2331 2374) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= ~__ste_email_from0~0 0)) (not (= |setClientKeyringUser_#in~index| 0)) (not (<= ~__ste_ClientKeyring_size0~0 2147483647)) (not (= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= ~__ste_client_privateKey2~0 789)) (not (= |setClientKeyringUser_#in~handle| ~bob~0)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~queued_message~0 0)) (not (<= 0 (+ 2147483647 ~__ste_ClientKeyring_size0~0))) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~queued_client~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (<= ~bob~0 1)) (not (= |setClientKeyringUser_#in~value| 2)) (not (= ~__ste_email_signKey1~0 0)) (and (= ~__ste_Client_Keyring0_User1~0 |old(~__ste_Client_Keyring0_User1~0)|) (= |old(~__ste_Client_Keyring2_User1~0)| ~__ste_Client_Keyring2_User1~0) (= ~__ste_Client_Keyring1_User1~0 |old(~__ste_Client_Keyring1_User1~0)|) (= ~__ste_Client_Keyring0_User0~0 |old(~__ste_Client_Keyring0_User0~0)|) (= ~__ste_Client_Keyring1_User0~0 |old(~__ste_Client_Keyring1_User0~0)|) (= |old(~__ste_Client_Keyring2_User0~0)| ~__ste_Client_Keyring2_User0~0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_email_to0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (<= 789 ~__ste_client_privateKey2~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_email_to1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_client_autoResponse1~0 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= 0 |old(~__ste_Client_Keyring0_User0~0)|)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_autoResponse0~0 0)) (not (= ~queue_empty~0 1)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_from1~0 0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:05:18,855 INFO L899 garLoopResultBuilder]: For program point setClientKeyringUserEXIT(lines 2331 2374) no Hoare annotation was computed. [2022-12-14 06:05:18,857 INFO L895 garLoopResultBuilder]: At program point L1300(line 1300) the Hoare annotation is: (or (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse2 (not (= |old(~__ste_email_from0~0)| 0))) (.cse3 (not (= ~__ste_client_autoResponse2~0 0))) (.cse4 (not (= ~__ste_client_name2~0.base 0))) (.cse5 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse6 (not (= ~rjh~0 2))) (.cse7 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse8 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= ~__ste_Client_counter~0 0))) (.cse11 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse12 (not (= ~bob~0 1))) (.cse13 (not (= ~queued_message~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~queued_client~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse24 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= |old(~__ste_email_to0~0)| 0))) (.cse30 (not (= ~__ste_email_body1~0.base 0))) (.cse31 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse32 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse33 (not (= ~__ste_client_outbuffer0~0 0))) (.cse34 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse35 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse36 (not (= ~__ste_email_body1~0.offset 0))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse39 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse40 (not (= ~head~0.offset 0))) (.cse41 (not (= ~__ste_email_id1~0 0))) (.cse42 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse43 (not (= ~__ste_client_outbuffer1~0 0))) (.cse44 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse45 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse46 (not (= ~bob~0 |sendEmail_#in~sender#1|))) (.cse47 (not (= |old(~__ste_email_to1~0)| 0))) (.cse48 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse49 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse50 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse51 (not (= ~__ste_client_outbuffer3~0 0))) (.cse52 (not (= |sendEmail_#in~receiver#1| ~rjh~0))) (.cse53 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse54 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse55 (not (= ~__ste_email_subject0~0.offset 0))) (.cse56 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse57 (not (= |#NULL.base| 0))) (.cse58 (not (= ~__ste_email_subject1~0.base 0))) (.cse59 (not (= ~__ste_client_autoResponse1~0 0))) (.cse60 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse61 (not (= ~__ste_client_name1~0.offset 0))) (.cse62 (not (= ~__ste_email_body0~0.base 0))) (.cse63 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse64 (not (= |old(~__ste_email_from1~0)| 0))) (.cse65 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse66 (not (= ~__ste_client_name0~0.offset 0))) (.cse67 (not (= 3 ~chuck~0))) (.cse68 (not (<= ~__ste_client_idCounter2~0 3))) (.cse69 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse70 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse71 (not (<= 0 |#StackHeapBarrier|))) (.cse72 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse73 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse74 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse75 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse76 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse77 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse78 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse79 (not (= ~__ste_client_outbuffer2~0 0))) (.cse80 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse81 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse83 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse84 (not (= ~__ste_client_autoResponse0~0 0))) (.cse85 (not (= ~queue_empty~0 1))) (.cse86 (not (= ~__ste_client_name1~0.base 0))) (.cse87 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse88 (not (= ~head~0.base 0))) (.cse89 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse90 (not (= ~__ste_Email_counter~0 0))) (.cse91 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse92 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse93 (not (= ~__ste_email_subject1~0.offset 0))) (.cse94 (not (= 0 ~__ste_email_subject0~0.base))) (.cse95 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)))) (and (or .cse0 .cse1 (not (<= ~__ste_Client_Keyring0_User0~0 2)) .cse2 (not (<= ~__ste_ClientKeyring_size0~0 2147483647)) .cse3 .cse4 .cse5 .cse6 (not (<= ~__ste_client_privateKey2~0 789)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 (not (<= 0 ~__ste_Client_Keyring0_User0~0)) (not (<= 0 (+ 2147483647 ~__ste_ClientKeyring_size0~0))) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 (not (<= 789 ~__ste_client_privateKey2~0)) .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 (not (<= ~__ste_Client_Keyring0_PublicKey0~0 456)) .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse10 .cse11 .cse12 .cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 (not (= ~__ste_Client_Keyring0_User0~0 0)) .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 (not (= ~__ste_Client_Keyring1_User0~0 0)) .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (= ~__ste_ClientKeyring_size0~0 0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) .cse50 .cse51 .cse52 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) .cse53 .cse54 .cse55 .cse56 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) .cse57 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) .cse58 .cse59 .cse60 .cse61 .cse62 (not (= ~__ste_ClientKeyring_size2~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 (not (= ~__ste_Client_Keyring2_User0~0 0)) .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 (not (= ~__ste_ClientKeyring_size1~0 0))))) (and (= |sendEmail_createEmail_#in~from#1| 0) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_createEmail_~to#1|) (= ~__ste_email_signKey0~0 |old(~__ste_email_signKey0~0)|) (= |sendEmail_#in~sender#1| |sendEmail_~sender#1|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_~receiver#1|) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= ~__ste_email_isSignatureVerified0~0 |old(~__ste_email_isSignatureVerified0~0)|) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (= ~__ste_email_isSigned1~0 |old(~__ste_email_isSigned1~0)|) (= ~__ste_email_isSignatureVerified1~0 |old(~__ste_email_isSignatureVerified1~0)|) (= ~__ste_email_isSigned0~0 |old(~__ste_email_isSigned0~0)|) (= 1 |sendEmail_createEmail_~msg~0#1|) (= ~__ste_email_signKey1~0 |old(~__ste_email_signKey1~0)|))) [2022-12-14 06:05:18,858 INFO L895 garLoopResultBuilder]: At program point L1300-1(line 1300) the Hoare annotation is: (or (and (= ~__ste_email_signKey0~0 |old(~__ste_email_signKey0~0)|) (<= 0 ~__ste_email_to0~0) (<= 0 ~__ste_email_to1~0) (<= 0 ~__ste_email_from0~0) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |sendEmail_createEmail_~from#1| ~__ste_email_from0~0) (<= ~__ste_email_to1~0 0) (= ~__ste_email_isSignatureVerified0~0 |old(~__ste_email_isSignatureVerified0~0)|) (<= |sendEmail_createEmail_~to#1| 2) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (<= 1 |sendEmail_~sender#1|) (<= |sendEmail_~sender#1| 1) (<= ~__ste_email_from0~0 0) (<= |sendEmail_createEmail_#in~to#1| 2) (= ~__ste_email_isSigned1~0 |old(~__ste_email_isSigned1~0)|) (<= 2 |sendEmail_createEmail_#in~to#1|) (= ~__ste_email_isSignatureVerified1~0 |old(~__ste_email_isSignatureVerified1~0)|) (<= ~__ste_email_to0~0 0) (= ~__ste_email_isSigned0~0 |old(~__ste_email_isSigned0~0)|) (<= 2 |sendEmail_createEmail_~to#1|) (= 1 |sendEmail_createEmail_~msg~0#1|) (= ~__ste_email_signKey1~0 |old(~__ste_email_signKey1~0)|)) (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse2 (not (= |old(~__ste_email_from0~0)| 0))) (.cse3 (not (= ~__ste_client_autoResponse2~0 0))) (.cse4 (not (= ~__ste_client_name2~0.base 0))) (.cse5 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse6 (not (= ~rjh~0 2))) (.cse7 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse8 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= ~__ste_Client_counter~0 0))) (.cse11 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse12 (not (= ~bob~0 1))) (.cse13 (not (= ~queued_message~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~queued_client~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse24 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= |old(~__ste_email_to0~0)| 0))) (.cse30 (not (= ~__ste_email_body1~0.base 0))) (.cse31 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse32 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse33 (not (= ~__ste_client_outbuffer0~0 0))) (.cse34 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse35 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse36 (not (= ~__ste_email_body1~0.offset 0))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse39 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse40 (not (= ~head~0.offset 0))) (.cse41 (not (= ~__ste_email_id1~0 0))) (.cse42 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse43 (not (= ~__ste_client_outbuffer1~0 0))) (.cse44 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse45 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse46 (not (= ~bob~0 |sendEmail_#in~sender#1|))) (.cse47 (not (= |old(~__ste_email_to1~0)| 0))) (.cse48 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse49 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse50 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse51 (not (= ~__ste_client_outbuffer3~0 0))) (.cse52 (not (= |sendEmail_#in~receiver#1| ~rjh~0))) (.cse53 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse54 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse55 (not (= ~__ste_email_subject0~0.offset 0))) (.cse56 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse57 (not (= |#NULL.base| 0))) (.cse58 (not (= ~__ste_email_subject1~0.base 0))) (.cse59 (not (= ~__ste_client_autoResponse1~0 0))) (.cse60 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse61 (not (= ~__ste_client_name1~0.offset 0))) (.cse62 (not (= ~__ste_email_body0~0.base 0))) (.cse63 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse64 (not (= |old(~__ste_email_from1~0)| 0))) (.cse65 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse66 (not (= ~__ste_client_name0~0.offset 0))) (.cse67 (not (= 3 ~chuck~0))) (.cse68 (not (<= ~__ste_client_idCounter2~0 3))) (.cse69 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse70 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse71 (not (<= 0 |#StackHeapBarrier|))) (.cse72 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse73 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse74 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse75 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse76 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse77 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse78 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse79 (not (= ~__ste_client_outbuffer2~0 0))) (.cse80 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse81 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse83 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse84 (not (= ~__ste_client_autoResponse0~0 0))) (.cse85 (not (= ~queue_empty~0 1))) (.cse86 (not (= ~__ste_client_name1~0.base 0))) (.cse87 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse88 (not (= ~head~0.base 0))) (.cse89 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse90 (not (= ~__ste_Email_counter~0 0))) (.cse91 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse92 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse93 (not (= ~__ste_email_subject1~0.offset 0))) (.cse94 (not (= 0 ~__ste_email_subject0~0.base))) (.cse95 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)))) (and (or .cse0 .cse1 (not (<= ~__ste_Client_Keyring0_User0~0 2)) .cse2 (not (<= ~__ste_ClientKeyring_size0~0 2147483647)) .cse3 .cse4 .cse5 .cse6 (not (<= ~__ste_client_privateKey2~0 789)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 (not (<= 0 ~__ste_Client_Keyring0_User0~0)) (not (<= 0 (+ 2147483647 ~__ste_ClientKeyring_size0~0))) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 (not (<= 789 ~__ste_client_privateKey2~0)) .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 (not (<= ~__ste_Client_Keyring0_PublicKey0~0 456)) .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse10 .cse11 .cse12 .cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 (not (= ~__ste_Client_Keyring0_User0~0 0)) .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 (not (= ~__ste_Client_Keyring1_User0~0 0)) .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (= ~__ste_ClientKeyring_size0~0 0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) .cse50 .cse51 .cse52 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) .cse53 .cse54 .cse55 .cse56 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) .cse57 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) .cse58 .cse59 .cse60 .cse61 .cse62 (not (= ~__ste_ClientKeyring_size2~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 (not (= ~__ste_Client_Keyring2_User0~0 0)) .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 (not (= ~__ste_ClientKeyring_size1~0 0)))))) [2022-12-14 06:05:18,858 INFO L899 garLoopResultBuilder]: For program point sendEmailEXIT(lines 1405 1417) no Hoare annotation was computed. [2022-12-14 06:05:18,858 INFO L899 garLoopResultBuilder]: For program point sendEmailFINAL(lines 1405 1417) no Hoare annotation was computed. [2022-12-14 06:05:18,860 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 1405 1417) the Hoare annotation is: (or (and (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_signKey0~0 |old(~__ste_email_signKey0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= ~__ste_email_isSignatureVerified0~0 |old(~__ste_email_isSignatureVerified0~0)|) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= ~__ste_email_isSigned1~0 |old(~__ste_email_isSigned1~0)|) (= ~__ste_email_isSignatureVerified1~0 |old(~__ste_email_isSignatureVerified1~0)|) (= ~__ste_email_isSigned0~0 |old(~__ste_email_isSigned0~0)|) (= ~__ste_email_signKey1~0 |old(~__ste_email_signKey1~0)|)) (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse2 (not (= |old(~__ste_email_from0~0)| 0))) (.cse3 (not (= ~__ste_client_autoResponse2~0 0))) (.cse4 (not (= ~__ste_client_name2~0.base 0))) (.cse5 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse6 (not (= ~rjh~0 2))) (.cse7 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse8 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= ~__ste_Client_counter~0 0))) (.cse11 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse12 (not (= ~bob~0 1))) (.cse13 (not (= ~queued_message~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~queued_client~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse24 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= |old(~__ste_email_to0~0)| 0))) (.cse30 (not (= ~__ste_email_body1~0.base 0))) (.cse31 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse32 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse33 (not (= ~__ste_client_outbuffer0~0 0))) (.cse34 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse35 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse36 (not (= ~__ste_email_body1~0.offset 0))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse39 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse40 (not (= ~head~0.offset 0))) (.cse41 (not (= ~__ste_email_id1~0 0))) (.cse42 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse43 (not (= ~__ste_client_outbuffer1~0 0))) (.cse44 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse45 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse46 (not (= ~bob~0 |sendEmail_#in~sender#1|))) (.cse47 (not (= |old(~__ste_email_to1~0)| 0))) (.cse48 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse49 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse50 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse51 (not (= ~__ste_client_outbuffer3~0 0))) (.cse52 (not (= |sendEmail_#in~receiver#1| ~rjh~0))) (.cse53 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse54 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse55 (not (= ~__ste_email_subject0~0.offset 0))) (.cse56 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse57 (not (= |#NULL.base| 0))) (.cse58 (not (= ~__ste_email_subject1~0.base 0))) (.cse59 (not (= ~__ste_client_autoResponse1~0 0))) (.cse60 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse61 (not (= ~__ste_client_name1~0.offset 0))) (.cse62 (not (= ~__ste_email_body0~0.base 0))) (.cse63 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse64 (not (= |old(~__ste_email_from1~0)| 0))) (.cse65 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse66 (not (= ~__ste_client_name0~0.offset 0))) (.cse67 (not (= 3 ~chuck~0))) (.cse68 (not (<= ~__ste_client_idCounter2~0 3))) (.cse69 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse70 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse71 (not (<= 0 |#StackHeapBarrier|))) (.cse72 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse73 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse74 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse75 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse76 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse77 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse78 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse79 (not (= ~__ste_client_outbuffer2~0 0))) (.cse80 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse81 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse83 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse84 (not (= ~__ste_client_autoResponse0~0 0))) (.cse85 (not (= ~queue_empty~0 1))) (.cse86 (not (= ~__ste_client_name1~0.base 0))) (.cse87 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse88 (not (= ~head~0.base 0))) (.cse89 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse90 (not (= ~__ste_Email_counter~0 0))) (.cse91 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse92 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse93 (not (= ~__ste_email_subject1~0.offset 0))) (.cse94 (not (= 0 ~__ste_email_subject0~0.base))) (.cse95 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)))) (and (or .cse0 .cse1 (not (<= ~__ste_Client_Keyring0_User0~0 2)) .cse2 (not (<= ~__ste_ClientKeyring_size0~0 2147483647)) .cse3 .cse4 .cse5 .cse6 (not (<= ~__ste_client_privateKey2~0 789)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 (not (<= 0 ~__ste_Client_Keyring0_User0~0)) (not (<= 0 (+ 2147483647 ~__ste_ClientKeyring_size0~0))) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 (not (<= 789 ~__ste_client_privateKey2~0)) .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 (not (<= ~__ste_Client_Keyring0_PublicKey0~0 456)) .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse10 .cse11 .cse12 .cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 (not (= ~__ste_Client_Keyring0_User0~0 0)) .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 (not (= ~__ste_Client_Keyring1_User0~0 0)) .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (= ~__ste_ClientKeyring_size0~0 0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) .cse50 .cse51 .cse52 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) .cse53 .cse54 .cse55 .cse56 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) .cse57 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) .cse58 .cse59 .cse60 .cse61 .cse62 (not (= ~__ste_ClientKeyring_size2~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 (not (= ~__ste_Client_Keyring2_User0~0 0)) .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 (not (= ~__ste_ClientKeyring_size1~0 0)))))) [2022-12-14 06:05:18,861 INFO L895 garLoopResultBuilder]: At program point L1413(line 1413) the Hoare annotation is: (or (and (= |sendEmail_setEmailTo_#in~handle#1| |sendEmail_createEmail_~msg~0#1|) (= |sendEmail_setEmailTo_~handle#1| |sendEmail_setEmailTo_#in~handle#1|) (= |sendEmail_createEmail_~to#1| |sendEmail_setEmailTo_#in~value#1|) (= ~__ste_email_signKey0~0 |old(~__ste_email_signKey0~0)|) (= |sendEmail_createEmail_~retValue_acc~20#1| |sendEmail_createEmail_~msg~0#1|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (<= 0 ~__ste_email_from0~0) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |sendEmail_createEmail_~from#1| ~__ste_email_from0~0) (= ~__ste_email_isSignatureVerified0~0 |old(~__ste_email_isSignatureVerified0~0)|) (= |sendEmail_~email~0#1| |sendEmail_~tmp~13#1|) (<= |sendEmail_createEmail_~to#1| 2) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (<= 1 |sendEmail_~sender#1|) (= |sendEmail_createEmail_#res#1| |sendEmail_~tmp~13#1|) (<= |sendEmail_~sender#1| 1) (<= ~__ste_email_from0~0 0) (<= |sendEmail_createEmail_#in~to#1| 2) (= ~__ste_email_isSigned1~0 |old(~__ste_email_isSigned1~0)|) (<= 2 |sendEmail_createEmail_#in~to#1|) (= ~__ste_email_isSignatureVerified1~0 |old(~__ste_email_isSignatureVerified1~0)|) (= |sendEmail_createEmail_#res#1| |sendEmail_createEmail_~retValue_acc~20#1|) (= ~__ste_email_to0~0 |sendEmail_setEmailTo_~value#1|) (= ~__ste_email_isSigned0~0 |old(~__ste_email_isSigned0~0)|) (= |sendEmail_setEmailTo_~value#1| |sendEmail_setEmailTo_#in~value#1|) (<= 2 |sendEmail_createEmail_~to#1|) (= 1 |sendEmail_createEmail_~msg~0#1|) (= ~__ste_email_signKey1~0 |old(~__ste_email_signKey1~0)|)) (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse2 (not (= |old(~__ste_email_from0~0)| 0))) (.cse3 (not (= ~__ste_client_autoResponse2~0 0))) (.cse4 (not (= ~__ste_client_name2~0.base 0))) (.cse5 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse6 (not (= ~rjh~0 2))) (.cse7 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse8 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= ~__ste_Client_counter~0 0))) (.cse11 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse12 (not (= ~bob~0 1))) (.cse13 (not (= ~queued_message~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~queued_client~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse24 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= |old(~__ste_email_to0~0)| 0))) (.cse30 (not (= ~__ste_email_body1~0.base 0))) (.cse31 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse32 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse33 (not (= ~__ste_client_outbuffer0~0 0))) (.cse34 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse35 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse36 (not (= ~__ste_email_body1~0.offset 0))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse39 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse40 (not (= ~head~0.offset 0))) (.cse41 (not (= ~__ste_email_id1~0 0))) (.cse42 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse43 (not (= ~__ste_client_outbuffer1~0 0))) (.cse44 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse45 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse46 (not (= ~bob~0 |sendEmail_#in~sender#1|))) (.cse47 (not (= |old(~__ste_email_to1~0)| 0))) (.cse48 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse49 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse50 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse51 (not (= ~__ste_client_outbuffer3~0 0))) (.cse52 (not (= |sendEmail_#in~receiver#1| ~rjh~0))) (.cse53 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse54 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse55 (not (= ~__ste_email_subject0~0.offset 0))) (.cse56 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse57 (not (= |#NULL.base| 0))) (.cse58 (not (= ~__ste_email_subject1~0.base 0))) (.cse59 (not (= ~__ste_client_autoResponse1~0 0))) (.cse60 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse61 (not (= ~__ste_client_name1~0.offset 0))) (.cse62 (not (= ~__ste_email_body0~0.base 0))) (.cse63 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse64 (not (= |old(~__ste_email_from1~0)| 0))) (.cse65 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse66 (not (= ~__ste_client_name0~0.offset 0))) (.cse67 (not (= 3 ~chuck~0))) (.cse68 (not (<= ~__ste_client_idCounter2~0 3))) (.cse69 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse70 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse71 (not (<= 0 |#StackHeapBarrier|))) (.cse72 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse73 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse74 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse75 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse76 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse77 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse78 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse79 (not (= ~__ste_client_outbuffer2~0 0))) (.cse80 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse81 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse83 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse84 (not (= ~__ste_client_autoResponse0~0 0))) (.cse85 (not (= ~queue_empty~0 1))) (.cse86 (not (= ~__ste_client_name1~0.base 0))) (.cse87 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse88 (not (= ~head~0.base 0))) (.cse89 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse90 (not (= ~__ste_Email_counter~0 0))) (.cse91 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse92 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse93 (not (= ~__ste_email_subject1~0.offset 0))) (.cse94 (not (= 0 ~__ste_email_subject0~0.base))) (.cse95 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)))) (and (or .cse0 .cse1 (not (<= ~__ste_Client_Keyring0_User0~0 2)) .cse2 (not (<= ~__ste_ClientKeyring_size0~0 2147483647)) .cse3 .cse4 .cse5 .cse6 (not (<= ~__ste_client_privateKey2~0 789)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 (not (<= 0 ~__ste_Client_Keyring0_User0~0)) (not (<= 0 (+ 2147483647 ~__ste_ClientKeyring_size0~0))) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 (not (<= 789 ~__ste_client_privateKey2~0)) .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 (not (<= ~__ste_Client_Keyring0_PublicKey0~0 456)) .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse10 .cse11 .cse12 .cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 (not (= ~__ste_Client_Keyring0_User0~0 0)) .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 (not (= ~__ste_Client_Keyring1_User0~0 0)) .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (= ~__ste_ClientKeyring_size0~0 0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) .cse50 .cse51 .cse52 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) .cse53 .cse54 .cse55 .cse56 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) .cse57 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) .cse58 .cse59 .cse60 .cse61 .cse62 (not (= ~__ste_ClientKeyring_size2~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 (not (= ~__ste_Client_Keyring2_User0~0 0)) .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 (not (= ~__ste_ClientKeyring_size1~0 0)))))) [2022-12-14 06:05:18,861 INFO L899 garLoopResultBuilder]: For program point setEmailFromEXIT(lines 877 892) no Hoare annotation was computed. [2022-12-14 06:05:18,865 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 877 892) the Hoare annotation is: (or (let ((.cse0 (not (<= 0 ~queued_client~0))) (.cse1 (not (<= 0 ~__ste_email_subject0~0.offset))) (.cse29 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse2 (not (<= |setEmailFrom_#in~value| 2147483647))) (.cse3 (not (<= 0 |old(~__ste_email_from0~0)|))) (.cse4 (not (<= ~__ste_email_signKey1~0 0))) (.cse5 (not (<= ~__SELECTED_FEATURE_Verify~0 0))) (.cse6 (not (<= 0 ~head~0.base))) (.cse30 (not (= ~__ste_client_name2~0.base 0))) (.cse31 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (<= 0 ~__ste_client_forwardReceiver1~0))) (.cse32 (not (= ~__ste_Client_counter~0 0))) (.cse8 (not (<= 0 ~__ste_email_to0~0))) (.cse33 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse9 (not (<= 0 ~__ste_email_encryptionKey0~0))) (.cse34 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse10 (not (<= ~__ste_email_to0~0 2))) (.cse11 (not (<= ~head~0.base 0))) (.cse35 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse12 (not (<= ~bob~0 1))) (.cse13 (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0))) (.cse14 (not (<= ~__ste_email_isSigned0~0 1))) (.cse36 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse15 (not (<= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse37 (not (= ~__ste_email_body1~0.base 0))) (.cse38 (not (= |setEmailFrom_#in~handle| 1))) (.cse39 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse40 (not (= ~__ste_email_body0~0.offset 0))) (.cse16 (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0))) (.cse17 (not (<= 1 ~bob~0))) (.cse41 (not (= ~head~0.offset 0))) (.cse18 (not (<= ~__ste_client_forwardReceiver3~0 0))) (.cse42 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse19 (not (<= 0 ~__ste_email_signKey1~0))) (.cse20 (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0))) (.cse21 (not (<= 0 (+ |setEmailFrom_#in~value| 2147483648)))) (.cse22 (not (<= 0 ~__ste_email_isSigned0~0))) (.cse23 (not (<= 0 ~__ste_client_autoResponse2~0))) (.cse43 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse24 (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse44 (not (= ~__ste_client_outbuffer3~0 0))) (.cse25 (not (<= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse45 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse26 (not (<= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse46 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse27 (not (<= 0 ~__ste_client_forwardReceiver2~0))) (.cse28 (not (<= ~__ste_email_subject0~0.offset 0))) (.cse47 (not (= |#NULL.base| 0))) (.cse60 (not (<= ~__ste_Client_AddressBook0_Address2~0 0))) (.cse61 (not (<= 0 ~__SELECTED_FEATURE_Verify~0))) (.cse62 (not (<= 0 (+ ~__ste_email_signKey0~0 2147483648)))) (.cse63 (not (<= 0 ~__ste_client_forwardReceiver3~0))) (.cse48 (not (= ~__ste_email_isSignatureVerified1~0 0))) (.cse49 (not (= ~__ste_email_subject1~0.base 0))) (.cse64 (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0))) (.cse50 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse51 (not (= ~__ste_client_name1~0.offset 0))) (.cse65 (not (<= ~__ste_client_forwardReceiver2~0 0))) (.cse52 (not (= ~__ste_email_body0~0.base 0))) (.cse53 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse66 (not (<= ~__ste_Client_AddressBook0_Address0~0 0))) (.cse67 (not (<= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse68 (not (<= ~__ste_client_idCounter2~0 3))) (.cse54 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse69 (not (<= 0 |#StackHeapBarrier|))) (.cse70 (not (<= |old(~__ste_email_from0~0)| 0))) (.cse71 (not (<= ~__ste_client_forwardReceiver1~0 0))) (.cse72 (not (<= ~__ste_client_autoResponse2~0 0))) (.cse73 (not (<= ~queued_client~0 0))) (.cse74 (not (<= ~__ste_email_encryptionKey0~0 0))) (.cse55 (not (= ~__ste_client_outbuffer2~0 0))) (.cse75 (not (<= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse56 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse76 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse77 (not (<= ~__ste_email_signKey0~0 2147483647))) (.cse57 (not (= ~__ste_email_subject1~0.offset 0))) (.cse58 (not (= 0 ~__ste_email_subject0~0.base))) (.cse59 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0)))) (and (or .cse0 .cse1 (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= ~__ste_email_isEncrypted1~0 0)) .cse2 (not (<= ~__ste_Client_Keyring0_User0~0 2)) .cse3 (not (<= ~__ste_ClientKeyring_size0~0 2147483647)) .cse4 .cse5 .cse6 (not (<= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= ~__ste_client_privateKey2~0 789)) (not (<= 0 |#NULL.offset|)) .cse7 (not (<= ~queued_message~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (<= 3 ~chuck~0)) (not (<= ~__ste_ClientAddressBook_size1~0 0)) (not (<= 0 ~__ste_Client_Keyring0_User0~0)) (not (<= 0 (+ 2147483647 ~__ste_ClientKeyring_size0~0))) (not (<= 0 ~__ste_email_body1~0.offset)) .cse8 .cse9 (not (<= 0 ~__ste_Client_Keyring1_User2~0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (<= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address0~0)) (not (<= ~__ste_client_outbuffer1~0 0)) .cse10 (not (<= 0 ~__GUIDSL_ROOT_PRODUCTION~0)) .cse11 (not (<= 2 ~rjh~0)) .cse12 (not (<= ~__ste_Client_AddressBook2_Address0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AutoResponder~0)) (not (<= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~rjh~0 2)) .cse13 (not (<= 0 ~__ste_email_isSignatureVerified0~0)) .cse14 (not (<= ~__ste_Client_AddressBook2_Alias1~0 0)) .cse15 (not (<= 0 ~__SELECTED_FEATURE_Decrypt~0)) (not (<= 0 ~queued_message~0)) .cse16 (not (<= 0 ~__GUIDSL_NON_TERMINAL_main~0)) (not (<= ~__ste_client_name2~0.offset 0)) .cse17 (not (<= 789 ~__ste_client_privateKey2~0)) (not (<= 0 ~__ste_client_name2~0.offset)) .cse18 .cse19 (not (<= 0 ~__ste_client_outbuffer1~0)) (not (<= 0 ~__ste_ClientAddressBook_size1~0)) (not (<= 0 ~__ste_client_name0~0.base)) .cse20 (not (<= ~__ste_client_outbuffer0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (<= ~__SELECTED_FEATURE_Encrypt~0 0)) .cse21 .cse22 .cse23 (not (<= 1 ~queue_empty~0)) .cse24 (not (<= ~__ste_client_autoResponse0~0 0)) .cse25 (not (<= ~__ste_client_name0~0.base 0)) .cse26 (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) .cse27 .cse28 (not (<= 0 ~__ste_Email_counter~0)) (not (<= 0 ~__SELECTED_FEATURE_Encrypt~0)) (not (<= 0 ~__ste_email_isEncrypted1~0)) (and (or .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 (not (= ~__ste_email_isSigned0~0 1)) .cse57 .cse58 .cse59) (or .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 (not (= ~__ste_email_signKey0~0 0)) .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59)) .cse60 (not (<= ~chuck~0 3)) .cse61 .cse62 .cse63 (not (<= 0 ~__ste_Client_AddressBook2_Alias1~0)) (not (<= ~__ste_Client_Keyring2_User2~0 0)) (not (<= 0 ~__ste_email_isSigned1~0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) .cse64 (not (<= ~__ste_email_isSigned1~0 0)) .cse65 (not (<= 0 ~__ste_Client_Keyring2_User2~0)) (not (<= ~__SELECTED_FEATURE_Keys~0 0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey0~0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~queue_empty~0 1)) .cse66 .cse67 .cse68 (not (<= 0 ~__ste_Client_AddressBook0_Alias1~0)) (not (<= 0 ~__ste_email_id0~0)) .cse69 (not (<= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_ClientAddressBook_size0~0)) (not (<= 0 ~__SELECTED_FEATURE_Keys~0)) .cse70 (not (<= ~__ste_Client_Keyring0_PublicKey0~0 456)) (not (<= ~__GUIDSL_ROOT_PRODUCTION~0 0)) .cse71 (not (<= ~__ste_email_body1~0.offset 0)) (not (<= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) .cse72 .cse73 (not (<= 0 ~__ste_client_name0~0.offset)) (not (<= 0 ~__ste_client_outbuffer0~0)) (not (<= 0 ~__ste_client_autoResponse1~0)) .cse74 (not (<= 0 ~__ste_client_autoResponse0~0)) (not (<= ~__ste_email_to1~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (<= ~__ste_Email_counter~0 0)) (not (<= ~__GUIDSL_NON_TERMINAL_main~0 0)) .cse75 (not (<= ~__ste_client_autoResponse1~0 0)) (not (<= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_Client_Keyring2_PublicKey2~0)) (not (<= ~__ste_email_id0~0 0)) .cse76 (not (<= 0 ~__ste_email_isEncrypted0~0)) .cse77 (not (<= 0 ~__ste_email_to1~0))) (or .cse0 .cse1 .cse29 .cse2 .cse3 .cse4 .cse5 .cse6 .cse30 .cse31 (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= |#NULL.offset| 0)) (not (<= ~__ste_client_privateKey1~0 0)) .cse7 (not (<= 0 ~__ste_client_privateKey1~0)) .cse32 (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~queued_message~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) .cse8 (not (= ~__ste_client_name2~0.offset 0)) .cse33 (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) .cse9 (not (= ~__ste_email_id0~0 0)) (not (<= ~__ste_ClientKeyring_size0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) .cse34 .cse10 .cse11 .cse35 (not (= ~__ste_Client_Keyring0_User0~0 0)) .cse12 (not (<= 0 ~__ste_ClientKeyring_size1~0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) .cse13 .cse14 .cse36 .cse15 .cse37 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) .cse38 (not (= ~__ste_client_outbuffer0~0 0)) .cse39 (not (= ~__ste_email_body1~0.offset 0)) .cse40 (not (= ~__ste_Client_Keyring1_User0~0 0)) .cse16 (not (= ~__ste_email_isEncrypted1~0 0)) .cse17 .cse41 (not (= ~__ste_email_id1~0 0)) (not (<= 0 ~__ste_Client_Keyring2_User1~0)) (not (= ~__ste_client_outbuffer1~0 0)) .cse18 .cse42 .cse19 (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) .cse20 (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) .cse21 .cse22 .cse23 .cse43 .cse24 .cse44 .cse25 (not (<= ~__ste_ClientKeyring_size1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) .cse45 .cse26 .cse46 .cse27 .cse28 (not (= ~__ste_email_to1~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) .cse47 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (<= 0 ~__ste_ClientKeyring_size0~0)) .cse60 .cse61 .cse62 (not (<= ~__ste_Client_Keyring2_User1~0 0)) .cse63 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) .cse48 .cse49 (not (= ~__ste_client_autoResponse1~0 0)) .cse64 .cse50 .cse51 .cse65 .cse52 (not (= ~__ste_ClientKeyring_size2~0 0)) .cse53 (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) .cse66 (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) .cse67 .cse68 .cse54 .cse69 (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) .cse70 .cse71 .cse72 (not (= ~__ste_ClientAddressBook_size0~0 0)) .cse73 (not (= ~__ste_Client_Keyring1_User2~0 0)) .cse74 .cse55 (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) .cse75 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_autoResponse0~0 0)) (not (= ~queue_empty~0 1)) (not (= ~__ste_client_name1~0.base 0)) .cse56 (not (= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) .cse76 .cse77 .cse57 .cse58 .cse59))) (and (<= 0 ~__ste_email_from0~0) (<= ~__ste_email_from0~0 0))) [2022-12-14 06:05:18,865 INFO L895 garLoopResultBuilder]: At program point L366(line 366) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,865 INFO L895 garLoopResultBuilder]: At program point L366-1(lines 361 370) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,865 INFO L895 garLoopResultBuilder]: At program point L267(line 267) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~2#1| 1) (= |ULTIMATE.start_test_~op1~0#1| 0)) [2022-12-14 06:05:18,865 INFO L899 garLoopResultBuilder]: For program point L267-1(line 267) no Hoare annotation was computed. [2022-12-14 06:05:18,865 INFO L899 garLoopResultBuilder]: For program point L2761(lines 2761 2768) no Hoare annotation was computed. [2022-12-14 06:05:18,865 INFO L899 garLoopResultBuilder]: For program point L2679(lines 2679 2834) no Hoare annotation was computed. [2022-12-14 06:05:18,866 INFO L895 garLoopResultBuilder]: At program point L334(line 334) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,866 INFO L899 garLoopResultBuilder]: For program point L334-1(line 334) no Hoare annotation was computed. [2022-12-14 06:05:18,866 INFO L895 garLoopResultBuilder]: At program point L268(line 268) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~2#1| 1) (= |ULTIMATE.start_test_~op1~0#1| 0)) [2022-12-14 06:05:18,866 INFO L895 garLoopResultBuilder]: At program point L268-1(line 268) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~2#1| 1) (= |ULTIMATE.start_test_~op1~0#1| 0)) [2022-12-14 06:05:18,866 INFO L895 garLoopResultBuilder]: At program point $Ultimate##90(lines 2771 2827) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,866 INFO L895 garLoopResultBuilder]: At program point L335(line 335) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,866 INFO L895 garLoopResultBuilder]: At program point L335-1(line 335) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,866 INFO L895 garLoopResultBuilder]: At program point L269(line 269) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~2#1| 1) (= |ULTIMATE.start_test_~op1~0#1| 0)) [2022-12-14 06:05:18,866 INFO L899 garLoopResultBuilder]: For program point L2697(lines 2697 2701) no Hoare annotation was computed. [2022-12-14 06:05:18,866 INFO L895 garLoopResultBuilder]: At program point $Ultimate##96(lines 2782 2826) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,866 INFO L895 garLoopResultBuilder]: At program point L286(line 286) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,866 INFO L899 garLoopResultBuilder]: For program point L286-1(line 286) no Hoare annotation was computed. [2022-12-14 06:05:18,866 INFO L895 garLoopResultBuilder]: At program point L336(lines 329 340) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,866 INFO L895 garLoopResultBuilder]: At program point $Ultimate##84(lines 2757 2828) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,866 INFO L895 garLoopResultBuilder]: At program point L287(line 287) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,866 INFO L899 garLoopResultBuilder]: For program point L2814(lines 2814 2821) no Hoare annotation was computed. [2022-12-14 06:05:18,866 INFO L895 garLoopResultBuilder]: At program point L287-1(line 287) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,866 INFO L895 garLoopResultBuilder]: At program point $Ultimate##72(lines 2732 2830) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,866 INFO L895 garLoopResultBuilder]: At program point L2814-1(lines 2671 2835) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,867 INFO L895 garLoopResultBuilder]: At program point L155(line 155) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1| 2) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (<= ~__ste_client_idCounter1~0 2) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 6) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 2 ~__ste_client_idCounter1~0) (= ~__ste_client_outbuffer0~0 0) (<= 0 (+ |ULTIMATE.start_main_~retValue_acc~0#1| 2147483648)) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1|) (= |ULTIMATE.start_main_~tmp~2#1| 1) (= ~queue_empty~0 1) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1| 2) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (<= ~__ste_client_privateKey0~0 123) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (= ~head~0.base 0) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1|) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~0#1| 2147483647) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (<= 123 ~__ste_client_privateKey0~0) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |ULTIMATE.start_valid_product_~retValue_acc~5#1| 1) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:05:18,868 INFO L895 garLoopResultBuilder]: At program point L155-1(lines 149 159) the Hoare annotation is: (and (= ~__SELECTED_FEATURE_Sign~0 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1| 2) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (<= ~__ste_client_idCounter1~0 2) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (<= 0 ~__ste_Client_Keyring0_PublicKey2~0) (<= 0 ~__ste_ClientAddressBook_size0~0) (<= 2 ~rjh~0) (<= 0 ~__SELECTED_FEATURE_Encrypt~0) (<= 0 ~__ste_client_autoResponse1~0) (<= 0 ~__ste_client_outbuffer0~0) (<= ~__ste_Client_Keyring2_PublicKey2~0 0) (<= 0 ~__ste_client_outbuffer1~0) (<= 0 ~__ste_ClientAddressBook_size1~0) (<= ~queued_message~0 0) (<= ~__ste_email_isSignatureVerified0~0 0) (<= ~__ste_client_name0~0.base 0) (<= 0 ~__ste_Client_AddressBook0_Alias1~0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (<= ~chuck~0 0) (<= 0 ~__SELECTED_FEATURE_AutoResponder~0) (= ~__ste_email_body0~0.offset 0) (<= ~__SELECTED_FEATURE_Keys~0 0) (<= 0 ~__ste_email_isSigned1~0) (<= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (<= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_client_name1~0.offset 0) (<= ~__GUIDSL_NON_TERMINAL_main~0 0) (<= ~__ste_Client_AddressBook2_Address0~0 0) (<= ~__SELECTED_FEATURE_AutoResponder~0 0) (<= ~__ste_email_id0~0 0) (<= 0 ~__ste_client_name2~0.offset) (= ~head~0.offset 0) (<= ~__GUIDSL_ROOT_PRODUCTION~0 0) (<= ~__ste_Client_AddressBook2_Alias1~0 0) (<= 0 ~__GUIDSL_ROOT_PRODUCTION~0) (<= ~__ste_Email_counter~0 0) (<= ~__ste_Client_Keyring2_User2~0 0) (<= ~__ste_email_body1~0.offset 0) (<= 0 ~__SELECTED_FEATURE_Decrypt~0) (<= 0 |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset|) (<= 0 ~__ste_email_to0~0) (<= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (<= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 6) (<= 0 ~__ste_email_to1~0) (<= ~queue_empty~0 1) (= ~__ste_email_signKey0~0 0) (<= 0 ~__ste_Client_AddressBook2_Alias1~0) (<= 0 ~__ste_Client_Keyring2_User2~0) (<= 0 ~__ste_Client_Keyring1_User2~0) (<= 0 ~__ste_email_from0~0) (<= 0 ~__ste_email_isEncrypted1~0) (<= |#NULL.offset| 0) (<= 0 ~__ste_Client_Keyring1_User0~0) (<= 0 ~__SELECTED_FEATURE_AddressBook~0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (<= 0 ~__ste_email_from1~0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= 1 |ULTIMATE.start_valid_product_~retValue_acc~5#1|) (<= 0 ~__ste_email_isEncrypted0~0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (<= ~__ste_Client_Keyring0_PublicKey2~0 0) (<= 6 |ULTIMATE.start_setup_~__cil_tmp1~0#1.base|) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (<= 0 ~__ste_email_id1~0) (<= ~__ste_Client_AddressBook0_Address1~0 0) (= ~__ste_email_body0~0.base 0) (<= ~__ste_email_isEncrypted0~0 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (<= 0 ~__ste_Client_AddressBook2_Address1~0) (<= 0 ~__ste_client_name0~0.offset) (<= ~__ste_Client_Keyring0_PublicKey0~0 0) (<= ~__ste_client_name1~0.base 0) (<= ~__ste_client_autoResponse0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (<= ~__ste_email_to1~0 0) (<= ~__SELECTED_FEATURE_AddressBook~0 0) (<= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (<= 0 ~__ste_Client_Keyring0_PublicKey0~0) (<= ~__ste_client_forwardReceiver3~0 0) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= ~__ste_ClientAddressBook_size0~0 0) (<= 0 ~__ste_Client_Keyring1_PublicKey2~0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (<= ~__ste_Client_AddressBook0_Address0~0 0) (<= 0 ~__ste_client_name0~0.base) (<= 0 ~__ste_email_signKey1~0) (<= 0 ~__ste_email_body1~0.offset) (<= 1 ~queue_empty~0) (<= ~__ste_email_signKey1~0 0) (<= 0 ~__ste_client_forwardReceiver3~0) (<= ~__ste_client_name2~0.offset 0) (<= ~__ste_email_isSigned1~0 0) (<= ~__SELECTED_FEATURE_Encrypt~0 0) (<= 0 ~__ste_Email_counter~0) (<= ~__ste_email_subject0~0.offset 0) (<= 0 ~__ste_client_autoResponse0~0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (<= 0 ~__ste_Client_AddressBook0_Alias2~0) (<= 0 ~queued_message~0) (<= 2 ~__ste_client_idCounter1~0) (<= ~__SELECTED_FEATURE_Verify~0 0) (<= 0 (+ |ULTIMATE.start_main_~retValue_acc~0#1| 2147483648)) (<= ~__ste_ClientKeyring_size1~0 0) (<= ~__ste_Client_Keyring1_User2~0 0) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1|) (<= 0 ~chuck~0) (= |ULTIMATE.start_main_~tmp~2#1| 1) (<= 0 ~head~0.base) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1| 2) (= ~__SELECTED_FEATURE_Base~0 0) (<= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_privateKey1~0 456) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (<= 0 ~__ste_email_subject0~0.offset) (<= ~__ste_email_from0~0 0) (<= 0 ~__ste_Client_AddressBook1_Alias0~0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (<= 0 ~queued_client~0) (<= 0 ~__SELECTED_FEATURE_Keys~0) (<= ~__ste_Client_AddressBook1_Alias0~0 0) (<= 0 ~__ste_Client_Keyring1_PublicKey0~0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (<= 0 ~__ste_email_isSignatureVerified0~0) (= ~__ste_Client_AddressBook1_Address0~0 0) (<= 0 ~__ste_ClientKeyring_size1~0) (<= 0 ~__ste_client_forwardReceiver2~0) (= ~__ste_client_name2~0.base 0) (<= 0 ~__ste_Client_AddressBook0_Address1~0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (<= ~__ste_email_encryptionKey0~0 0) (= ~__ste_email_subject1~0.base 0) (<= ~__ste_ClientKeyring_size0~0 0) (<= ~__ste_email_id1~0 0) (<= 0 ~__ste_Client_AddressBook0_Address0~0) (<= ~__ste_Client_Keyring1_User0~0 0) (<= ~__ste_Client_AddressBook0_Alias2~0 0) (<= ~__ste_Client_AddressBook0_Address2~0 0) (<= ~__ste_client_autoResponse1~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (<= ~__ste_client_outbuffer0~0 0) (<= ~__ste_email_from1~0 0) (<= ~head~0.base 0) (<= ~__ste_client_forwardReceiver1~0 0) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1|) (= ~__ste_Client_Keyring1_User1~0 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (<= ~__ste_email_to0~0 0) (<= ~__ste_Client_Keyring2_User1~0 0) (<= 0 ~__ste_email_isSigned0~0) (<= 0 ~__SELECTED_FEATURE_Verify~0) (<= 0 ~__ste_Client_AddressBook1_Alias2~0) (<= 0 ~__ste_client_autoResponse2~0) (= ~__ste_email_subject1~0.offset 0) (<= 0 ~__ste_Client_AddressBook2_Address0~0) (<= |ULTIMATE.start_main_~retValue_acc~0#1| 2147483647) (<= 0 ~__ste_Client_Keyring2_User1~0) (= ~__ste_Client_AddressBook1_Address1~0 0) (<= ~__ste_client_name0~0.offset 0) (<= 0 ~__ste_ClientKeyring_size0~0) (<= ~__ste_email_isEncrypted1~0 0) (<= 0 |#NULL.offset|) (<= ~rjh~0 2) (<= ~__ste_Client_AddressBook0_Alias1~0 0) (<= 0 ~__ste_client_forwardReceiver1~0) (<= 0 ~__ste_Client_Keyring2_PublicKey2~0) (<= ~__ste_Client_AddressBook2_Address1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= ~bob~0 1) (<= 0 ~__GUIDSL_NON_TERMINAL_main~0) (<= ~__ste_client_forwardReceiver2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (<= ~__ste_client_autoResponse2~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_email_body1~0.base 0) (<= ~__ste_email_isSigned0~0 0) (<= 1 ~bob~0) (<= ~__ste_client_outbuffer1~0 0) (= ~__ste_ClientKeyring_size2~0 0) (<= ~__ste_ClientAddressBook_size1~0 0) (<= 0 ~__ste_client_name1~0.base) (<= |ULTIMATE.start_valid_product_~retValue_acc~5#1| 1) (<= 0 ~__ste_email_id0~0) (<= 0 ~__ste_email_encryptionKey0~0) (= |#NULL.base| 0) (<= ~queued_client~0 0)) [2022-12-14 06:05:18,868 INFO L895 garLoopResultBuilder]: At program point $Ultimate##78(lines 2746 2829) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,869 INFO L895 garLoopResultBuilder]: At program point L288(lines 281 292) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,869 INFO L895 garLoopResultBuilder]: At program point L189(line 189) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,869 INFO L895 garLoopResultBuilder]: At program point $Ultimate##60(lines 2704 2832) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,869 INFO L895 garLoopResultBuilder]: At program point L189-1(line 189) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,870 INFO L895 garLoopResultBuilder]: At program point L123(line 123) the Hoare annotation is: (let ((.cse1 (select |#memory_int| 24)) (.cse2 (select |#memory_int| 10)) (.cse0 (select |#memory_int| 11)) (.cse3 (select |#memory_int| 1))) (and (= ~queued_client~0 0) (= 10 (select |#length| 25)) (= ~__ste_Client_Keyring1_User2~0 0) (= (select .cse0 2) 10) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= |ULTIMATE.start_setup_bob_~bob___0#1| |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= (select |#valid| 30) 1) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (= 25 (select |#length| 31)) (= ~__ste_Client_counter~0 0) (= ~rjh~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= (select |#length| 8) 11) (= 12 (select |#length| 26)) (= (select |#valid| 26) 1) (= ~__ste_client_autoResponse1~0 0) (= 9 (select |#length| 16)) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= (select |#length| 20) 25) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (= (select |#valid| 9) 1) (= (select |#length| 6) 9) (= (select .cse0 3) 0) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= (select .cse1 0) 37) (= ~__ste_email_body1~0.offset 0) (= (select |#length| 15) 30) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= (select |#valid| 11) 1) (= ~__ste_Client_AddressBook1_Address2~0 0) (= (select |#valid| 27) 1) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= (select |#valid| 33) 1) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= |ULTIMATE.start_setup_bob_#in~bob___0#1| ~bob~0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= (select .cse2 2) 10) (= ~head~0.offset 0) (= 30 (select |#length| 12)) (= ~__ste_client_name0~0.offset 0) (= (select .cse2 3) 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= 2 (select |#length| 1)) (= (select |#length| 33) 16) (= ~__ste_client_idCounter1~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= (select |#valid| 3) 1) (= ~__ste_email_signKey0~0 0) (= (select |#valid| 7) 1) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= (select .cse1 3) 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= (select |#valid| 18) 1) (= (select |#valid| 22) 1) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= 25 (select |#length| 23)) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= 20 (select |#length| 34)) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= (select |#length| 24) 4) (= (select |#valid| 24) 1) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= 16 (select |#length| 30)) (= ~__ste_email_id0~0 0) (= (select |#length| 27) 10) (= (select .cse2 0) 37) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (= (select |#valid| 12) 1) (= (select |#length| 19) 9) (= (select |#valid| 32) 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (= (select |#valid| 28) 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= (select .cse0 0) 37) (= 115 (select .cse1 1)) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= (select .cse1 2) 10) (= (select |#valid| 4) 1) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= 9 (select |#length| 13)) (= (select |#length| 29) 13) (<= 0 (+ |ULTIMATE.start_main_~retValue_acc~0#1| 2147483648)) (= (select .cse2 1) 100) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= (select |#valid| 1) 1) (= 44 (select |#length| 4)) (= ~__ste_client_forwardReceiver0~0 0) (= (select |#valid| 20) 1) (= ~__ste_Client_Keyring2_User0~0 0) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= (select |#valid| 21) 1) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_idCounter2~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (= (select |#length| 22) 9) (= 28 (select |#length| 2)) (= (select |#length| 32) 10) (= (select |#valid| 14) 1) (= ~__ste_email_subject1~0.base 0) (= (select |#length| 21) 30) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= (select .cse0 1) 100) (= (select |#valid| 0) 0) (= 19 (select |#length| 9)) (= ~__ste_Client_Keyring2_User2~0 0) (= (select |#valid| 25) 1) (= (select |#length| 17) 21) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= (select |#valid| 2) 1) (= (select |#length| 10) 4) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= (select .cse3 0) 48) (= ~__ste_email_subject1~0.offset 0) (= (select |#valid| 23) 1) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~0#1| 2147483647) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= ~__ste_client_idCounter0~0 0) (= 9 (select |#length| 7)) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= (select |#valid| 19) 1) (= (select |#valid| 31) 1) (= (select |#valid| 34) 1) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= (select |#valid| 16) 1) (= (select |#valid| 6) 1) (= ~chuck~0 0) (= 30 (select |#length| 18)) (= (select .cse3 1) 0) (= 44 (select |#length| 5)) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= |ULTIMATE.start_setup_bob_#in~bob___0#1| |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_client_outbuffer2~0 0) (= (select |#valid| 29) 1) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_main_~tmp~2#1|) (= (select |#length| 11) 4) (= |ULTIMATE.start_valid_product_~retValue_acc~5#1| |ULTIMATE.start_valid_product_#res#1|) (= ~__ste_ClientAddressBook_size2~0 0) (= (select |#valid| 17) 1) (= (select |#length| 28) 18) (= (select |#valid| 10) 1) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= (select |#valid| 8) 1) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= |ULTIMATE.start_valid_product_~retValue_acc~5#1| 1) (= |#NULL.base| 0) (= 21 (select |#length| 14)) (= ~__ste_email_signKey1~0 0))) [2022-12-14 06:05:18,871 INFO L895 garLoopResultBuilder]: At program point L123-1(lines 118 127) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~rjh~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= ~__ste_client_autoResponse1~0 0) (= ~__ste_Client_AddressBook2_Alias0~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (<= 0 (+ |ULTIMATE.start_main_~retValue_acc~0#1| 2147483648)) (= |ULTIMATE.start_main_~tmp~2#1| 1) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= ~__ste_client_idCounter0~0 1) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~0#1| 2147483647) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (<= 1 ~__ste_client_idCounter0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |ULTIMATE.start_valid_product_~retValue_acc~5#1| 1) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:05:18,871 INFO L899 garLoopResultBuilder]: For program point L2683(lines 2683 2690) no Hoare annotation was computed. [2022-12-14 06:05:18,871 INFO L895 garLoopResultBuilder]: At program point $Ultimate##66(lines 2718 2831) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,871 INFO L895 garLoopResultBuilder]: At program point L2816(line 2816) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,871 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-14 06:05:18,871 INFO L899 garLoopResultBuilder]: For program point L2750(lines 2750 2754) no Hoare annotation was computed. [2022-12-14 06:05:18,871 INFO L899 garLoopResultBuilder]: For program point L2816-1(line 2816) no Hoare annotation was computed. [2022-12-14 06:05:18,871 INFO L899 garLoopResultBuilder]: For program point L2800(lines 2800 2807) no Hoare annotation was computed. [2022-12-14 06:05:18,871 INFO L895 garLoopResultBuilder]: At program point $Ultimate##54(lines 2693 2833) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,872 INFO L895 garLoopResultBuilder]: At program point L356(line 356) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,872 INFO L895 garLoopResultBuilder]: At program point L356-1(lines 351 360) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,872 INFO L895 garLoopResultBuilder]: At program point L192(lines 192 200) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,872 INFO L899 garLoopResultBuilder]: For program point L2736(lines 2736 2743) no Hoare annotation was computed. [2022-12-14 06:05:18,873 INFO L895 garLoopResultBuilder]: At program point L176(line 176) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (<= 456 ~__ste_client_privateKey1~0) (<= 3 |ULTIMATE.start_setup_chuck__wrappee__Base_~chuck___0#1|) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.offset| 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1| 2) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (<= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| 3) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (<= ~__ste_client_idCounter2~0 3) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 6) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (<= ~__ste_client_privateKey1~0 456) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (<= 3 ~__ste_client_idCounter2~0) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (<= |ULTIMATE.start_setup_chuck__wrappee__Base_~chuck___0#1| 3) (= 3 ~chuck~0) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (<= 3 |ULTIMATE.start_setup_chuck_~chuck___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (<= 0 (+ |ULTIMATE.start_main_~retValue_acc~0#1| 2147483648)) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1|) (= |ULTIMATE.start_main_~tmp~2#1| 1) (= ~queue_empty~0 1) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1| 2) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (<= 3 |ULTIMATE.start_setup_chuck_#in~chuck___0#1|) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (<= |ULTIMATE.start_setup_chuck__wrappee__Base_#in~chuck___0#1| 3) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (= ~head~0.base 0) (<= |ULTIMATE.start_setup_chuck_~chuck___0#1| 3) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1|) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= 7 |ULTIMATE.start_setup_~__cil_tmp2~0#1.base|) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~0#1| 2147483647) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (<= 3 |ULTIMATE.start_setup_chuck__wrappee__Base_#in~chuck___0#1|) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |ULTIMATE.start_valid_product_~retValue_acc~5#1| 1) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:05:18,874 INFO L895 garLoopResultBuilder]: At program point L176-1(lines 170 180) the Hoare annotation is: (and (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (<= 3 |ULTIMATE.start_setup_chuck__wrappee__Base_~chuck___0#1|) (= ~__ste_email_isEncrypted1~0 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1| 2) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (<= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| 3) (= ~__ste_Client_Keyring1_User0~0 0) (<= ~__ste_client_idCounter2~0 3) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= 789 ~__ste_client_privateKey2~0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 6) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_email_from0~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (<= ~__ste_client_forwardReceiver3~0 0) (<= 3 ~__ste_client_idCounter2~0) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (<= 0 |ULTIMATE.start_setup_~__cil_tmp2~0#1.offset|) (<= ~__ste_Client_AddressBook0_Address0~0 0) (<= |ULTIMATE.start_setup_chuck__wrappee__Base_~chuck___0#1| 3) (= 3 ~chuck~0) (= ~__ste_Client_AddressBook2_Address1~0 0) (<= 0 ~__ste_email_signKey1~0) (<= ~__ste_email_signKey1~0 0) (<= 0 ~__ste_client_forwardReceiver3~0) (<= ~__ste_email_subject0~0.offset 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (<= 0 ~__ste_Client_AddressBook0_Alias2~0) (<= 3 |ULTIMATE.start_setup_chuck_~chuck___0#1|) (= ~__ste_client_outbuffer0~0 0) (<= ~__SELECTED_FEATURE_Verify~0 0) (<= 0 (+ |ULTIMATE.start_main_~retValue_acc~0#1| 2147483648)) (<= ~__ste_ClientKeyring_size1~0 0) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1|) (= |ULTIMATE.start_main_~tmp~2#1| 1) (<= 0 ~head~0.base) (= ~queue_empty~0 1) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1| 2) (= ~__SELECTED_FEATURE_Base~0 0) (<= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_forwardReceiver0~0 0) (<= 3 |ULTIMATE.start_setup_chuck_#in~chuck___0#1|) (= ~__ste_Client_Keyring2_User0~0 0) (<= 0 ~__ste_email_subject0~0.offset) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (<= 0 ~__ste_Client_AddressBook1_Alias0~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (<= 0 ~queued_client~0) (<= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (<= 0 ~__ste_ClientKeyring_size1~0) (<= 0 ~__ste_client_forwardReceiver2~0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (<= ~__ste_email_encryptionKey0~0 0) (= ~__ste_email_subject1~0.base 0) (<= ~__ste_ClientKeyring_size0~0 0) (<= 0 ~__ste_Client_AddressBook0_Address0~0) (<= |ULTIMATE.start_setup_chuck__wrappee__Base_#in~chuck___0#1| 3) (<= ~__ste_Client_AddressBook0_Alias2~0 0) (<= ~__ste_Client_AddressBook0_Address2~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (<= ~head~0.base 0) (<= |ULTIMATE.start_setup_chuck_~chuck___0#1| 3) (<= ~__ste_client_forwardReceiver1~0 0) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1|) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (<= ~__ste_Client_Keyring2_User1~0 0) (<= 0 ~__ste_email_isSigned0~0) (<= 0 ~__SELECTED_FEATURE_Verify~0) (= 7 |ULTIMATE.start_setup_~__cil_tmp2~0#1.base|) (<= |ULTIMATE.start_setup_~__cil_tmp2~0#1.offset| 0) (<= 0 ~__ste_Client_AddressBook1_Alias2~0) (<= 0 ~__ste_client_autoResponse2~0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_email_isEncrypted0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~0#1| 2147483647) (<= 0 ~__ste_Client_Keyring2_User1~0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (<= 0 ~__ste_ClientKeyring_size0~0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (<= 3 |ULTIMATE.start_setup_chuck__wrappee__Base_#in~chuck___0#1|) (<= 0 ~__ste_client_forwardReceiver1~0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= ~bob~0 1) (<= ~__ste_client_forwardReceiver2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (<= ~__ste_client_autoResponse2~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (<= ~__ste_email_isSigned0~0 0) (<= 1 ~bob~0) (= ~__ste_ClientKeyring_size2~0 0) (= |ULTIMATE.start_valid_product_~retValue_acc~5#1| 1) (<= 0 ~__ste_email_encryptionKey0~0) (= |#NULL.base| 0) (<= ~queued_client~0 0)) [2022-12-14 06:05:18,874 INFO L899 garLoopResultBuilder]: For program point L2786(lines 2786 2793) no Hoare annotation was computed. [2022-12-14 06:05:18,874 INFO L895 garLoopResultBuilder]: At program point L2836(lines 2670 2837) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,875 INFO L895 garLoopResultBuilder]: At program point L144(line 144) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= ~__ste_client_autoResponse1~0 0) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_client_privateKey0~0 123) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| ~rjh~0) (= ~__ste_email_to0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 6) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1| |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_email_id0~0 0) (= ~__ste_email_from0~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~__ste_client_forwardReceiver1~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (<= 0 (+ |ULTIMATE.start_main_~retValue_acc~0#1| 2147483648)) (= |ULTIMATE.start_main_~tmp~2#1| 1) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= ~__ste_client_idCounter0~0 1) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (= ~head~0.base 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (<= ~__ste_Client_Keyring2_User1~0 0) (<= 0 ~__ste_email_isSigned0~0) (<= 0 ~__ste_client_autoResponse2~0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~0#1| 2147483647) (<= 0 ~__ste_Client_Keyring2_User1~0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (<= 1 ~__ste_client_idCounter0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1| |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1|) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= ~bob~0 1) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (<= ~__ste_client_autoResponse2~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (<= ~__ste_email_isSigned0~0 0) (<= 1 ~bob~0) (= ~__ste_ClientKeyring_size2~0 0) (= |ULTIMATE.start_valid_product_~retValue_acc~5#1| 1) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:05:18,875 INFO L895 garLoopResultBuilder]: At program point L144-1(lines 139 148) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1| 2) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (<= ~__ste_client_idCounter1~0 2) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 6) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 2 ~__ste_client_idCounter1~0) (= ~__ste_client_outbuffer0~0 0) (<= 0 (+ |ULTIMATE.start_main_~retValue_acc~0#1| 2147483648)) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1|) (= |ULTIMATE.start_main_~tmp~2#1| 1) (= ~queue_empty~0 1) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1| 2) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (<= ~__ste_client_privateKey0~0 123) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (= ~head~0.base 0) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1|) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~0#1| 2147483647) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (<= 123 ~__ste_client_privateKey0~0) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |ULTIMATE.start_valid_product_~retValue_acc~5#1| 1) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:05:18,875 INFO L899 garLoopResultBuilder]: For program point L2672(lines 2671 2835) no Hoare annotation was computed. [2022-12-14 06:05:18,875 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(line -1) the Hoare annotation is: true [2022-12-14 06:05:18,876 INFO L895 garLoopResultBuilder]: At program point L2788(line 2788) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,876 INFO L899 garLoopResultBuilder]: For program point L2722(lines 2722 2729) no Hoare annotation was computed. [2022-12-14 06:05:18,876 INFO L899 garLoopResultBuilder]: For program point L2788-1(line 2788) no Hoare annotation was computed. [2022-12-14 06:05:18,876 INFO L895 garLoopResultBuilder]: At program point L346(line 346) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,876 INFO L895 garLoopResultBuilder]: At program point L346-1(lines 341 350) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,876 INFO L899 garLoopResultBuilder]: For program point L2708(lines 2708 2715) no Hoare annotation was computed. [2022-12-14 06:05:18,876 INFO L895 garLoopResultBuilder]: At program point L198(line 198) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,877 INFO L895 garLoopResultBuilder]: At program point L165(line 165) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.offset| 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1| 2) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= |ULTIMATE.start_setup_chuck_~chuck___0#1| |ULTIMATE.start_setup_chuck__wrappee__Base_#in~chuck___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (<= ~__ste_client_idCounter1~0 2) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| ~chuck~0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 6) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| |ULTIMATE.start_setup_chuck_~chuck___0#1|) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= |ULTIMATE.start_setup_chuck__wrappee__Base_~chuck___0#1| |ULTIMATE.start_setup_chuck__wrappee__Base_#in~chuck___0#1|) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_email_from0~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= 3 ~chuck~0) (= ~__ste_Client_AddressBook2_Address1~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 2 ~__ste_client_idCounter1~0) (= ~__ste_client_outbuffer0~0 0) (<= 0 (+ |ULTIMATE.start_main_~retValue_acc~0#1| 2147483648)) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1|) (= |ULTIMATE.start_main_~tmp~2#1| 1) (= ~queue_empty~0 1) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1| 2) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_privateKey1~0 456) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (<= ~__ste_email_encryptionKey0~0 0) (= ~__ste_email_subject1~0.base 0) (<= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (= ~head~0.base 0) (<= ~__ste_client_forwardReceiver1~0 0) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1|) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (<= ~__ste_Client_Keyring2_User1~0 0) (<= 0 ~__ste_email_isSigned0~0) (= 7 |ULTIMATE.start_setup_~__cil_tmp2~0#1.base|) (<= 0 ~__ste_client_autoResponse2~0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_email_isEncrypted0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~0#1| 2147483647) (<= 0 ~__ste_Client_Keyring2_User1~0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (<= 0 ~__ste_ClientKeyring_size0~0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (<= 0 ~__ste_client_forwardReceiver1~0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= ~bob~0 1) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (<= ~__ste_client_autoResponse2~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (<= ~__ste_email_isSigned0~0 0) (<= 1 ~bob~0) (= ~__ste_ClientKeyring_size2~0 0) (= |ULTIMATE.start_valid_product_~retValue_acc~5#1| 1) (<= 0 ~__ste_email_encryptionKey0~0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:05:18,877 INFO L902 garLoopResultBuilder]: At program point L198-1(lines 181 203) the Hoare annotation is: true [2022-12-14 06:05:18,878 INFO L895 garLoopResultBuilder]: At program point L165-1(lines 160 169) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (<= 456 ~__ste_client_privateKey1~0) (<= 3 |ULTIMATE.start_setup_chuck__wrappee__Base_~chuck___0#1|) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.offset| 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1| 2) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (<= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| 3) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (<= ~__ste_client_idCounter2~0 3) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 6) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (<= ~__ste_client_privateKey1~0 456) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (<= 3 ~__ste_client_idCounter2~0) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (<= |ULTIMATE.start_setup_chuck__wrappee__Base_~chuck___0#1| 3) (= 3 ~chuck~0) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (<= 3 |ULTIMATE.start_setup_chuck_~chuck___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (<= 0 (+ |ULTIMATE.start_main_~retValue_acc~0#1| 2147483648)) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1|) (= |ULTIMATE.start_main_~tmp~2#1| 1) (= ~queue_empty~0 1) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1| 2) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (<= 3 |ULTIMATE.start_setup_chuck_#in~chuck___0#1|) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (<= |ULTIMATE.start_setup_chuck__wrappee__Base_#in~chuck___0#1| 3) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (= ~head~0.base 0) (<= |ULTIMATE.start_setup_chuck_~chuck___0#1| 3) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1|) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= 7 |ULTIMATE.start_setup_~__cil_tmp2~0#1.base|) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~0#1| 2147483647) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (<= 3 |ULTIMATE.start_setup_chuck__wrappee__Base_#in~chuck___0#1|) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |ULTIMATE.start_valid_product_~retValue_acc~5#1| 1) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:05:18,878 INFO L895 garLoopResultBuilder]: At program point $Ultimate##102(lines 2796 2825) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,878 INFO L895 garLoopResultBuilder]: At program point $Ultimate##108(lines 2810 2824) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~2#1| 1) [2022-12-14 06:05:18,878 INFO L899 garLoopResultBuilder]: For program point L248(lines 248 255) no Hoare annotation was computed. [2022-12-14 06:05:18,878 INFO L899 garLoopResultBuilder]: For program point L2775(lines 2775 2779) no Hoare annotation was computed. [2022-12-14 06:05:18,878 INFO L902 garLoopResultBuilder]: At program point L248-2(lines 248 255) the Hoare annotation is: true [2022-12-14 06:05:18,879 INFO L895 garLoopResultBuilder]: At program point L134(line 134) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~rjh~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= ~__ste_client_autoResponse1~0 0) (= ~__ste_Client_AddressBook2_Alias0~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (<= 0 (+ |ULTIMATE.start_main_~retValue_acc~0#1| 2147483648)) (= |ULTIMATE.start_main_~tmp~2#1| 1) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= ~__ste_client_idCounter0~0 1) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (<= |ULTIMATE.start_main_~retValue_acc~0#1| 2147483647) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (<= 1 ~__ste_client_idCounter0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |ULTIMATE.start_valid_product_~retValue_acc~5#1| 1) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:05:18,880 INFO L895 garLoopResultBuilder]: At program point L134-1(lines 128 138) the Hoare annotation is: (and (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (= ~__ste_Client_counter~0 0) (= ~rjh~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= ~__ste_client_autoResponse1~0 0) (= ~__ste_Client_AddressBook2_Alias0~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_client_name1~0.offset 0) (= ~head~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (<= 0 ~__ste_email_to0~0) (<= 0 ~__ste_email_to1~0) (<= ~queue_empty~0 1) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (<= 0 ~__ste_Client_Keyring1_User2~0) (<= 0 ~__ste_email_from0~0) (<= 0 ~__ste_email_isEncrypted1~0) (= ~__SELECTED_FEATURE_Keys~0 0) (<= |#NULL.offset| 0) (<= 0 ~__ste_Client_Keyring1_User0~0) (<= 0 ~__SELECTED_FEATURE_AddressBook~0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (<= 0 ~__ste_email_from1~0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= 1 |ULTIMATE.start_valid_product_~retValue_acc~5#1|) (<= 0 ~__ste_email_isEncrypted0~0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (<= 0 ~__ste_email_id1~0) (<= ~__ste_Client_AddressBook0_Address1~0 0) (= ~__ste_email_body0~0.base 0) (<= ~__ste_email_isEncrypted0~0 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (<= 0 ~__ste_Client_AddressBook2_Address1~0) (<= 0 ~__ste_client_name0~0.offset) (<= ~__ste_Client_Keyring0_PublicKey0~0 0) (<= ~__ste_client_name1~0.base 0) (= ~__ste_email_id0~0 0) (<= ~__ste_client_autoResponse0~0 0) (<= ~__ste_email_to1~0 0) (<= ~__SELECTED_FEATURE_AddressBook~0 0) (<= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (<= 0 ~__ste_Client_Keyring0_PublicKey0~0) (<= ~__ste_client_forwardReceiver3~0 0) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= 0 ~__ste_Client_Keyring1_PublicKey2~0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (<= ~__ste_Client_AddressBook0_Address0~0 0) (<= 0 ~__ste_email_signKey1~0) (<= 1 ~queue_empty~0) (<= ~__ste_email_signKey1~0 0) (<= 0 ~__ste_client_forwardReceiver3~0) (<= ~__ste_email_subject0~0.offset 0) (<= 0 ~__ste_client_autoResponse0~0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (<= 0 ~__ste_Client_AddressBook0_Alias2~0) (= ~__ste_client_outbuffer0~0 0) (<= ~__SELECTED_FEATURE_Verify~0 0) (<= 0 (+ |ULTIMATE.start_main_~retValue_acc~0#1| 2147483648)) (<= ~__ste_ClientKeyring_size1~0 0) (<= ~__ste_Client_Keyring1_User2~0 0) (= |ULTIMATE.start_main_~tmp~2#1| 1) (<= 0 ~head~0.base) (= ~__SELECTED_FEATURE_Base~0 0) (<= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (<= 0 ~__ste_email_subject0~0.offset) (<= ~__ste_email_from0~0 0) (<= 0 ~__ste_Client_AddressBook1_Alias0~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (<= 0 ~queued_client~0) (<= ~__ste_client_privateKey0~0 123) (<= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (<= 0 ~__ste_ClientKeyring_size1~0) (<= 0 ~__ste_client_forwardReceiver2~0) (= ~__ste_client_name2~0.base 0) (<= 0 ~__ste_Client_AddressBook0_Address1~0) (<= ~__ste_email_encryptionKey0~0 0) (<= ~__ste_client_idCounter0~0 1) (= ~__ste_email_subject1~0.base 0) (<= ~__ste_ClientKeyring_size0~0 0) (<= ~__ste_email_id1~0 0) (<= 0 ~__ste_Client_AddressBook0_Address0~0) (<= ~__ste_Client_Keyring1_User0~0 0) (<= ~__ste_Client_AddressBook0_Alias2~0 0) (<= ~__ste_Client_AddressBook0_Address2~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (<= ~__ste_email_from1~0 0) (<= ~head~0.base 0) (<= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (<= ~__ste_email_to0~0 0) (<= ~__ste_Client_Keyring2_User1~0 0) (<= 0 ~__ste_email_isSigned0~0) (<= 0 ~__SELECTED_FEATURE_Verify~0) (<= 0 ~__ste_Client_AddressBook1_Alias2~0) (<= 0 ~__ste_client_autoResponse2~0) (= ~__ste_email_subject1~0.offset 0) (<= |ULTIMATE.start_main_~retValue_acc~0#1| 2147483647) (<= 0 ~__ste_Client_Keyring2_User1~0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (<= ~__ste_client_name0~0.offset 0) (<= 1 ~__ste_client_idCounter0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (<= 0 ~__ste_ClientKeyring_size0~0) (<= ~__ste_email_isEncrypted1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (<= 0 |#NULL.offset|) (<= 123 ~__ste_client_privateKey0~0) (= ~chuck~0 0) (<= 0 ~__ste_client_forwardReceiver1~0) (= ~__ste_client_name0~0.base 0) (<= ~__ste_Client_AddressBook2_Address1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= ~bob~0 1) (<= ~__ste_client_forwardReceiver2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (<= ~__ste_client_autoResponse2~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_email_body1~0.base 0) (<= ~__ste_email_isSigned0~0 0) (<= 1 ~bob~0) (= ~__ste_ClientKeyring_size2~0 0) (<= 0 ~__ste_client_name1~0.base) (<= |ULTIMATE.start_valid_product_~retValue_acc~5#1| 1) (<= 0 ~__ste_email_encryptionKey0~0) (= |#NULL.base| 0) (<= ~queued_client~0 0)) [2022-12-14 06:05:18,880 INFO L899 garLoopResultBuilder]: For program point getEmailFromEXIT(lines 858 876) no Hoare annotation was computed. [2022-12-14 06:05:18,880 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 858 876) the Hoare annotation is: true [2022-12-14 06:05:18,880 INFO L899 garLoopResultBuilder]: For program point isReadableEXIT(lines 1275 1283) no Hoare annotation was computed. [2022-12-14 06:05:18,880 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1275 1283) the Hoare annotation is: true [2022-12-14 06:05:18,880 INFO L899 garLoopResultBuilder]: For program point setClientKeyringPublicKeyEXIT(lines 2492 2535) no Hoare annotation was computed. [2022-12-14 06:05:18,881 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 2492 2535) the Hoare annotation is: (or (not (<= 0 ~queued_client~0)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (<= ~__ste_email_isEncrypted1~0 0)) (not (<= ~__ste_email_subject1~0.offset 0)) (not (<= ~__ste_Client_Keyring0_User0~0 2)) (not (<= ~__ste_ClientKeyring_size0~0 2147483647)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 ~__ste_email_subject1~0.offset)) (not (<= 0 ~__ste_Client_AddressBook1_Address1~0)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (<= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (<= ~__ste_client_privateKey2~0 789)) (not (<= 0 |#NULL.offset|)) (not (<= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= ~queued_message~0 0)) (not (<= ~__ste_email_to0~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (= |setClientKeyringPublicKey_#in~handle| ~bob~0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (<= 3 ~chuck~0)) (not (<= ~__ste_ClientAddressBook_size1~0 0)) (not (<= 0 (+ 2147483647 ~__ste_ClientKeyring_size0~0))) (not (<= 0 ~__ste_email_body1~0.offset)) (not (<= 0 ~__ste_email_to0~0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (<= 0 ~__ste_Client_Keyring1_User2~0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= |setClientKeyringPublicKey_#in~index| 0)) (not (<= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address0~0)) (not (<= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= 0 ~__GUIDSL_ROOT_PRODUCTION~0)) (not (<= ~head~0.base 0)) (not (<= 0 |old(~__ste_Client_Keyring0_PublicKey0~0)|)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (<= ~__ste_Client_Keyring0_PublicKey2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Alias0~0)) (not (<= 2 ~rjh~0)) (not (<= ~bob~0 1)) (not (<= ~__ste_Client_AddressBook2_Address0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AutoResponder~0)) (not (<= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~rjh~0 2)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (<= 0 ~__ste_email_isSignatureVerified0~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (<= 2 ~__ste_Client_Keyring0_User0~0)) (not (<= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (<= 0 ~__SELECTED_FEATURE_Decrypt~0)) (not (<= 0 ~queued_message~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (<= 0 ~__ste_Client_Keyring0_PublicKey2~0)) (not (<= 0 ~__GUIDSL_NON_TERMINAL_main~0)) (and (= ~__ste_Client_Keyring1_PublicKey1~0 |old(~__ste_Client_Keyring1_PublicKey1~0)|) (= |old(~__ste_Client_Keyring2_PublicKey1~0)| ~__ste_Client_Keyring2_PublicKey1~0) (= |old(~__ste_Client_Keyring0_PublicKey1~0)| ~__ste_Client_Keyring0_PublicKey1~0) (= |old(~__ste_Client_Keyring2_PublicKey0~0)| ~__ste_Client_Keyring2_PublicKey0~0) (= |old(~__ste_Client_Keyring0_PublicKey0~0)| ~__ste_Client_Keyring0_PublicKey0~0) (= ~__ste_Client_Keyring1_PublicKey0~0 |old(~__ste_Client_Keyring1_PublicKey0~0)|)) (not (<= ~__ste_client_name2~0.offset 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (= 456 |setClientKeyringPublicKey_#in~value|)) (not (<= 789 ~__ste_client_privateKey2~0)) (not (<= 0 ~__ste_client_name2~0.offset)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (<= 0 ~__ste_email_isSignatureVerified1~0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (<= 0 ~__ste_client_outbuffer1~0)) (not (<= 0 ~__ste_ClientAddressBook_size1~0)) (not (<= 0 ~__ste_email_from0~0)) (not (<= 0 ~__ste_client_name0~0.base)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (<= ~__ste_client_outbuffer0~0 0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (<= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= 1 ~queue_empty~0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (<= ~__ste_client_name0~0.base 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= 0 ~__ste_Email_counter~0)) (not (<= 0 ~__SELECTED_FEATURE_Encrypt~0)) (not (<= 0 ~__ste_email_isEncrypted1~0)) (not (= |#NULL.base| 0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= ~chuck~0 3)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (<= 0 ~__ste_Client_AddressBook2_Alias1~0)) (not (<= ~__ste_Client_Keyring2_User2~0 0)) (not (<= 0 ~__ste_email_isSigned1~0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (<= ~__ste_email_isSigned1~0 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (<= 0 ~__ste_email_from1~0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (<= 0 ~__ste_Client_Keyring2_User2~0)) (not (<= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_email_body0~0.base 0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~queue_empty~0 1)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias1~0)) (not (<= 0 ~__ste_email_id0~0)) (not (<= 0 |#StackHeapBarrier|)) (not (<= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_ClientAddressBook_size0~0)) (not (<= 0 ~__SELECTED_FEATURE_Keys~0)) (not (<= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_body1~0.offset 0)) (not (<= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (<= ~queued_client~0 0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (<= 0 ~__ste_client_outbuffer0~0)) (not (<= 0 ~__ste_client_autoResponse1~0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (<= ~__ste_email_from0~0 0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= ~__ste_email_to1~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (<= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__ste_Email_counter~0 0)) (not (<= 0 ~__ste_email_signKey0~0)) (not (<= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (<= ~__ste_client_autoResponse1~0 0)) (not (<= ~__ste_Client_Keyring1_User2~0 0)) (not (<= 0 ~__ste_Client_Keyring2_PublicKey2~0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (<= ~__ste_email_id0~0 0)) (not (<= ~__ste_email_from1~0 0)) (not (<= ~__ste_email_signKey0~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (<= 0 ~__ste_email_to1~0)) (not (= 0 ~__ste_email_subject0~0.base))) [2022-12-14 06:05:18,881 INFO L899 garLoopResultBuilder]: For program point setClientIdEXIT(lines 2611 2630) no Hoare annotation was computed. [2022-12-14 06:05:18,882 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 2611 2630) the Hoare annotation is: true [2022-12-14 06:05:18,884 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:05:18,885 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-14 06:05:18,940 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.12 06:05:18 BoogieIcfgContainer [2022-12-14 06:05:18,940 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-14 06:05:18,940 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-14 06:05:18,940 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-14 06:05:18,941 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-14 06:05:18,941 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 05:55:32" (3/4) ... [2022-12-14 06:05:18,943 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-14 06:05:18,947 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getEmailSignKey [2022-12-14 06:05:18,947 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure outgoing [2022-12-14 06:05:18,947 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isSigned [2022-12-14 06:05:18,947 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientPrivateKey [2022-12-14 06:05:18,947 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure chuckKeyAdd [2022-12-14 06:05:18,947 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getEmailTo [2022-12-14 06:05:18,947 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure createClientKeyringEntry [2022-12-14 06:05:18,947 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure generateKeyPair [2022-12-14 06:05:18,947 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientKeyringUser [2022-12-14 06:05:18,947 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure sendEmail [2022-12-14 06:05:18,947 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setEmailFrom [2022-12-14 06:05:18,947 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getEmailFrom [2022-12-14 06:05:18,948 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isReadable [2022-12-14 06:05:18,948 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientKeyringPublicKey [2022-12-14 06:05:18,948 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientId [2022-12-14 06:05:18,957 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 192 nodes and edges [2022-12-14 06:05:18,958 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 60 nodes and edges [2022-12-14 06:05:18,959 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-12-14 06:05:18,959 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2022-12-14 06:05:18,960 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-12-14 06:05:18,962 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 06:05:18,983 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && rjh == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_autoResponse1 == 0) && __ste_Client_AddressBook2_Alias0 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 1 <= bob___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && 0 <= retValue_acc + 2147483648) && tmp == 1) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && __ste_client_idCounter0 <= 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && retValue_acc <= 2147483647) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && 1 <= __ste_client_idCounter0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && retValue_acc == 1) && #NULL == 0) && __ste_email_signKey1 == 0 [2022-12-14 06:05:18,983 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((__GUIDSL_NON_TERMINAL_main == 0 && __SELECTED_FEATURE_Sign == 0) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && rjh == 0) && \old(bob___0) <= 1) && __ste_client_autoResponse1 == 0) && __ste_Client_AddressBook2_Alias0 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Email_counter == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_client_name1 == 0) && head == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && 0 <= __ste_email_to0) && 0 <= __ste_email_to1) && queue_empty <= 1) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && 0 <= __ste_Client_Keyring1_User2) && 0 <= __ste_email_from0) && 0 <= __ste_email_isEncrypted1) && __SELECTED_FEATURE_Keys == 0) && #NULL <= 0) && 0 <= __ste_Client_Keyring1_User0) && 0 <= __SELECTED_FEATURE_AddressBook) && __ste_Client_Keyring0_PublicKey1 == 0) && 0 <= __ste_email_from1) && __SELECTED_FEATURE_Forward == 0) && 1 <= retValue_acc) && 0 <= __ste_email_isEncrypted0) && __ste_Client_Keyring0_User0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && 0 <= __ste_email_id1) && __ste_Client_AddressBook0_Address1 <= 0) && __ste_email_body0 == 0) && __ste_email_isEncrypted0 <= 0) && __ste_Client_AddressBook0_Alias0 == 0) && 0 <= __ste_Client_AddressBook2_Address1) && 0 <= __ste_client_name0) && __ste_Client_Keyring0_PublicKey0 <= 0) && __ste_client_name1 <= 0) && __ste_email_id0 == 0) && __ste_client_autoResponse0 <= 0) && __ste_email_to1 <= 0) && __SELECTED_FEATURE_AddressBook <= 0) && __ste_Client_Keyring1_PublicKey2 <= 0) && bob___0 <= 1) && 0 <= __ste_Client_Keyring0_PublicKey0) && __ste_client_forwardReceiver3 <= 0) && __ste_Client_AddressBook2_Address2 == 0) && 0 <= __ste_Client_Keyring1_PublicKey2) && \result <= 1) && __ste_Client_AddressBook0_Address0 <= 0) && 0 <= __ste_email_signKey1) && 1 <= queue_empty) && __ste_email_signKey1 <= 0) && 0 <= __ste_client_forwardReceiver3) && __ste_email_subject0 <= 0) && 0 <= __ste_client_autoResponse0) && 1 <= bob___0) && 0 <= __ste_Client_AddressBook0_Alias2) && __ste_client_outbuffer0 == 0) && __SELECTED_FEATURE_Verify <= 0) && 0 <= retValue_acc + 2147483648) && __ste_ClientKeyring_size1 <= 0) && __ste_Client_Keyring1_User2 <= 0) && tmp == 1) && 0 <= head) && __SELECTED_FEATURE_Base == 0) && __ste_Client_AddressBook1_Alias2 <= 0) && 0 <= __ste_Client_AddressBook0_Address2) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && 0 <= __ste_email_subject0) && __ste_email_from0 <= 0) && 0 <= __ste_Client_AddressBook1_Alias0) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && 0 <= queued_client) && __ste_client_privateKey0 <= 123) && __ste_Client_AddressBook1_Alias0 <= 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && 0 <= __ste_ClientKeyring_size1) && 0 <= __ste_client_forwardReceiver2) && __ste_client_name2 == 0) && 0 <= __ste_Client_AddressBook0_Address1) && __ste_email_encryptionKey0 <= 0) && __ste_client_idCounter0 <= 1) && __ste_email_subject1 == 0) && __ste_ClientKeyring_size0 <= 0) && __ste_email_id1 <= 0) && 0 <= __ste_Client_AddressBook0_Address0) && __ste_Client_Keyring1_User0 <= 0) && __ste_Client_AddressBook0_Alias2 <= 0) && __ste_Client_AddressBook0_Address2 <= 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && __ste_email_from1 <= 0) && head <= 0) && __ste_client_forwardReceiver1 <= 0) && __ste_Client_Keyring1_User1 == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_to0 <= 0) && __ste_Client_Keyring2_User1 <= 0) && 0 <= __ste_email_isSigned0) && 0 <= __SELECTED_FEATURE_Verify) && 0 <= __ste_Client_AddressBook1_Alias2) && 0 <= __ste_client_autoResponse2) && __ste_email_subject1 == 0) && retValue_acc <= 2147483647) && 0 <= __ste_Client_Keyring2_User1) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && __ste_client_name0 <= 0) && 1 <= __ste_client_idCounter0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && 0 <= __ste_ClientKeyring_size0) && __ste_email_isEncrypted1 <= 0) && __GUIDSL_ROOT_PRODUCTION == 0) && 0 <= #NULL) && 123 <= __ste_client_privateKey0) && chuck == 0) && 0 <= __ste_client_forwardReceiver1) && __ste_client_name0 == 0) && __ste_Client_AddressBook2_Address1 <= 0) && __ste_client_outbuffer2 == 0) && bob <= 1) && __ste_client_forwardReceiver2 <= 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_client_autoResponse2 <= 0) && __ste_email_encryptionKey1 == 0) && __ste_email_body1 == 0) && __ste_email_isSigned0 <= 0) && 1 <= bob) && __ste_ClientKeyring_size2 == 0) && 0 <= __ste_client_name1) && retValue_acc <= 1) && 0 <= __ste_email_encryptionKey0) && #NULL == 0) && queued_client <= 0 [2022-12-14 06:05:18,983 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && \old(rjh___0) <= 2) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_client_idCounter1 <= 2) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __cil_tmp1 == 6) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 1 <= bob___0) && __ste_Client_AddressBook1_Alias2 == 0) && 2 <= __ste_client_idCounter1) && __ste_client_outbuffer0 == 0) && 0 <= retValue_acc + 2147483648) && 2 <= rjh___0) && tmp == 1) && queue_empty == 1) && rjh___0 <= 2) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_client_privateKey0 <= 123) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head == 0) && 2 <= \old(rjh___0)) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && retValue_acc <= 2147483647) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && 123 <= __ste_client_privateKey0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && retValue_acc == 1) && #NULL == 0) && __ste_email_signKey1 == 0 [2022-12-14 06:05:18,983 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && 456 <= __ste_client_privateKey1) && 3 <= chuck___0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __cil_tmp2 == 0) && __ste_client_outbuffer3 == 0) && 1 <= \result) && \old(rjh___0) <= 2) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && \old(chuck___0) <= 3) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_client_idCounter2 <= 3) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __cil_tmp1 == 6) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_client_privateKey1 <= 456) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && 3 <= __ste_client_idCounter2) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && chuck___0 <= 3) && 3 == chuck) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 1 <= bob___0) && 3 <= chuck___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && 0 <= retValue_acc + 2147483648) && 2 <= rjh___0) && tmp == 1) && queue_empty == 1) && rjh___0 <= 2) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && 3 <= \old(chuck___0)) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && \old(chuck___0) <= 3) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head == 0) && chuck___0 <= 3) && 2 <= \old(rjh___0)) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && 7 == __cil_tmp2) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && retValue_acc <= 2147483647) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && 3 <= \old(chuck___0)) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && retValue_acc == 1) && #NULL == 0) && __ste_email_signKey1 == 0 [2022-12-14 06:05:18,983 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((__SELECTED_FEATURE_Sign == 0 && __ste_client_outbuffer3 == 0) && 1 <= \result) && \old(rjh___0) <= 2) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && \old(bob___0) <= 1) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_client_idCounter1 <= 2) && \old(bob___0) <= 1) && 0 <= __ste_Client_Keyring0_PublicKey2) && 0 <= __ste_ClientAddressBook_size0) && 2 <= rjh) && 0 <= __SELECTED_FEATURE_Encrypt) && 0 <= __ste_client_autoResponse1) && 0 <= __ste_client_outbuffer0) && __ste_Client_Keyring2_PublicKey2 <= 0) && 0 <= __ste_client_outbuffer1) && 0 <= __ste_ClientAddressBook_size1) && queued_message <= 0) && __ste_email_isSignatureVerified0 <= 0) && __ste_client_name0 <= 0) && 0 <= __ste_Client_AddressBook0_Alias1) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && chuck <= 0) && 0 <= __SELECTED_FEATURE_AutoResponder) && __ste_email_body0 == 0) && __SELECTED_FEATURE_Keys <= 0) && 0 <= __ste_email_isSigned1) && __SELECTED_FEATURE_Decrypt <= 0) && __ste_Client_Keyring0_User2 == 0) && __ste_Client_Keyring1_PublicKey0 <= 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_client_name1 == 0) && __GUIDSL_NON_TERMINAL_main <= 0) && __ste_Client_AddressBook2_Address0 <= 0) && __SELECTED_FEATURE_AutoResponder <= 0) && __ste_email_id0 <= 0) && 0 <= __ste_client_name2) && head == 0) && __GUIDSL_ROOT_PRODUCTION <= 0) && __ste_Client_AddressBook2_Alias1 <= 0) && 0 <= __GUIDSL_ROOT_PRODUCTION) && __ste_Email_counter <= 0) && __ste_Client_Keyring2_User2 <= 0) && __ste_email_body1 <= 0) && 0 <= __SELECTED_FEATURE_Decrypt) && 0 <= __cil_tmp1) && 0 <= __ste_email_to0) && __cil_tmp1 <= 0) && __cil_tmp1 <= 6) && 0 <= __ste_email_to1) && queue_empty <= 1) && __ste_email_signKey0 == 0) && 0 <= __ste_Client_AddressBook2_Alias1) && 0 <= __ste_Client_Keyring2_User2) && 0 <= __ste_Client_Keyring1_User2) && 0 <= __ste_email_from0) && 0 <= __ste_email_isEncrypted1) && #NULL <= 0) && 0 <= __ste_Client_Keyring1_User0) && 0 <= __SELECTED_FEATURE_AddressBook) && __ste_Client_Keyring0_PublicKey1 == 0) && 0 <= __ste_email_from1) && __SELECTED_FEATURE_Forward == 0) && 1 <= retValue_acc) && 0 <= __ste_email_isEncrypted0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_Client_Keyring0_PublicKey2 <= 0) && 6 <= __cil_tmp1) && __ste_Client_Keyring2_PublicKey1 == 0) && 0 <= __ste_email_id1) && __ste_Client_AddressBook0_Address1 <= 0) && __ste_email_body0 == 0) && __ste_email_isEncrypted0 <= 0) && __ste_Client_AddressBook0_Alias0 == 0) && 0 <= __ste_Client_AddressBook2_Address1) && 0 <= __ste_client_name0) && __ste_Client_Keyring0_PublicKey0 <= 0) && __ste_client_name1 <= 0) && __ste_client_autoResponse0 <= 0) && \old(rjh___0) <= 2) && __ste_email_to1 <= 0) && __SELECTED_FEATURE_AddressBook <= 0) && __ste_Client_Keyring1_PublicKey2 <= 0) && bob___0 <= 1) && 0 <= __ste_Client_Keyring0_PublicKey0) && __ste_client_forwardReceiver3 <= 0) && __ste_Client_AddressBook2_Address2 == 0) && __ste_ClientAddressBook_size0 <= 0) && 0 <= __ste_Client_Keyring1_PublicKey2) && \result <= 1) && __ste_Client_AddressBook0_Address0 <= 0) && 0 <= __ste_client_name0) && 0 <= __ste_email_signKey1) && 0 <= __ste_email_body1) && 1 <= queue_empty) && __ste_email_signKey1 <= 0) && 0 <= __ste_client_forwardReceiver3) && __ste_client_name2 <= 0) && __ste_email_isSigned1 <= 0) && __SELECTED_FEATURE_Encrypt <= 0) && 0 <= __ste_Email_counter) && __ste_email_subject0 <= 0) && 0 <= __ste_client_autoResponse0) && 1 <= bob___0) && 0 <= __ste_Client_AddressBook0_Alias2) && 0 <= queued_message) && 2 <= __ste_client_idCounter1) && __SELECTED_FEATURE_Verify <= 0) && 0 <= retValue_acc + 2147483648) && __ste_ClientKeyring_size1 <= 0) && __ste_Client_Keyring1_User2 <= 0) && 2 <= rjh___0) && 0 <= chuck) && tmp == 1) && 0 <= head) && rjh___0 <= 2) && __SELECTED_FEATURE_Base == 0) && __ste_Client_AddressBook1_Alias2 <= 0) && 0 <= __ste_Client_AddressBook0_Address2) && __ste_client_privateKey1 == 456) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && 0 <= __ste_email_subject0) && __ste_email_from0 <= 0) && 0 <= __ste_Client_AddressBook1_Alias0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && 0 <= queued_client) && 0 <= __SELECTED_FEATURE_Keys) && __ste_Client_AddressBook1_Alias0 <= 0) && 0 <= __ste_Client_Keyring1_PublicKey0) && __ste_Client_Keyring2_PublicKey0 == 0) && 0 <= __ste_email_isSignatureVerified0) && __ste_Client_AddressBook1_Address0 == 0) && 0 <= __ste_ClientKeyring_size1) && 0 <= __ste_client_forwardReceiver2) && __ste_client_name2 == 0) && 0 <= __ste_Client_AddressBook0_Address1) && 2 <= \old(rjh___0)) && __ste_email_encryptionKey0 <= 0) && __ste_email_subject1 == 0) && __ste_ClientKeyring_size0 <= 0) && __ste_email_id1 <= 0) && 0 <= __ste_Client_AddressBook0_Address0) && __ste_Client_Keyring1_User0 <= 0) && __ste_Client_AddressBook0_Alias2 <= 0) && __ste_Client_AddressBook0_Address2 <= 0) && __ste_client_autoResponse1 <= 0) && bob___0 <= 1) && __ste_client_outbuffer0 <= 0) && __ste_email_from1 <= 0) && head <= 0) && __ste_client_forwardReceiver1 <= 0) && 2 <= \old(rjh___0)) && __ste_Client_Keyring1_User1 == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_to0 <= 0) && __ste_Client_Keyring2_User1 <= 0) && 0 <= __ste_email_isSigned0) && 0 <= __SELECTED_FEATURE_Verify) && 0 <= __ste_Client_AddressBook1_Alias2) && 0 <= __ste_client_autoResponse2) && __ste_email_subject1 == 0) && 0 <= __ste_Client_AddressBook2_Address0) && retValue_acc <= 2147483647) && 0 <= __ste_Client_Keyring2_User1) && __ste_Client_AddressBook1_Address1 == 0) && __ste_client_name0 <= 0) && 0 <= __ste_ClientKeyring_size0) && __ste_email_isEncrypted1 <= 0) && 0 <= #NULL) && rjh <= 2) && __ste_Client_AddressBook0_Alias1 <= 0) && 0 <= __ste_client_forwardReceiver1) && 0 <= __ste_Client_Keyring2_PublicKey2) && __ste_Client_AddressBook2_Address1 <= 0) && __ste_client_outbuffer2 == 0) && bob <= 1) && 0 <= __GUIDSL_NON_TERMINAL_main) && __ste_client_forwardReceiver2 <= 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __ste_client_autoResponse2 <= 0) && __ste_email_encryptionKey1 == 0) && __ste_email_body1 == 0) && __ste_email_isSigned0 <= 0) && 1 <= bob) && __ste_client_outbuffer1 <= 0) && __ste_ClientKeyring_size2 == 0) && __ste_ClientAddressBook_size1 <= 0) && 0 <= __ste_client_name1) && retValue_acc <= 1) && 0 <= __ste_email_id0) && 0 <= __ste_email_encryptionKey0) && #NULL == 0) && queued_client <= 0 [2022-12-14 06:05:18,983 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((__ste_Client_Keyring1_User2 == 0 && __GUIDSL_NON_TERMINAL_main == 0) && 3 <= chuck___0) && __ste_email_isEncrypted1 == 0) && __SELECTED_FEATURE_Sign == 0) && __ste_client_outbuffer3 == 0) && 1 <= \result) && \old(rjh___0) <= 2) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && \old(chuck___0) <= 3) && __ste_Client_Keyring1_User0 == 0) && __ste_client_idCounter2 <= 3) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && 789 == __ste_client_privateKey2) && __cil_tmp1 == 6) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_email_from0 == 0) && bob___0 <= 1) && __ste_client_forwardReceiver3 <= 0) && 3 <= __ste_client_idCounter2) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && 0 <= __cil_tmp2) && __ste_Client_AddressBook0_Address0 <= 0) && chuck___0 <= 3) && 3 == chuck) && __ste_Client_AddressBook2_Address1 == 0) && 0 <= __ste_email_signKey1) && __ste_email_signKey1 <= 0) && 0 <= __ste_client_forwardReceiver3) && __ste_email_subject0 <= 0) && 1 <= bob___0) && 0 <= __ste_Client_AddressBook0_Alias2) && 3 <= chuck___0) && __ste_client_outbuffer0 == 0) && __SELECTED_FEATURE_Verify <= 0) && 0 <= retValue_acc + 2147483648) && __ste_ClientKeyring_size1 <= 0) && 2 <= rjh___0) && tmp == 1) && 0 <= head) && queue_empty == 1) && rjh___0 <= 2) && __SELECTED_FEATURE_Base == 0) && __ste_Client_AddressBook1_Alias2 <= 0) && 0 <= __ste_Client_AddressBook0_Address2) && __ste_client_forwardReceiver0 == 0) && 3 <= \old(chuck___0)) && __ste_Client_Keyring2_User0 == 0) && 0 <= __ste_email_subject0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && 0 <= __ste_Client_AddressBook1_Alias0) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && 0 <= queued_client) && __ste_Client_AddressBook1_Alias0 <= 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && 0 <= __ste_ClientKeyring_size1) && 0 <= __ste_client_forwardReceiver2) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_encryptionKey0 <= 0) && __ste_email_subject1 == 0) && __ste_ClientKeyring_size0 <= 0) && 0 <= __ste_Client_AddressBook0_Address0) && \old(chuck___0) <= 3) && __ste_Client_AddressBook0_Alias2 <= 0) && __ste_Client_AddressBook0_Address2 <= 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head <= 0) && chuck___0 <= 3) && __ste_client_forwardReceiver1 <= 0) && 2 <= \old(rjh___0)) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_Client_Keyring2_User1 <= 0) && 0 <= __ste_email_isSigned0) && 0 <= __SELECTED_FEATURE_Verify) && 7 == __cil_tmp2) && __cil_tmp2 <= 0) && 0 <= __ste_Client_AddressBook1_Alias2) && 0 <= __ste_client_autoResponse2) && __ste_email_subject1 == 0) && __ste_email_isEncrypted0 == 0) && retValue_acc <= 2147483647) && 0 <= __ste_Client_Keyring2_User1) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && 0 <= __ste_ClientKeyring_size0) && __GUIDSL_ROOT_PRODUCTION == 0) && 3 <= \old(chuck___0)) && 0 <= __ste_client_forwardReceiver1) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && bob <= 1) && __ste_client_forwardReceiver2 <= 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_client_autoResponse2 <= 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_email_isSigned0 <= 0) && 1 <= bob) && __ste_ClientKeyring_size2 == 0) && retValue_acc == 1) && 0 <= __ste_email_encryptionKey0) && #NULL == 0) && queued_client <= 0 [2022-12-14 06:05:18,984 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || ((\old(__ste_ClientKeyring_size1) == __ste_ClientKeyring_size1 && \old(__ste_ClientKeyring_size2) == __ste_ClientKeyring_size2) && \old(__ste_ClientKeyring_size0) == __ste_ClientKeyring_size0)) || !(__ste_email_from0 == 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(0 <= __ste_Client_Keyring0_User0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_email_to0 == 0)) || !(\old(handle) == bob)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_email_to1 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(#NULL == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(0 <= __ste_Client_Keyring0_PublicKey0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_from1 == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0) [2022-12-14 06:05:18,985 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((__ste_email_signKey0 == \old(__ste_email_signKey0) && 0 <= __ste_email_to0) && 0 <= __ste_email_to1) && 0 <= __ste_email_from0) && \old(receiver) == receiver) && from == __ste_email_from0) && __ste_email_to1 <= 0) && __ste_email_isSignatureVerified0 == \old(__ste_email_isSignatureVerified0)) && to <= 2) && from == \old(from)) && 1 <= sender) && sender <= 1) && __ste_email_from0 <= 0) && \old(to) <= 2) && __ste_email_isSigned1 == \old(__ste_email_isSigned1)) && 2 <= \old(to)) && __ste_email_isSignatureVerified1 == \old(__ste_email_isSignatureVerified1)) && __ste_email_to0 <= 0) && __ste_email_isSigned0 == \old(__ste_email_isSigned0)) && 2 <= to) && 1 == msg) && __ste_email_signKey1 == \old(__ste_email_signKey1)) || ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(__ste_email_signKey0) == 0)) || !(__ste_Client_Keyring0_User0 <= 2)) || !(\old(__ste_email_from0) == 0)) || !(__ste_ClientKeyring_size0 <= 2147483647)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(0 <= __ste_Client_Keyring0_User0)) || !(0 <= 2147483647 + __ste_ClientKeyring_size0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(\old(__ste_email_to0) == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(bob == \old(sender))) || !(\old(__ste_email_to1) == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(\old(receiver) == rjh)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(#NULL == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(__ste_email_from1) == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(0 <= __ste_Client_Keyring0_PublicKey0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_Client_Keyring0_PublicKey0 <= 456)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(\old(__ste_email_to0) == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(bob == \old(sender))) || !(\old(__ste_email_to1) == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(\old(receiver) == rjh)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(__ste_email_from1) == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0))) [2022-12-14 06:05:18,986 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_email_to1 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_to0 == rjh)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(__ste_email_signKey0) == 0)) || !(__ste_Client_Keyring0_User0 <= 2)) || !(\old(__ste_email_from0) == 0)) || !(__ste_ClientKeyring_size0 <= 2147483647)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(0 <= __ste_Client_Keyring0_User0)) || !(0 <= 2147483647 + __ste_ClientKeyring_size0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_email_to1 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(#NULL == 0)) || !(__ste_email_to0 == rjh)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(0 <= __ste_Client_Keyring0_PublicKey0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_Client_Keyring0_PublicKey0 <= 456)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0))) || (((((((__ste_email_signKey0 == \old(__ste_email_signKey0) && \old(__ste_email_from0) == __ste_email_from0) && __ste_email_isSignatureVerified0 == \old(__ste_email_isSignatureVerified0)) && \old(__ste_email_from1) == __ste_email_from1) && __ste_email_isSigned1 == \old(__ste_email_isSigned1)) && __ste_email_isSignatureVerified1 == \old(__ste_email_isSignatureVerified1)) && __ste_email_isSigned0 == \old(__ste_email_isSigned0)) && __ste_email_signKey1 == \old(__ste_email_signKey1)) [2022-12-14 06:05:18,987 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(tmp == 0) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_email_to1 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_to0 == rjh)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(__ste_email_signKey0) == 0)) || !(__ste_Client_Keyring0_User0 <= 2)) || !(\old(__ste_email_from0) == 0)) || !(__ste_ClientKeyring_size0 <= 2147483647)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(0 <= __ste_Client_Keyring0_User0)) || !(0 <= 2147483647 + __ste_ClientKeyring_size0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_email_to1 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(#NULL == 0)) || !(__ste_email_to0 == rjh)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(0 <= __ste_Client_Keyring0_PublicKey0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_Client_Keyring0_PublicKey0 <= 456)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0))) || ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((1 <= msg && 1 <= \old(client)) && \old(msg) <= 1) && 0 <= 2147483648 + \result) && __ste_client_privateKey0 <= 2147483647) && __utac__ad__arg1 == \old(msg)) && msg == \old(msg)) && retValue_acc <= 2147483647) && __ste_email_isSignatureVerified1 <= 0) && 1 <= client) && msg == \old(msg)) && 0 <= retValue_acc + 2147483648) && client == \old(client)) && __utac__ad__arg1 == msg) && msg <= 1) && __ste_email_isSignatureVerified0 <= 0) && 0 <= privkey + 2147483648) && 0 <= __ste_client_privateKey0 + 2147483648) && msg == \old(msg)) && __ste_email_from0 <= 2147483647) && privkey <= 2147483647) && client <= 1) && 1 <= client) && 0 <= __ste_email_isSigned1) && 0 <= __ste_email_from0 + 2147483648) && \result <= 2147483647) && 1 <= client) && \old(client) <= 1) && retValue_acc <= 2147483647) && 1 <= handle) && 0 <= __ste_email_signKey0 + 2147483648) && handle <= 1) && __ste_email_signKey0 <= 2147483647) && tmp <= 2147483647) && 1 <= \old(msg)) && msg == \old(msg)) && __ste_client_idCounter0 <= 2147483647) && __ste_email_isSigned0 <= 1) && 1 <= \old(msg)) && 0 <= retValue_acc + 2147483648) && 0 <= 2147483648 + tmp) && 0 <= __ste_email_signKey1) && __ste_email_signKey1 <= 0) && __ste_email_isSigned1 <= 0) && tmp <= 2147483647) && 0 <= __ste_email_isSignatureVerified1) && client <= 1) && 1 <= \old(client)) && \old(handle) <= 1) && 1 <= msg) && 1 <= msg) && client <= 1) && 0 <= __ste_email_isSignatureVerified0) && 1 <= \old(handle)) && tmp == \old(client)) && \old(client) <= 1) && \old(client) <= 1) && \old(msg) <= 1) && 1 <= msg) && 0 <= __ste_email_isSigned0) && msg <= 1) && msg <= 1) && msg <= 1) && 0 <= tmp + 2147483648) && \result <= 2147483647) && 1 <= \old(handle)) && handle <= 1) && 1 <= \old(msg)) && tmp == 1) && client <= 1) && 0 <= \result + 2147483648) && 2 <= \old(client)) && 2 <= \old(client)) && client == \old(client)) && 1 <= \old(client)) && 0 <= __ste_client_idCounter0 + 2147483648) && 1 <= client) && msg == \old(msg)) && client <= 2) && 1 <= handle) && \old(handle) <= 1) && \old(client) <= 2) && \old(msg) <= 1)) [2022-12-14 06:05:18,987 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: !(tmp == 0) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_email_to1 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_to0 == rjh)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(__ste_email_signKey0) == 0)) || !(__ste_Client_Keyring0_User0 <= 2)) || !(\old(__ste_email_from0) == 0)) || !(__ste_ClientKeyring_size0 <= 2147483647)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(0 <= __ste_Client_Keyring0_User0)) || !(0 <= 2147483647 + __ste_ClientKeyring_size0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_email_to1 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(#NULL == 0)) || !(__ste_email_to0 == rjh)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(0 <= __ste_Client_Keyring0_PublicKey0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_Client_Keyring0_PublicKey0 <= 456)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0))) || ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((1 <= msg && 1 <= \old(client)) && \old(msg) <= 1) && 0 <= 2147483648 + \result) && __ste_client_privateKey0 <= 2147483647) && __utac__ad__arg1 == \old(msg)) && msg == \old(msg)) && retValue_acc <= 2147483647) && __ste_email_isSignatureVerified1 <= 0) && 1 <= client) && msg == \old(msg)) && 0 <= retValue_acc + 2147483648) && client == \old(client)) && __utac__ad__arg1 == msg) && msg <= 1) && __ste_email_isSignatureVerified0 <= 0) && 0 <= privkey + 2147483648) && 0 <= __ste_client_privateKey0 + 2147483648) && msg == \old(msg)) && __ste_email_from0 <= 2147483647) && privkey <= 2147483647) && client <= 1) && 1 <= client) && 0 <= __ste_email_isSigned1) && 0 <= __ste_email_from0 + 2147483648) && \result <= 2147483647) && 1 <= client) && \old(client) <= 1) && retValue_acc <= 2147483647) && 1 <= handle) && 0 <= __ste_email_signKey0 + 2147483648) && handle <= 1) && __ste_email_signKey0 <= 2147483647) && tmp <= 2147483647) && 1 <= \old(msg)) && msg == \old(msg)) && __ste_client_idCounter0 <= 2147483647) && __ste_email_isSigned0 <= 1) && 1 <= \old(msg)) && 0 <= retValue_acc + 2147483648) && 0 <= 2147483648 + tmp) && 0 <= __ste_email_signKey1) && __ste_email_signKey1 <= 0) && __ste_email_isSigned1 <= 0) && tmp <= 2147483647) && 0 <= __ste_email_isSignatureVerified1) && client <= 1) && 1 <= \old(client)) && \old(handle) <= 1) && 1 <= msg) && 1 <= msg) && client <= 1) && 0 <= __ste_email_isSignatureVerified0) && 1 <= \old(handle)) && tmp == \old(client)) && \old(client) <= 1) && \old(client) <= 1) && \old(msg) <= 1) && 1 <= msg) && 0 <= __ste_email_isSigned0) && msg <= 1) && msg <= 1) && msg <= 1) && 0 <= tmp + 2147483648) && \result <= 2147483647) && 1 <= \old(handle)) && handle <= 1) && 1 <= \old(msg)) && tmp == 1) && client <= 1) && 0 <= \result + 2147483648) && 2 <= \old(client)) && 2 <= \old(client)) && client == \old(client)) && 1 <= \old(client)) && 0 <= __ste_client_idCounter0 + 2147483648) && 1 <= client) && msg == \old(msg)) && client <= 2) && 1 <= handle) && \old(handle) <= 1) && \old(client) <= 2) && \old(msg) <= 1)) [2022-12-14 06:05:19,027 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/witness.graphml [2022-12-14 06:05:19,027 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-14 06:05:19,027 INFO L158 Benchmark]: Toolchain (without parser) took 588570.00ms. Allocated memory was 121.6MB in the beginning and 448.8MB in the end (delta: 327.2MB). Free memory was 90.4MB in the beginning and 312.0MB in the end (delta: -221.5MB). Peak memory consumption was 106.8MB. Max. memory is 16.1GB. [2022-12-14 06:05:19,028 INFO L158 Benchmark]: CDTParser took 0.13ms. Allocated memory is still 121.6MB. Free memory is still 76.5MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-14 06:05:19,028 INFO L158 Benchmark]: CACSL2BoogieTranslator took 601.34ms. Allocated memory is still 121.6MB. Free memory was 90.1MB in the beginning and 50.6MB in the end (delta: 39.5MB). Peak memory consumption was 39.8MB. Max. memory is 16.1GB. [2022-12-14 06:05:19,028 INFO L158 Benchmark]: Boogie Procedure Inliner took 67.12ms. Allocated memory is still 121.6MB. Free memory was 50.6MB in the beginning and 91.4MB in the end (delta: -40.8MB). Peak memory consumption was 10.9MB. Max. memory is 16.1GB. [2022-12-14 06:05:19,028 INFO L158 Benchmark]: Boogie Preprocessor took 39.16ms. Allocated memory was 121.6MB in the beginning and 146.8MB in the end (delta: 25.2MB). Free memory was 91.4MB in the beginning and 116.8MB in the end (delta: -25.4MB). Peak memory consumption was 6.4MB. Max. memory is 16.1GB. [2022-12-14 06:05:19,028 INFO L158 Benchmark]: RCFGBuilder took 971.04ms. Allocated memory is still 146.8MB. Free memory was 116.0MB in the beginning and 92.7MB in the end (delta: 23.3MB). Peak memory consumption was 65.0MB. Max. memory is 16.1GB. [2022-12-14 06:05:19,028 INFO L158 Benchmark]: TraceAbstraction took 586799.17ms. Allocated memory was 146.8MB in the beginning and 448.8MB in the end (delta: 302.0MB). Free memory was 91.6MB in the beginning and 327.9MB in the end (delta: -236.3MB). Peak memory consumption was 287.0MB. Max. memory is 16.1GB. [2022-12-14 06:05:19,029 INFO L158 Benchmark]: Witness Printer took 86.64ms. Allocated memory is still 448.8MB. Free memory was 327.9MB in the beginning and 312.0MB in the end (delta: 15.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-12-14 06:05:19,030 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13ms. Allocated memory is still 121.6MB. Free memory is still 76.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 601.34ms. Allocated memory is still 121.6MB. Free memory was 90.1MB in the beginning and 50.6MB in the end (delta: 39.5MB). Peak memory consumption was 39.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 67.12ms. Allocated memory is still 121.6MB. Free memory was 50.6MB in the beginning and 91.4MB in the end (delta: -40.8MB). Peak memory consumption was 10.9MB. Max. memory is 16.1GB. * Boogie Preprocessor took 39.16ms. Allocated memory was 121.6MB in the beginning and 146.8MB in the end (delta: 25.2MB). Free memory was 91.4MB in the beginning and 116.8MB in the end (delta: -25.4MB). Peak memory consumption was 6.4MB. Max. memory is 16.1GB. * RCFGBuilder took 971.04ms. Allocated memory is still 146.8MB. Free memory was 116.0MB in the beginning and 92.7MB in the end (delta: 23.3MB). Peak memory consumption was 65.0MB. Max. memory is 16.1GB. * TraceAbstraction took 586799.17ms. Allocated memory was 146.8MB in the beginning and 448.8MB in the end (delta: 302.0MB). Free memory was 91.6MB in the beginning and 327.9MB in the end (delta: -236.3MB). Peak memory consumption was 287.0MB. Max. memory is 16.1GB. * Witness Printer took 86.64ms. Allocated memory is still 448.8MB. Free memory was 327.9MB in the beginning and 312.0MB in the end (delta: 15.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 742]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 16 procedures, 133 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 586.7s, OverallIterations: 8, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 86.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 83.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 907 SdHoareTripleChecker+Valid, 34.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 840 mSDsluCounter, 11198 SdHoareTripleChecker+Invalid, 32.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 9827 mSDsCounter, 82 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 11859 IncrementalHoareTripleChecker+Invalid, 11941 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 82 mSolverCounterUnsat, 1371 mSDtfsCounter, 11859 mSolverCounterSat, 0.3s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 600 GetRequests, 452 SyntacticMatches, 0 SemanticMatches, 148 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1605 ImplicationChecksByTransitivity, 290.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=472occurred in iteration=7, InterpolantAutomatonStates: 142, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.9s AutomataMinimizationTime, 8 MinimizatonAttempts, 289 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 84 LocationsWithAnnotation, 733 PreInvPairs, 1023 NumberOfFragments, 22351 HoareAnnotationTreeSize, 733 FomulaSimplifications, 608976 FormulaSimplificationTreeSizeReduction, 29.3s HoareSimplificationTime, 84 FomulaSimplificationsInter, 35722 FormulaSimplificationTreeSizeReductionInter, 54.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 659 NumberOfCodeBlocks, 659 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 831 ConstructedInterpolants, 0 QuantifiedInterpolants, 1047 SizeOfPredicates, 0 NumberOfNonLiveVariables, 2818 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 14 InterpolantComputations, 5 PerfectInterpolantSequences, 239/257 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 172.5s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 22, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 159, DAG_INTERPRETER_EARLY_EXITS: 3, TOOLS_POST_APPLICATIONS: 139, TOOLS_POST_TIME: 34.8s, TOOLS_POST_CALL_APPLICATIONS: 110, TOOLS_POST_CALL_TIME: 81.9s, TOOLS_POST_RETURN_APPLICATIONS: 76, TOOLS_POST_RETURN_TIME: 19.1s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 325, TOOLS_QUANTIFIERELIM_TIME: 135.5s, TOOLS_QUANTIFIERELIM_MAX_TIME: 4.5s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 441, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 96, DOMAIN_JOIN_TIME: 34.5s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 3, DOMAIN_WIDEN_TIME: 1.4s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 6, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 159, DOMAIN_ISBOTTOM_TIME: 0.6s, LOOP_SUMMARIZER_APPLICATIONS: 3, LOOP_SUMMARIZER_CACHE_MISSES: 3, LOOP_SUMMARIZER_OVERALL_TIME: 51.4s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 51.4s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 6, CALL_SUMMARIZER_APPLICATIONS: 76, CALL_SUMMARIZER_CACHE_MISSES: 15, CALL_SUMMARIZER_OVERALL_TIME: 0.1s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.1s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 3035, DAG_COMPRESSION_RETAINED_NODES: 441, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 248]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 139]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && \old(rjh___0) <= 2) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_client_idCounter1 <= 2) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __cil_tmp1 == 6) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 1 <= bob___0) && __ste_Client_AddressBook1_Alias2 == 0) && 2 <= __ste_client_idCounter1) && __ste_client_outbuffer0 == 0) && 0 <= retValue_acc + 2147483648) && 2 <= rjh___0) && tmp == 1) && queue_empty == 1) && rjh___0 <= 2) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_client_privateKey0 <= 123) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head == 0) && 2 <= \old(rjh___0)) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && retValue_acc <= 2147483647) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && 123 <= __ste_client_privateKey0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && retValue_acc == 1) && #NULL == 0) && __ste_email_signKey1 == 0 - InvariantResult [Line: 2693]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: !(tmp == 0) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_email_to1 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_to0 == rjh)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(__ste_email_signKey0) == 0)) || !(__ste_Client_Keyring0_User0 <= 2)) || !(\old(__ste_email_from0) == 0)) || !(__ste_ClientKeyring_size0 <= 2147483647)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(0 <= __ste_Client_Keyring0_User0)) || !(0 <= 2147483647 + __ste_ClientKeyring_size0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_email_to1 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(#NULL == 0)) || !(__ste_email_to0 == rjh)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(0 <= __ste_Client_Keyring0_PublicKey0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_Client_Keyring0_PublicKey0 <= 456)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0))) || ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((1 <= msg && 1 <= \old(client)) && \old(msg) <= 1) && 0 <= 2147483648 + \result) && __ste_client_privateKey0 <= 2147483647) && __utac__ad__arg1 == \old(msg)) && msg == \old(msg)) && retValue_acc <= 2147483647) && __ste_email_isSignatureVerified1 <= 0) && 1 <= client) && msg == \old(msg)) && 0 <= retValue_acc + 2147483648) && client == \old(client)) && __utac__ad__arg1 == msg) && msg <= 1) && __ste_email_isSignatureVerified0 <= 0) && 0 <= privkey + 2147483648) && 0 <= __ste_client_privateKey0 + 2147483648) && msg == \old(msg)) && __ste_email_from0 <= 2147483647) && privkey <= 2147483647) && client <= 1) && 1 <= client) && 0 <= __ste_email_isSigned1) && 0 <= __ste_email_from0 + 2147483648) && \result <= 2147483647) && 1 <= client) && \old(client) <= 1) && retValue_acc <= 2147483647) && 1 <= handle) && 0 <= __ste_email_signKey0 + 2147483648) && handle <= 1) && __ste_email_signKey0 <= 2147483647) && tmp <= 2147483647) && 1 <= \old(msg)) && msg == \old(msg)) && __ste_client_idCounter0 <= 2147483647) && __ste_email_isSigned0 <= 1) && 1 <= \old(msg)) && 0 <= retValue_acc + 2147483648) && 0 <= 2147483648 + tmp) && 0 <= __ste_email_signKey1) && __ste_email_signKey1 <= 0) && __ste_email_isSigned1 <= 0) && tmp <= 2147483647) && 0 <= __ste_email_isSignatureVerified1) && client <= 1) && 1 <= \old(client)) && \old(handle) <= 1) && 1 <= msg) && 1 <= msg) && client <= 1) && 0 <= __ste_email_isSignatureVerified0) && 1 <= \old(handle)) && tmp == \old(client)) && \old(client) <= 1) && \old(client) <= 1) && \old(msg) <= 1) && 1 <= msg) && 0 <= __ste_email_isSigned0) && msg <= 1) && msg <= 1) && msg <= 1) && 0 <= tmp + 2147483648) && \result <= 2147483647) && 1 <= \old(handle)) && handle <= 1) && 1 <= \old(msg)) && tmp == 1) && client <= 1) && 0 <= \result + 2147483648) && 2 <= \old(client)) && 2 <= \old(client)) && client == \old(client)) && 1 <= \old(client)) && 0 <= __ste_client_idCounter0 + 2147483648) && 1 <= client) && msg == \old(msg)) && client <= 2) && 1 <= handle) && \old(handle) <= 1) && \old(client) <= 2) && \old(msg) <= 1)) - InvariantResult [Line: 1546]: Loop Invariant Derived loop invariant: !(tmp == 0) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 329]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2671]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2243]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || ((\old(__ste_ClientKeyring_size1) == __ste_ClientKeyring_size1 && \old(__ste_ClientKeyring_size2) == __ste_ClientKeyring_size2) && \old(__ste_ClientKeyring_size0) == __ste_ClientKeyring_size0)) || !(__ste_email_from0 == 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(0 <= __ste_Client_Keyring0_User0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_email_to0 == 0)) || !(\old(handle) == bob)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_email_to1 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(#NULL == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(0 <= __ste_Client_Keyring0_PublicKey0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_from1 == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0) - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && 456 <= __ste_client_privateKey1) && 3 <= chuck___0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __cil_tmp2 == 0) && __ste_client_outbuffer3 == 0) && 1 <= \result) && \old(rjh___0) <= 2) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && \old(chuck___0) <= 3) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_client_idCounter2 <= 3) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __cil_tmp1 == 6) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_client_privateKey1 <= 456) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && 3 <= __ste_client_idCounter2) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && chuck___0 <= 3) && 3 == chuck) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 1 <= bob___0) && 3 <= chuck___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && 0 <= retValue_acc + 2147483648) && 2 <= rjh___0) && tmp == 1) && queue_empty == 1) && rjh___0 <= 2) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && 3 <= \old(chuck___0)) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && \old(chuck___0) <= 3) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head == 0) && chuck___0 <= 3) && 2 <= \old(rjh___0)) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && 7 == __cil_tmp2) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && retValue_acc <= 2147483647) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && 3 <= \old(chuck___0)) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && retValue_acc == 1) && #NULL == 0) && __ste_email_signKey1 == 0 - InvariantResult [Line: 2732]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2704]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1348]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_email_to1 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_to0 == rjh)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(__ste_email_signKey0) == 0)) || !(__ste_Client_Keyring0_User0 <= 2)) || !(\old(__ste_email_from0) == 0)) || !(__ste_ClientKeyring_size0 <= 2147483647)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(0 <= __ste_Client_Keyring0_User0)) || !(0 <= 2147483647 + __ste_ClientKeyring_size0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_email_to1 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(#NULL == 0)) || !(__ste_email_to0 == rjh)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(0 <= __ste_Client_Keyring0_PublicKey0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_Client_Keyring0_PublicKey0 <= 456)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0))) || (((((((__ste_email_signKey0 == \old(__ste_email_signKey0) && \old(__ste_email_from0) == __ste_email_from0) && __ste_email_isSignatureVerified0 == \old(__ste_email_isSignatureVerified0)) && \old(__ste_email_from1) == __ste_email_from1) && __ste_email_isSigned1 == \old(__ste_email_isSigned1)) && __ste_email_isSignatureVerified1 == \old(__ste_email_isSignatureVerified1)) && __ste_email_isSigned0 == \old(__ste_email_isSigned0)) && __ste_email_signKey1 == \old(__ste_email_signKey1)) - InvariantResult [Line: 128]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((__GUIDSL_NON_TERMINAL_main == 0 && __SELECTED_FEATURE_Sign == 0) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && rjh == 0) && \old(bob___0) <= 1) && __ste_client_autoResponse1 == 0) && __ste_Client_AddressBook2_Alias0 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Email_counter == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_client_name1 == 0) && head == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && 0 <= __ste_email_to0) && 0 <= __ste_email_to1) && queue_empty <= 1) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && 0 <= __ste_Client_Keyring1_User2) && 0 <= __ste_email_from0) && 0 <= __ste_email_isEncrypted1) && __SELECTED_FEATURE_Keys == 0) && #NULL <= 0) && 0 <= __ste_Client_Keyring1_User0) && 0 <= __SELECTED_FEATURE_AddressBook) && __ste_Client_Keyring0_PublicKey1 == 0) && 0 <= __ste_email_from1) && __SELECTED_FEATURE_Forward == 0) && 1 <= retValue_acc) && 0 <= __ste_email_isEncrypted0) && __ste_Client_Keyring0_User0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && 0 <= __ste_email_id1) && __ste_Client_AddressBook0_Address1 <= 0) && __ste_email_body0 == 0) && __ste_email_isEncrypted0 <= 0) && __ste_Client_AddressBook0_Alias0 == 0) && 0 <= __ste_Client_AddressBook2_Address1) && 0 <= __ste_client_name0) && __ste_Client_Keyring0_PublicKey0 <= 0) && __ste_client_name1 <= 0) && __ste_email_id0 == 0) && __ste_client_autoResponse0 <= 0) && __ste_email_to1 <= 0) && __SELECTED_FEATURE_AddressBook <= 0) && __ste_Client_Keyring1_PublicKey2 <= 0) && bob___0 <= 1) && 0 <= __ste_Client_Keyring0_PublicKey0) && __ste_client_forwardReceiver3 <= 0) && __ste_Client_AddressBook2_Address2 == 0) && 0 <= __ste_Client_Keyring1_PublicKey2) && \result <= 1) && __ste_Client_AddressBook0_Address0 <= 0) && 0 <= __ste_email_signKey1) && 1 <= queue_empty) && __ste_email_signKey1 <= 0) && 0 <= __ste_client_forwardReceiver3) && __ste_email_subject0 <= 0) && 0 <= __ste_client_autoResponse0) && 1 <= bob___0) && 0 <= __ste_Client_AddressBook0_Alias2) && __ste_client_outbuffer0 == 0) && __SELECTED_FEATURE_Verify <= 0) && 0 <= retValue_acc + 2147483648) && __ste_ClientKeyring_size1 <= 0) && __ste_Client_Keyring1_User2 <= 0) && tmp == 1) && 0 <= head) && __SELECTED_FEATURE_Base == 0) && __ste_Client_AddressBook1_Alias2 <= 0) && 0 <= __ste_Client_AddressBook0_Address2) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && 0 <= __ste_email_subject0) && __ste_email_from0 <= 0) && 0 <= __ste_Client_AddressBook1_Alias0) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && 0 <= queued_client) && __ste_client_privateKey0 <= 123) && __ste_Client_AddressBook1_Alias0 <= 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && 0 <= __ste_ClientKeyring_size1) && 0 <= __ste_client_forwardReceiver2) && __ste_client_name2 == 0) && 0 <= __ste_Client_AddressBook0_Address1) && __ste_email_encryptionKey0 <= 0) && __ste_client_idCounter0 <= 1) && __ste_email_subject1 == 0) && __ste_ClientKeyring_size0 <= 0) && __ste_email_id1 <= 0) && 0 <= __ste_Client_AddressBook0_Address0) && __ste_Client_Keyring1_User0 <= 0) && __ste_Client_AddressBook0_Alias2 <= 0) && __ste_Client_AddressBook0_Address2 <= 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && __ste_email_from1 <= 0) && head <= 0) && __ste_client_forwardReceiver1 <= 0) && __ste_Client_Keyring1_User1 == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_to0 <= 0) && __ste_Client_Keyring2_User1 <= 0) && 0 <= __ste_email_isSigned0) && 0 <= __SELECTED_FEATURE_Verify) && 0 <= __ste_Client_AddressBook1_Alias2) && 0 <= __ste_client_autoResponse2) && __ste_email_subject1 == 0) && retValue_acc <= 2147483647) && 0 <= __ste_Client_Keyring2_User1) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && __ste_client_name0 <= 0) && 1 <= __ste_client_idCounter0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && 0 <= __ste_ClientKeyring_size0) && __ste_email_isEncrypted1 <= 0) && __GUIDSL_ROOT_PRODUCTION == 0) && 0 <= #NULL) && 123 <= __ste_client_privateKey0) && chuck == 0) && 0 <= __ste_client_forwardReceiver1) && __ste_client_name0 == 0) && __ste_Client_AddressBook2_Address1 <= 0) && __ste_client_outbuffer2 == 0) && bob <= 1) && __ste_client_forwardReceiver2 <= 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_client_autoResponse2 <= 0) && __ste_email_encryptionKey1 == 0) && __ste_email_body1 == 0) && __ste_email_isSigned0 <= 0) && 1 <= bob) && __ste_ClientKeyring_size2 == 0) && 0 <= __ste_client_name1) && retValue_acc <= 1) && 0 <= __ste_email_encryptionKey0) && #NULL == 0) && queued_client <= 0 - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2771]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2796]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 149]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((__SELECTED_FEATURE_Sign == 0 && __ste_client_outbuffer3 == 0) && 1 <= \result) && \old(rjh___0) <= 2) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && \old(bob___0) <= 1) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_client_idCounter1 <= 2) && \old(bob___0) <= 1) && 0 <= __ste_Client_Keyring0_PublicKey2) && 0 <= __ste_ClientAddressBook_size0) && 2 <= rjh) && 0 <= __SELECTED_FEATURE_Encrypt) && 0 <= __ste_client_autoResponse1) && 0 <= __ste_client_outbuffer0) && __ste_Client_Keyring2_PublicKey2 <= 0) && 0 <= __ste_client_outbuffer1) && 0 <= __ste_ClientAddressBook_size1) && queued_message <= 0) && __ste_email_isSignatureVerified0 <= 0) && __ste_client_name0 <= 0) && 0 <= __ste_Client_AddressBook0_Alias1) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && chuck <= 0) && 0 <= __SELECTED_FEATURE_AutoResponder) && __ste_email_body0 == 0) && __SELECTED_FEATURE_Keys <= 0) && 0 <= __ste_email_isSigned1) && __SELECTED_FEATURE_Decrypt <= 0) && __ste_Client_Keyring0_User2 == 0) && __ste_Client_Keyring1_PublicKey0 <= 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_client_name1 == 0) && __GUIDSL_NON_TERMINAL_main <= 0) && __ste_Client_AddressBook2_Address0 <= 0) && __SELECTED_FEATURE_AutoResponder <= 0) && __ste_email_id0 <= 0) && 0 <= __ste_client_name2) && head == 0) && __GUIDSL_ROOT_PRODUCTION <= 0) && __ste_Client_AddressBook2_Alias1 <= 0) && 0 <= __GUIDSL_ROOT_PRODUCTION) && __ste_Email_counter <= 0) && __ste_Client_Keyring2_User2 <= 0) && __ste_email_body1 <= 0) && 0 <= __SELECTED_FEATURE_Decrypt) && 0 <= __cil_tmp1) && 0 <= __ste_email_to0) && __cil_tmp1 <= 0) && __cil_tmp1 <= 6) && 0 <= __ste_email_to1) && queue_empty <= 1) && __ste_email_signKey0 == 0) && 0 <= __ste_Client_AddressBook2_Alias1) && 0 <= __ste_Client_Keyring2_User2) && 0 <= __ste_Client_Keyring1_User2) && 0 <= __ste_email_from0) && 0 <= __ste_email_isEncrypted1) && #NULL <= 0) && 0 <= __ste_Client_Keyring1_User0) && 0 <= __SELECTED_FEATURE_AddressBook) && __ste_Client_Keyring0_PublicKey1 == 0) && 0 <= __ste_email_from1) && __SELECTED_FEATURE_Forward == 0) && 1 <= retValue_acc) && 0 <= __ste_email_isEncrypted0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_Client_Keyring0_PublicKey2 <= 0) && 6 <= __cil_tmp1) && __ste_Client_Keyring2_PublicKey1 == 0) && 0 <= __ste_email_id1) && __ste_Client_AddressBook0_Address1 <= 0) && __ste_email_body0 == 0) && __ste_email_isEncrypted0 <= 0) && __ste_Client_AddressBook0_Alias0 == 0) && 0 <= __ste_Client_AddressBook2_Address1) && 0 <= __ste_client_name0) && __ste_Client_Keyring0_PublicKey0 <= 0) && __ste_client_name1 <= 0) && __ste_client_autoResponse0 <= 0) && \old(rjh___0) <= 2) && __ste_email_to1 <= 0) && __SELECTED_FEATURE_AddressBook <= 0) && __ste_Client_Keyring1_PublicKey2 <= 0) && bob___0 <= 1) && 0 <= __ste_Client_Keyring0_PublicKey0) && __ste_client_forwardReceiver3 <= 0) && __ste_Client_AddressBook2_Address2 == 0) && __ste_ClientAddressBook_size0 <= 0) && 0 <= __ste_Client_Keyring1_PublicKey2) && \result <= 1) && __ste_Client_AddressBook0_Address0 <= 0) && 0 <= __ste_client_name0) && 0 <= __ste_email_signKey1) && 0 <= __ste_email_body1) && 1 <= queue_empty) && __ste_email_signKey1 <= 0) && 0 <= __ste_client_forwardReceiver3) && __ste_client_name2 <= 0) && __ste_email_isSigned1 <= 0) && __SELECTED_FEATURE_Encrypt <= 0) && 0 <= __ste_Email_counter) && __ste_email_subject0 <= 0) && 0 <= __ste_client_autoResponse0) && 1 <= bob___0) && 0 <= __ste_Client_AddressBook0_Alias2) && 0 <= queued_message) && 2 <= __ste_client_idCounter1) && __SELECTED_FEATURE_Verify <= 0) && 0 <= retValue_acc + 2147483648) && __ste_ClientKeyring_size1 <= 0) && __ste_Client_Keyring1_User2 <= 0) && 2 <= rjh___0) && 0 <= chuck) && tmp == 1) && 0 <= head) && rjh___0 <= 2) && __SELECTED_FEATURE_Base == 0) && __ste_Client_AddressBook1_Alias2 <= 0) && 0 <= __ste_Client_AddressBook0_Address2) && __ste_client_privateKey1 == 456) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && 0 <= __ste_email_subject0) && __ste_email_from0 <= 0) && 0 <= __ste_Client_AddressBook1_Alias0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && 0 <= queued_client) && 0 <= __SELECTED_FEATURE_Keys) && __ste_Client_AddressBook1_Alias0 <= 0) && 0 <= __ste_Client_Keyring1_PublicKey0) && __ste_Client_Keyring2_PublicKey0 == 0) && 0 <= __ste_email_isSignatureVerified0) && __ste_Client_AddressBook1_Address0 == 0) && 0 <= __ste_ClientKeyring_size1) && 0 <= __ste_client_forwardReceiver2) && __ste_client_name2 == 0) && 0 <= __ste_Client_AddressBook0_Address1) && 2 <= \old(rjh___0)) && __ste_email_encryptionKey0 <= 0) && __ste_email_subject1 == 0) && __ste_ClientKeyring_size0 <= 0) && __ste_email_id1 <= 0) && 0 <= __ste_Client_AddressBook0_Address0) && __ste_Client_Keyring1_User0 <= 0) && __ste_Client_AddressBook0_Alias2 <= 0) && __ste_Client_AddressBook0_Address2 <= 0) && __ste_client_autoResponse1 <= 0) && bob___0 <= 1) && __ste_client_outbuffer0 <= 0) && __ste_email_from1 <= 0) && head <= 0) && __ste_client_forwardReceiver1 <= 0) && 2 <= \old(rjh___0)) && __ste_Client_Keyring1_User1 == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_to0 <= 0) && __ste_Client_Keyring2_User1 <= 0) && 0 <= __ste_email_isSigned0) && 0 <= __SELECTED_FEATURE_Verify) && 0 <= __ste_Client_AddressBook1_Alias2) && 0 <= __ste_client_autoResponse2) && __ste_email_subject1 == 0) && 0 <= __ste_Client_AddressBook2_Address0) && retValue_acc <= 2147483647) && 0 <= __ste_Client_Keyring2_User1) && __ste_Client_AddressBook1_Address1 == 0) && __ste_client_name0 <= 0) && 0 <= __ste_ClientKeyring_size0) && __ste_email_isEncrypted1 <= 0) && 0 <= #NULL) && rjh <= 2) && __ste_Client_AddressBook0_Alias1 <= 0) && 0 <= __ste_client_forwardReceiver1) && 0 <= __ste_Client_Keyring2_PublicKey2) && __ste_Client_AddressBook2_Address1 <= 0) && __ste_client_outbuffer2 == 0) && bob <= 1) && 0 <= __GUIDSL_NON_TERMINAL_main) && __ste_client_forwardReceiver2 <= 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __ste_client_autoResponse2 <= 0) && __ste_email_encryptionKey1 == 0) && __ste_email_body1 == 0) && __ste_email_isSigned0 <= 0) && 1 <= bob) && __ste_client_outbuffer1 <= 0) && __ste_ClientKeyring_size2 == 0) && __ste_ClientAddressBook_size1 <= 0) && 0 <= __ste_client_name1) && retValue_acc <= 1) && 0 <= __ste_email_id0) && 0 <= __ste_email_encryptionKey0) && #NULL == 0) && queued_client <= 0 - InvariantResult [Line: 341]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 181]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 170]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((__ste_Client_Keyring1_User2 == 0 && __GUIDSL_NON_TERMINAL_main == 0) && 3 <= chuck___0) && __ste_email_isEncrypted1 == 0) && __SELECTED_FEATURE_Sign == 0) && __ste_client_outbuffer3 == 0) && 1 <= \result) && \old(rjh___0) <= 2) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && \old(chuck___0) <= 3) && __ste_Client_Keyring1_User0 == 0) && __ste_client_idCounter2 <= 3) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && 789 == __ste_client_privateKey2) && __cil_tmp1 == 6) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_email_from0 == 0) && bob___0 <= 1) && __ste_client_forwardReceiver3 <= 0) && 3 <= __ste_client_idCounter2) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && 0 <= __cil_tmp2) && __ste_Client_AddressBook0_Address0 <= 0) && chuck___0 <= 3) && 3 == chuck) && __ste_Client_AddressBook2_Address1 == 0) && 0 <= __ste_email_signKey1) && __ste_email_signKey1 <= 0) && 0 <= __ste_client_forwardReceiver3) && __ste_email_subject0 <= 0) && 1 <= bob___0) && 0 <= __ste_Client_AddressBook0_Alias2) && 3 <= chuck___0) && __ste_client_outbuffer0 == 0) && __SELECTED_FEATURE_Verify <= 0) && 0 <= retValue_acc + 2147483648) && __ste_ClientKeyring_size1 <= 0) && 2 <= rjh___0) && tmp == 1) && 0 <= head) && queue_empty == 1) && rjh___0 <= 2) && __SELECTED_FEATURE_Base == 0) && __ste_Client_AddressBook1_Alias2 <= 0) && 0 <= __ste_Client_AddressBook0_Address2) && __ste_client_forwardReceiver0 == 0) && 3 <= \old(chuck___0)) && __ste_Client_Keyring2_User0 == 0) && 0 <= __ste_email_subject0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && 0 <= __ste_Client_AddressBook1_Alias0) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && 0 <= queued_client) && __ste_Client_AddressBook1_Alias0 <= 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && 0 <= __ste_ClientKeyring_size1) && 0 <= __ste_client_forwardReceiver2) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_encryptionKey0 <= 0) && __ste_email_subject1 == 0) && __ste_ClientKeyring_size0 <= 0) && 0 <= __ste_Client_AddressBook0_Address0) && \old(chuck___0) <= 3) && __ste_Client_AddressBook0_Alias2 <= 0) && __ste_Client_AddressBook0_Address2 <= 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head <= 0) && chuck___0 <= 3) && __ste_client_forwardReceiver1 <= 0) && 2 <= \old(rjh___0)) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_Client_Keyring2_User1 <= 0) && 0 <= __ste_email_isSigned0) && 0 <= __SELECTED_FEATURE_Verify) && 7 == __cil_tmp2) && __cil_tmp2 <= 0) && 0 <= __ste_Client_AddressBook1_Alias2) && 0 <= __ste_client_autoResponse2) && __ste_email_subject1 == 0) && __ste_email_isEncrypted0 == 0) && retValue_acc <= 2147483647) && 0 <= __ste_Client_Keyring2_User1) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && 0 <= __ste_ClientKeyring_size0) && __GUIDSL_ROOT_PRODUCTION == 0) && 3 <= \old(chuck___0)) && 0 <= __ste_client_forwardReceiver1) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && bob <= 1) && __ste_client_forwardReceiver2 <= 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_client_autoResponse2 <= 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_email_isSigned0 <= 0) && 1 <= bob) && __ste_ClientKeyring_size2 == 0) && retValue_acc == 1) && 0 <= __ste_email_encryptionKey0) && #NULL == 0) && queued_client <= 0 - InvariantResult [Line: 2670]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2718]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2782]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2810]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 192]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2757]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 351]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2746]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 281]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 1511]: Loop Invariant Derived loop invariant: !(tmp == 0) - InvariantResult [Line: 269]: Loop Invariant Derived loop invariant: tmp == 1 && op1 == 0 - InvariantResult [Line: 742]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1540]: Loop Invariant Derived loop invariant: !(tmp == 0) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_email_to1 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_to0 == rjh)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(__ste_email_signKey0) == 0)) || !(__ste_Client_Keyring0_User0 <= 2)) || !(\old(__ste_email_from0) == 0)) || !(__ste_ClientKeyring_size0 <= 2147483647)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(0 <= __ste_Client_Keyring0_User0)) || !(0 <= 2147483647 + __ste_ClientKeyring_size0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_email_to1 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(#NULL == 0)) || !(__ste_email_to0 == rjh)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(0 <= __ste_Client_Keyring0_PublicKey0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_Client_Keyring0_PublicKey0 <= 456)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0))) || ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((1 <= msg && 1 <= \old(client)) && \old(msg) <= 1) && 0 <= 2147483648 + \result) && __ste_client_privateKey0 <= 2147483647) && __utac__ad__arg1 == \old(msg)) && msg == \old(msg)) && retValue_acc <= 2147483647) && __ste_email_isSignatureVerified1 <= 0) && 1 <= client) && msg == \old(msg)) && 0 <= retValue_acc + 2147483648) && client == \old(client)) && __utac__ad__arg1 == msg) && msg <= 1) && __ste_email_isSignatureVerified0 <= 0) && 0 <= privkey + 2147483648) && 0 <= __ste_client_privateKey0 + 2147483648) && msg == \old(msg)) && __ste_email_from0 <= 2147483647) && privkey <= 2147483647) && client <= 1) && 1 <= client) && 0 <= __ste_email_isSigned1) && 0 <= __ste_email_from0 + 2147483648) && \result <= 2147483647) && 1 <= client) && \old(client) <= 1) && retValue_acc <= 2147483647) && 1 <= handle) && 0 <= __ste_email_signKey0 + 2147483648) && handle <= 1) && __ste_email_signKey0 <= 2147483647) && tmp <= 2147483647) && 1 <= \old(msg)) && msg == \old(msg)) && __ste_client_idCounter0 <= 2147483647) && __ste_email_isSigned0 <= 1) && 1 <= \old(msg)) && 0 <= retValue_acc + 2147483648) && 0 <= 2147483648 + tmp) && 0 <= __ste_email_signKey1) && __ste_email_signKey1 <= 0) && __ste_email_isSigned1 <= 0) && tmp <= 2147483647) && 0 <= __ste_email_isSignatureVerified1) && client <= 1) && 1 <= \old(client)) && \old(handle) <= 1) && 1 <= msg) && 1 <= msg) && client <= 1) && 0 <= __ste_email_isSignatureVerified0) && 1 <= \old(handle)) && tmp == \old(client)) && \old(client) <= 1) && \old(client) <= 1) && \old(msg) <= 1) && 1 <= msg) && 0 <= __ste_email_isSigned0) && msg <= 1) && msg <= 1) && msg <= 1) && 0 <= tmp + 2147483648) && \result <= 2147483647) && 1 <= \old(handle)) && handle <= 1) && 1 <= \old(msg)) && tmp == 1) && client <= 1) && 0 <= \result + 2147483648) && 2 <= \old(client)) && 2 <= \old(client)) && client == \old(client)) && 1 <= \old(client)) && 0 <= __ste_client_idCounter0 + 2147483648) && 1 <= client) && msg == \old(msg)) && client <= 2) && 1 <= handle) && \old(handle) <= 1) && \old(client) <= 2) && \old(msg) <= 1)) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1300]: Loop Invariant Derived loop invariant: (((((((((((((((((((((__ste_email_signKey0 == \old(__ste_email_signKey0) && 0 <= __ste_email_to0) && 0 <= __ste_email_to1) && 0 <= __ste_email_from0) && \old(receiver) == receiver) && from == __ste_email_from0) && __ste_email_to1 <= 0) && __ste_email_isSignatureVerified0 == \old(__ste_email_isSignatureVerified0)) && to <= 2) && from == \old(from)) && 1 <= sender) && sender <= 1) && __ste_email_from0 <= 0) && \old(to) <= 2) && __ste_email_isSigned1 == \old(__ste_email_isSigned1)) && 2 <= \old(to)) && __ste_email_isSignatureVerified1 == \old(__ste_email_isSignatureVerified1)) && __ste_email_to0 <= 0) && __ste_email_isSigned0 == \old(__ste_email_isSigned0)) && 2 <= to) && 1 == msg) && __ste_email_signKey1 == \old(__ste_email_signKey1)) || ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(__ste_email_signKey0) == 0)) || !(__ste_Client_Keyring0_User0 <= 2)) || !(\old(__ste_email_from0) == 0)) || !(__ste_ClientKeyring_size0 <= 2147483647)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(0 <= __ste_Client_Keyring0_User0)) || !(0 <= 2147483647 + __ste_ClientKeyring_size0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(\old(__ste_email_to0) == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(bob == \old(sender))) || !(\old(__ste_email_to1) == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(\old(receiver) == rjh)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(#NULL == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(__ste_email_from1) == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(0 <= __ste_Client_Keyring0_PublicKey0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_Client_Keyring0_PublicKey0 <= 456)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(\old(__ste_email_to0) == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(bob == \old(sender))) || !(\old(__ste_email_to1) == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(\old(receiver) == rjh)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(__ste_email_from1) == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0))) - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && __ste_Client_counter == 0) && rjh == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_autoResponse1 == 0) && __ste_Client_AddressBook2_Alias0 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 1 <= bob___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && 0 <= retValue_acc + 2147483648) && tmp == 1) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && __ste_client_idCounter0 <= 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && retValue_acc <= 2147483647) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && 1 <= __ste_client_idCounter0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && retValue_acc == 1) && #NULL == 0) && __ste_email_signKey1 == 0 RESULT: Ultimate proved your program to be correct! [2022-12-14 06:05:19,070 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fabdd271-d6ab-4114-a9b5-0a65109f2f4f/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE