./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/email_spec7_product23.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/email_spec7_product23.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1bb2b79cb955f3674656871a8781fc51d3f295e24daabeaa86e62b128ba42f2a --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 06:09:08,466 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 06:09:08,468 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 06:09:08,483 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 06:09:08,483 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 06:09:08,484 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 06:09:08,485 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 06:09:08,486 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 06:09:08,487 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 06:09:08,487 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 06:09:08,488 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 06:09:08,490 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 06:09:08,491 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 06:09:08,492 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 06:09:08,494 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 06:09:08,496 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 06:09:08,497 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 06:09:08,498 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 06:09:08,501 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 06:09:08,504 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 06:09:08,507 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 06:09:08,508 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 06:09:08,508 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 06:09:08,509 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 06:09:08,515 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 06:09:08,516 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 06:09:08,516 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 06:09:08,518 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 06:09:08,518 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 06:09:08,519 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 06:09:08,520 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 06:09:08,521 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 06:09:08,522 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 06:09:08,522 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 06:09:08,524 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 06:09:08,524 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 06:09:08,524 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 06:09:08,525 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 06:09:08,525 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 06:09:08,526 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 06:09:08,526 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 06:09:08,527 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-12-14 06:09:08,558 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 06:09:08,562 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 06:09:08,563 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 06:09:08,563 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 06:09:08,564 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 06:09:08,564 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 06:09:08,564 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 06:09:08,564 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 06:09:08,564 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 06:09:08,564 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 06:09:08,565 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 06:09:08,565 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 06:09:08,565 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 06:09:08,565 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 06:09:08,565 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 06:09:08,565 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 06:09:08,566 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 06:09:08,566 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 06:09:08,566 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 06:09:08,567 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 06:09:08,567 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 06:09:08,567 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 06:09:08,567 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 06:09:08,567 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-14 06:09:08,567 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 06:09:08,567 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-14 06:09:08,568 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 06:09:08,568 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-14 06:09:08,568 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 06:09:08,568 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-14 06:09:08,568 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 06:09:08,568 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 06:09:08,569 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 06:09:08,569 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 06:09:08,569 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 06:09:08,569 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 06:09:08,569 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-14 06:09:08,569 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 06:09:08,570 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 06:09:08,570 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-14 06:09:08,570 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 06:09:08,570 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1bb2b79cb955f3674656871a8781fc51d3f295e24daabeaa86e62b128ba42f2a [2022-12-14 06:09:08,751 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 06:09:08,771 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 06:09:08,773 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 06:09:08,775 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 06:09:08,775 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 06:09:08,776 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/product-lines/email_spec7_product23.cil.c [2022-12-14 06:09:11,290 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 06:09:11,555 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 06:09:11,556 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/sv-benchmarks/c/product-lines/email_spec7_product23.cil.c [2022-12-14 06:09:11,571 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/data/b6120cca2/0f365871f6b649ebac6b0f587488a4ba/FLAG26b092c8b [2022-12-14 06:09:11,862 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/data/b6120cca2/0f365871f6b649ebac6b0f587488a4ba [2022-12-14 06:09:11,864 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 06:09:11,864 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 06:09:11,865 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 06:09:11,865 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 06:09:11,868 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 06:09:11,868 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 06:09:11" (1/1) ... [2022-12-14 06:09:11,869 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@16f8db89 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:09:11, skipping insertion in model container [2022-12-14 06:09:11,869 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 06:09:11" (1/1) ... [2022-12-14 06:09:11,874 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 06:09:11,911 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 06:09:12,128 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 06:09:12,139 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 06:09:12,139 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 06:09:12,141 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 06:09:12,151 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 06:09:12,199 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/sv-benchmarks/c/product-lines/email_spec7_product23.cil.c[18387,18400] [2022-12-14 06:09:12,309 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 06:09:12,310 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 06:09:12,312 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 06:09:12,319 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 06:09:12,328 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 06:09:12,338 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 06:09:12,339 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 06:09:12,339 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 06:09:12,340 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 06:09:12,343 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 06:09:12,355 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/sv-benchmarks/c/product-lines/email_spec7_product23.cil.c[18387,18400] [2022-12-14 06:09:12,385 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 06:09:12,385 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 06:09:12,387 WARN L623 FunctionHandler]: Unknown extern function puts [2022-12-14 06:09:12,392 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 06:09:12,411 INFO L208 MainTranslator]: Completed translation [2022-12-14 06:09:12,411 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:09:12 WrapperNode [2022-12-14 06:09:12,411 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 06:09:12,412 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 06:09:12,412 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 06:09:12,412 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 06:09:12,417 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:09:12" (1/1) ... [2022-12-14 06:09:12,433 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:09:12" (1/1) ... [2022-12-14 06:09:12,483 INFO L138 Inliner]: procedures = 130, calls = 215, calls flagged for inlining = 60, calls inlined = 53, statements flattened = 978 [2022-12-14 06:09:12,483 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 06:09:12,484 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 06:09:12,484 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 06:09:12,484 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 06:09:12,492 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:09:12" (1/1) ... [2022-12-14 06:09:12,493 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:09:12" (1/1) ... [2022-12-14 06:09:12,500 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:09:12" (1/1) ... [2022-12-14 06:09:12,500 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:09:12" (1/1) ... [2022-12-14 06:09:12,526 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:09:12" (1/1) ... [2022-12-14 06:09:12,534 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:09:12" (1/1) ... [2022-12-14 06:09:12,548 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:09:12" (1/1) ... [2022-12-14 06:09:12,552 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:09:12" (1/1) ... [2022-12-14 06:09:12,559 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 06:09:12,560 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 06:09:12,560 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 06:09:12,560 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 06:09:12,561 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:09:12" (1/1) ... [2022-12-14 06:09:12,568 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 06:09:12,579 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 06:09:12,591 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 06:09:12,593 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 06:09:12,627 INFO L130 BoogieDeclarations]: Found specification of procedure getClientAddressBookSize [2022-12-14 06:09:12,628 INFO L138 BoogieDeclarations]: Found implementation of procedure getClientAddressBookSize [2022-12-14 06:09:12,628 INFO L130 BoogieDeclarations]: Found specification of procedure setClientAddressBookAddress [2022-12-14 06:09:12,628 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientAddressBookAddress [2022-12-14 06:09:12,628 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailTo [2022-12-14 06:09:12,628 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailTo [2022-12-14 06:09:12,628 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing__wrappee__AutoResponder [2022-12-14 06:09:12,628 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing__wrappee__AutoResponder [2022-12-14 06:09:12,628 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailFrom [2022-12-14 06:09:12,628 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailFrom [2022-12-14 06:09:12,628 INFO L130 BoogieDeclarations]: Found specification of procedure isReadable [2022-12-14 06:09:12,628 INFO L138 BoogieDeclarations]: Found implementation of procedure isReadable [2022-12-14 06:09:12,629 INFO L130 BoogieDeclarations]: Found specification of procedure createClientKeyringEntry [2022-12-14 06:09:12,629 INFO L138 BoogieDeclarations]: Found implementation of procedure createClientKeyringEntry [2022-12-14 06:09:12,629 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailSignKey [2022-12-14 06:09:12,629 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailSignKey [2022-12-14 06:09:12,629 INFO L130 BoogieDeclarations]: Found specification of procedure chuckKeyAdd [2022-12-14 06:09:12,629 INFO L138 BoogieDeclarations]: Found implementation of procedure chuckKeyAdd [2022-12-14 06:09:12,629 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2022-12-14 06:09:12,629 INFO L130 BoogieDeclarations]: Found specification of procedure getEmailFrom [2022-12-14 06:09:12,629 INFO L138 BoogieDeclarations]: Found implementation of procedure getEmailFrom [2022-12-14 06:09:12,629 INFO L130 BoogieDeclarations]: Found specification of procedure setClientId [2022-12-14 06:09:12,629 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientId [2022-12-14 06:09:12,630 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-14 06:09:12,630 INFO L130 BoogieDeclarations]: Found specification of procedure isSigned [2022-12-14 06:09:12,630 INFO L138 BoogieDeclarations]: Found implementation of procedure isSigned [2022-12-14 06:09:12,630 INFO L130 BoogieDeclarations]: Found specification of procedure setClientAddressBookSize [2022-12-14 06:09:12,630 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientAddressBookSize [2022-12-14 06:09:12,630 INFO L130 BoogieDeclarations]: Found specification of procedure setClientKeyringUser [2022-12-14 06:09:12,630 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientKeyringUser [2022-12-14 06:09:12,630 INFO L130 BoogieDeclarations]: Found specification of procedure setClientKeyringPublicKey [2022-12-14 06:09:12,630 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientKeyringPublicKey [2022-12-14 06:09:12,630 INFO L130 BoogieDeclarations]: Found specification of procedure outgoing [2022-12-14 06:09:12,630 INFO L138 BoogieDeclarations]: Found implementation of procedure outgoing [2022-12-14 06:09:12,630 INFO L130 BoogieDeclarations]: Found specification of procedure sendEmail [2022-12-14 06:09:12,631 INFO L138 BoogieDeclarations]: Found implementation of procedure sendEmail [2022-12-14 06:09:12,631 INFO L130 BoogieDeclarations]: Found specification of procedure setClientPrivateKey [2022-12-14 06:09:12,631 INFO L138 BoogieDeclarations]: Found implementation of procedure setClientPrivateKey [2022-12-14 06:09:12,631 INFO L130 BoogieDeclarations]: Found specification of procedure setEmailTo [2022-12-14 06:09:12,631 INFO L138 BoogieDeclarations]: Found implementation of procedure setEmailTo [2022-12-14 06:09:12,631 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-14 06:09:12,631 INFO L130 BoogieDeclarations]: Found specification of procedure generateKeyPair [2022-12-14 06:09:12,631 INFO L138 BoogieDeclarations]: Found implementation of procedure generateKeyPair [2022-12-14 06:09:12,631 INFO L130 BoogieDeclarations]: Found specification of procedure getClientAddressBookAddress [2022-12-14 06:09:12,631 INFO L138 BoogieDeclarations]: Found implementation of procedure getClientAddressBookAddress [2022-12-14 06:09:12,631 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 06:09:12,631 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 06:09:12,782 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 06:09:12,784 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 06:09:13,335 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 06:09:13,723 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 06:09:13,723 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-12-14 06:09:13,726 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 06:09:13 BoogieIcfgContainer [2022-12-14 06:09:13,726 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 06:09:13,729 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 06:09:13,729 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 06:09:13,732 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 06:09:13,732 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 06:09:11" (1/3) ... [2022-12-14 06:09:13,733 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@ced34aa and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 06:09:13, skipping insertion in model container [2022-12-14 06:09:13,733 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 06:09:12" (2/3) ... [2022-12-14 06:09:13,733 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@ced34aa and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 06:09:13, skipping insertion in model container [2022-12-14 06:09:13,733 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 06:09:13" (3/3) ... [2022-12-14 06:09:13,735 INFO L112 eAbstractionObserver]: Analyzing ICFG email_spec7_product23.cil.c [2022-12-14 06:09:13,754 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 06:09:13,754 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-14 06:09:13,804 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 06:09:13,810 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@692365a4, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 06:09:13,810 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-14 06:09:13,815 INFO L276 IsEmpty]: Start isEmpty. Operand has 172 states, 99 states have (on average 1.3333333333333333) internal successors, (132), 102 states have internal predecessors, (132), 50 states have call successors, (50), 21 states have call predecessors, (50), 21 states have return successors, (50), 49 states have call predecessors, (50), 50 states have call successors, (50) [2022-12-14 06:09:13,826 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-12-14 06:09:13,826 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:09:13,827 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:09:13,827 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:09:13,832 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:09:13,832 INFO L85 PathProgramCache]: Analyzing trace with hash -1899679961, now seen corresponding path program 1 times [2022-12-14 06:09:13,841 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:09:13,841 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1684829953] [2022-12-14 06:09:13,841 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:09:13,842 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:09:13,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:09:14,079 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 06:09:14,080 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:09:14,080 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1684829953] [2022-12-14 06:09:14,080 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1684829953] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:09:14,081 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 06:09:14,081 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 06:09:14,082 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1880152390] [2022-12-14 06:09:14,082 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:09:14,085 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-14 06:09:14,085 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:09:14,105 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-14 06:09:14,106 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 06:09:14,108 INFO L87 Difference]: Start difference. First operand has 172 states, 99 states have (on average 1.3333333333333333) internal successors, (132), 102 states have internal predecessors, (132), 50 states have call successors, (50), 21 states have call predecessors, (50), 21 states have return successors, (50), 49 states have call predecessors, (50), 50 states have call successors, (50) Second operand has 2 states, 2 states have (on average 14.0) internal successors, (28), 2 states have internal predecessors, (28), 2 states have call successors, (15), 2 states have call predecessors, (15), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-12-14 06:09:14,212 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:09:14,213 INFO L93 Difference]: Finished difference Result 252 states and 335 transitions. [2022-12-14 06:09:14,214 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-14 06:09:14,215 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 14.0) internal successors, (28), 2 states have internal predecessors, (28), 2 states have call successors, (15), 2 states have call predecessors, (15), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 60 [2022-12-14 06:09:14,215 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:09:14,222 INFO L225 Difference]: With dead ends: 252 [2022-12-14 06:09:14,222 INFO L226 Difference]: Without dead ends: 169 [2022-12-14 06:09:14,224 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 06:09:14,226 INFO L413 NwaCegarLoop]: 194 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 194 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 06:09:14,227 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 194 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 06:09:14,239 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 169 states. [2022-12-14 06:09:14,259 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 169 to 169. [2022-12-14 06:09:14,260 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 97 states have (on average 1.2989690721649485) internal successors, (126), 99 states have internal predecessors, (126), 50 states have call successors, (50), 21 states have call predecessors, (50), 21 states have return successors, (49), 48 states have call predecessors, (49), 49 states have call successors, (49) [2022-12-14 06:09:14,262 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 225 transitions. [2022-12-14 06:09:14,263 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 225 transitions. Word has length 60 [2022-12-14 06:09:14,264 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:09:14,264 INFO L495 AbstractCegarLoop]: Abstraction has 169 states and 225 transitions. [2022-12-14 06:09:14,265 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 14.0) internal successors, (28), 2 states have internal predecessors, (28), 2 states have call successors, (15), 2 states have call predecessors, (15), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-12-14 06:09:14,265 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 225 transitions. [2022-12-14 06:09:14,266 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-12-14 06:09:14,266 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:09:14,267 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:09:14,267 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 06:09:14,267 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:09:14,267 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:09:14,267 INFO L85 PathProgramCache]: Analyzing trace with hash -539376099, now seen corresponding path program 1 times [2022-12-14 06:09:14,268 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:09:14,268 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1295452601] [2022-12-14 06:09:14,268 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:09:14,268 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:09:14,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:09:14,383 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 06:09:14,383 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:09:14,384 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1295452601] [2022-12-14 06:09:14,384 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1295452601] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:09:14,384 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 06:09:14,384 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 06:09:14,384 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1279843021] [2022-12-14 06:09:14,384 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:09:14,385 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 06:09:14,386 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:09:14,386 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 06:09:14,386 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 06:09:14,387 INFO L87 Difference]: Start difference. First operand 169 states and 225 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (15), 2 states have call predecessors, (15), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-12-14 06:09:14,482 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:09:14,482 INFO L93 Difference]: Finished difference Result 248 states and 320 transitions. [2022-12-14 06:09:14,483 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 06:09:14,483 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (15), 2 states have call predecessors, (15), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 61 [2022-12-14 06:09:14,483 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:09:14,484 INFO L225 Difference]: With dead ends: 248 [2022-12-14 06:09:14,484 INFO L226 Difference]: Without dead ends: 171 [2022-12-14 06:09:14,485 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 06:09:14,485 INFO L413 NwaCegarLoop]: 191 mSDtfsCounter, 0 mSDsluCounter, 190 mSDsCounter, 0 mSdLazyCounter, 68 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 381 SdHoareTripleChecker+Invalid, 68 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 68 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 06:09:14,486 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 381 Invalid, 68 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 68 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 06:09:14,486 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171 states. [2022-12-14 06:09:14,510 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171 to 171. [2022-12-14 06:09:14,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 171 states, 99 states have (on average 1.292929292929293) internal successors, (128), 101 states have internal predecessors, (128), 50 states have call successors, (50), 21 states have call predecessors, (50), 21 states have return successors, (49), 48 states have call predecessors, (49), 49 states have call successors, (49) [2022-12-14 06:09:14,513 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 227 transitions. [2022-12-14 06:09:14,513 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 227 transitions. Word has length 61 [2022-12-14 06:09:14,513 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:09:14,514 INFO L495 AbstractCegarLoop]: Abstraction has 171 states and 227 transitions. [2022-12-14 06:09:14,514 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (15), 2 states have call predecessors, (15), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-12-14 06:09:14,514 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 227 transitions. [2022-12-14 06:09:14,516 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-12-14 06:09:14,517 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:09:14,517 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:09:14,517 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-14 06:09:14,517 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:09:14,518 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:09:14,518 INFO L85 PathProgramCache]: Analyzing trace with hash -283537405, now seen corresponding path program 1 times [2022-12-14 06:09:14,518 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:09:14,518 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [982318120] [2022-12-14 06:09:14,518 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:09:14,519 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:09:14,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:09:14,599 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 06:09:14,600 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:09:14,600 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [982318120] [2022-12-14 06:09:14,600 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [982318120] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:09:14,600 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 06:09:14,600 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 06:09:14,601 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1322398466] [2022-12-14 06:09:14,601 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:09:14,601 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 06:09:14,601 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:09:14,602 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 06:09:14,602 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 06:09:14,603 INFO L87 Difference]: Start difference. First operand 171 states and 227 transitions. Second operand has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (15), 2 states have call predecessors, (15), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-12-14 06:09:14,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:09:14,707 INFO L93 Difference]: Finished difference Result 377 states and 521 transitions. [2022-12-14 06:09:14,707 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 06:09:14,708 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (15), 2 states have call predecessors, (15), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 66 [2022-12-14 06:09:14,708 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:09:14,709 INFO L225 Difference]: With dead ends: 377 [2022-12-14 06:09:14,709 INFO L226 Difference]: Without dead ends: 224 [2022-12-14 06:09:14,710 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 06:09:14,711 INFO L413 NwaCegarLoop]: 210 mSDtfsCounter, 59 mSDsluCounter, 184 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 394 SdHoareTripleChecker+Invalid, 70 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 06:09:14,711 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 394 Invalid, 70 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 06:09:14,712 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 224 states. [2022-12-14 06:09:14,724 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 224 to 219. [2022-12-14 06:09:14,724 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 219 states, 133 states have (on average 1.3759398496240602) internal successors, (183), 135 states have internal predecessors, (183), 64 states have call successors, (64), 21 states have call predecessors, (64), 21 states have return successors, (63), 62 states have call predecessors, (63), 63 states have call successors, (63) [2022-12-14 06:09:14,726 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 219 states to 219 states and 310 transitions. [2022-12-14 06:09:14,726 INFO L78 Accepts]: Start accepts. Automaton has 219 states and 310 transitions. Word has length 66 [2022-12-14 06:09:14,726 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:09:14,726 INFO L495 AbstractCegarLoop]: Abstraction has 219 states and 310 transitions. [2022-12-14 06:09:14,726 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (15), 2 states have call predecessors, (15), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-12-14 06:09:14,726 INFO L276 IsEmpty]: Start isEmpty. Operand 219 states and 310 transitions. [2022-12-14 06:09:14,728 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-12-14 06:09:14,728 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:09:14,728 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:09:14,728 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-14 06:09:14,728 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:09:14,729 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:09:14,729 INFO L85 PathProgramCache]: Analyzing trace with hash 482621861, now seen corresponding path program 1 times [2022-12-14 06:09:14,729 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:09:14,729 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [271961815] [2022-12-14 06:09:14,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:09:14,729 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:09:14,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:09:14,828 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 06:09:14,829 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:09:14,829 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [271961815] [2022-12-14 06:09:14,829 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [271961815] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 06:09:14,829 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [408346354] [2022-12-14 06:09:14,829 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:09:14,829 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:09:14,830 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 06:09:14,831 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 06:09:14,832 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 06:09:15,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:09:15,062 INFO L263 TraceCheckSpWp]: Trace formula consists of 1007 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 06:09:15,070 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 06:09:15,116 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 06:09:15,116 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 06:09:15,165 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 06:09:15,165 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [408346354] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 06:09:15,166 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1805605621] [2022-12-14 06:09:15,181 INFO L159 IcfgInterpreter]: Started Sifa with 56 locations of interest [2022-12-14 06:09:15,181 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 06:09:15,184 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 06:09:15,188 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 06:09:15,188 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 06:09:47,729 INFO L197 IcfgInterpreter]: Interpreting procedure setClientId with input of size 444 for LOIs [2022-12-14 06:09:48,020 INFO L197 IcfgInterpreter]: Interpreting procedure setClientPrivateKey with input of size 441 for LOIs [2022-12-14 06:09:48,307 INFO L197 IcfgInterpreter]: Interpreting procedure sendEmail with input of size 259 for LOIs [2022-12-14 06:09:49,931 INFO L197 IcfgInterpreter]: Interpreting procedure setEmailTo with input of size 237 for LOIs [2022-12-14 06:09:49,970 INFO L197 IcfgInterpreter]: Interpreting procedure outgoing with input of size 261 for LOIs [2022-12-14 06:09:53,037 INFO L197 IcfgInterpreter]: Interpreting procedure outgoing__wrappee__AutoResponder with input of size 269 for LOIs [2022-12-14 06:09:55,874 INFO L197 IcfgInterpreter]: Interpreting procedure isReadable with input of size 251 for LOIs [2022-12-14 06:09:55,908 INFO L197 IcfgInterpreter]: Interpreting procedure getEmailTo with input of size 251 for LOIs [2022-12-14 06:09:55,951 INFO L197 IcfgInterpreter]: Interpreting procedure setEmailFrom with input of size 477 for LOIs [2022-12-14 06:10:00,674 INFO L197 IcfgInterpreter]: Interpreting procedure getClientAddressBookSize with input of size 242 for LOIs [2022-12-14 06:10:00,715 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 06:11:21,335 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1805605621] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:11:21,335 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 06:11:21,335 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [48] imperfect sequences [4, 4, 4] total 54 [2022-12-14 06:11:21,336 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [324024056] [2022-12-14 06:11:21,336 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:11:21,336 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-12-14 06:11:21,336 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:11:21,337 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-12-14 06:11:21,337 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=141, Invalid=2721, Unknown=0, NotChecked=0, Total=2862 [2022-12-14 06:11:21,338 INFO L87 Difference]: Start difference. First operand 219 states and 310 transitions. Second operand has 49 states, 32 states have (on average 1.0625) internal successors, (34), 29 states have internal predecessors, (34), 15 states have call successors, (15), 10 states have call predecessors, (15), 7 states have return successors, (12), 12 states have call predecessors, (12), 12 states have call successors, (12) [2022-12-14 06:12:00,355 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:12:00,355 INFO L93 Difference]: Finished difference Result 630 states and 978 transitions. [2022-12-14 06:12:00,356 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2022-12-14 06:12:00,356 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 32 states have (on average 1.0625) internal successors, (34), 29 states have internal predecessors, (34), 15 states have call successors, (15), 10 states have call predecessors, (15), 7 states have return successors, (12), 12 states have call predecessors, (12), 12 states have call successors, (12) Word has length 67 [2022-12-14 06:12:00,356 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:12:00,360 INFO L225 Difference]: With dead ends: 630 [2022-12-14 06:12:00,360 INFO L226 Difference]: Without dead ends: 429 [2022-12-14 06:12:00,363 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 214 GetRequests, 150 SyntacticMatches, 1 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 838 ImplicationChecksByTransitivity, 98.5s TimeCoverageRelationStatistics Valid=225, Invalid=3935, Unknown=0, NotChecked=0, Total=4160 [2022-12-14 06:12:00,364 INFO L413 NwaCegarLoop]: 259 mSDtfsCounter, 427 mSDsluCounter, 4955 mSDsCounter, 0 mSdLazyCounter, 7147 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 19.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 433 SdHoareTripleChecker+Valid, 5214 SdHoareTripleChecker+Invalid, 7184 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.2s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 7147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 20.6s IncrementalHoareTripleChecker+Time [2022-12-14 06:12:00,365 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [433 Valid, 5214 Invalid, 7184 Unknown, 0 Unchecked, 0.2s Time], IncrementalHoareTripleChecker [37 Valid, 7147 Invalid, 0 Unknown, 0 Unchecked, 20.6s Time] [2022-12-14 06:12:00,366 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 429 states. [2022-12-14 06:12:00,516 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 429 to 324. [2022-12-14 06:12:00,517 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 324 states, 219 states have (on average 1.4337899543378996) internal successors, (314), 222 states have internal predecessors, (314), 76 states have call successors, (76), 30 states have call predecessors, (76), 28 states have return successors, (76), 71 states have call predecessors, (76), 75 states have call successors, (76) [2022-12-14 06:12:00,519 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 324 states to 324 states and 466 transitions. [2022-12-14 06:12:00,520 INFO L78 Accepts]: Start accepts. Automaton has 324 states and 466 transitions. Word has length 67 [2022-12-14 06:12:00,520 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:12:00,520 INFO L495 AbstractCegarLoop]: Abstraction has 324 states and 466 transitions. [2022-12-14 06:12:00,521 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 32 states have (on average 1.0625) internal successors, (34), 29 states have internal predecessors, (34), 15 states have call successors, (15), 10 states have call predecessors, (15), 7 states have return successors, (12), 12 states have call predecessors, (12), 12 states have call successors, (12) [2022-12-14 06:12:00,521 INFO L276 IsEmpty]: Start isEmpty. Operand 324 states and 466 transitions. [2022-12-14 06:12:00,523 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2022-12-14 06:12:00,524 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:12:00,524 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:12:00,530 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 06:12:00,725 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:12:00,726 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:12:00,727 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:12:00,728 INFO L85 PathProgramCache]: Analyzing trace with hash 715691760, now seen corresponding path program 1 times [2022-12-14 06:12:00,729 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:12:00,729 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1052798899] [2022-12-14 06:12:00,730 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:12:00,730 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:12:00,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:12:00,844 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-12-14 06:12:00,844 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:12:00,844 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1052798899] [2022-12-14 06:12:00,844 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1052798899] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:12:00,844 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 06:12:00,845 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 06:12:00,845 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [933265024] [2022-12-14 06:12:00,845 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:12:00,845 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 06:12:00,845 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:12:00,846 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 06:12:00,846 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 06:12:00,846 INFO L87 Difference]: Start difference. First operand 324 states and 466 transitions. Second operand has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (16), 2 states have call predecessors, (16), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-12-14 06:12:01,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:12:01,107 INFO L93 Difference]: Finished difference Result 735 states and 1088 transitions. [2022-12-14 06:12:01,107 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 06:12:01,107 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (16), 2 states have call predecessors, (16), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 72 [2022-12-14 06:12:01,108 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:12:01,111 INFO L225 Difference]: With dead ends: 735 [2022-12-14 06:12:01,111 INFO L226 Difference]: Without dead ends: 449 [2022-12-14 06:12:01,112 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 06:12:01,113 INFO L413 NwaCegarLoop]: 219 mSDtfsCounter, 57 mSDsluCounter, 192 mSDsCounter, 0 mSdLazyCounter, 71 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 411 SdHoareTripleChecker+Invalid, 72 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 71 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 06:12:01,113 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 411 Invalid, 72 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 71 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 06:12:01,114 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 449 states. [2022-12-14 06:12:01,284 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 449 to 442. [2022-12-14 06:12:01,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 442 states, 306 states have (on average 1.4640522875816993) internal successors, (448), 309 states have internal predecessors, (448), 107 states have call successors, (107), 30 states have call predecessors, (107), 28 states have return successors, (107), 102 states have call predecessors, (107), 106 states have call successors, (107) [2022-12-14 06:12:01,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 442 states to 442 states and 662 transitions. [2022-12-14 06:12:01,286 INFO L78 Accepts]: Start accepts. Automaton has 442 states and 662 transitions. Word has length 72 [2022-12-14 06:12:01,287 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:12:01,287 INFO L495 AbstractCegarLoop]: Abstraction has 442 states and 662 transitions. [2022-12-14 06:12:01,287 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (16), 2 states have call predecessors, (16), 1 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-12-14 06:12:01,287 INFO L276 IsEmpty]: Start isEmpty. Operand 442 states and 662 transitions. [2022-12-14 06:12:01,288 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-12-14 06:12:01,288 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:12:01,289 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:12:01,289 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-14 06:12:01,289 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:12:01,289 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:12:01,289 INFO L85 PathProgramCache]: Analyzing trace with hash -1796914065, now seen corresponding path program 1 times [2022-12-14 06:12:01,289 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:12:01,289 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1941472504] [2022-12-14 06:12:01,290 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:12:01,290 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:12:01,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:12:01,444 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-12-14 06:12:01,445 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:12:01,445 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1941472504] [2022-12-14 06:12:01,445 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1941472504] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 06:12:01,445 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [856131674] [2022-12-14 06:12:01,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:12:01,445 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:12:01,445 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 06:12:01,446 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 06:12:01,447 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 06:12:01,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:12:01,640 INFO L263 TraceCheckSpWp]: Trace formula consists of 1028 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 06:12:01,643 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 06:12:01,658 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-12-14 06:12:01,658 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 06:12:01,693 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-12-14 06:12:01,693 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [856131674] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 06:12:01,693 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1375002854] [2022-12-14 06:12:01,696 INFO L159 IcfgInterpreter]: Started Sifa with 60 locations of interest [2022-12-14 06:12:01,696 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 06:12:01,697 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 06:12:01,697 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 06:12:01,697 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 06:12:33,487 INFO L197 IcfgInterpreter]: Interpreting procedure setClientId with input of size 444 for LOIs [2022-12-14 06:12:33,784 INFO L197 IcfgInterpreter]: Interpreting procedure setClientPrivateKey with input of size 442 for LOIs [2022-12-14 06:12:34,078 INFO L197 IcfgInterpreter]: Interpreting procedure sendEmail with input of size 255 for LOIs [2022-12-14 06:12:35,674 INFO L197 IcfgInterpreter]: Interpreting procedure setEmailTo with input of size 233 for LOIs [2022-12-14 06:12:35,710 INFO L197 IcfgInterpreter]: Interpreting procedure outgoing with input of size 255 for LOIs [2022-12-14 06:12:39,065 INFO L197 IcfgInterpreter]: Interpreting procedure outgoing__wrappee__AutoResponder with input of size 265 for LOIs [2022-12-14 06:12:43,844 INFO L197 IcfgInterpreter]: Interpreting procedure isReadable with input of size 437 for LOIs [2022-12-14 06:12:44,074 INFO L197 IcfgInterpreter]: Interpreting procedure getEmailTo with input of size 247 for LOIs [2022-12-14 06:12:44,114 INFO L197 IcfgInterpreter]: Interpreting procedure setEmailFrom with input of size 479 for LOIs [2022-12-14 06:12:45,895 INFO L197 IcfgInterpreter]: Interpreting procedure getClientAddressBookSize with input of size 260 for LOIs [2022-12-14 06:12:45,944 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 06:13:22,194 WARN L233 SmtUtils]: Spent 6.56s on a formula simplification. DAG size of input: 587 DAG size of output: 337 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 06:13:33,760 WARN L233 SmtUtils]: Spent 11.31s on a formula simplification. DAG size of input: 589 DAG size of output: 461 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 06:14:26,776 WARN L233 SmtUtils]: Spent 5.53s on a formula simplification. DAG size of input: 548 DAG size of output: 385 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 06:14:29,638 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1375002854] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:14:29,638 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 06:14:29,638 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [52] imperfect sequences [4, 4, 4] total 58 [2022-12-14 06:14:29,639 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [51394162] [2022-12-14 06:14:29,639 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:14:29,639 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 53 states [2022-12-14 06:14:29,639 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:14:29,640 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 53 interpolants. [2022-12-14 06:14:29,640 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=170, Invalid=3136, Unknown=0, NotChecked=0, Total=3306 [2022-12-14 06:14:29,641 INFO L87 Difference]: Start difference. First operand 442 states and 662 transitions. Second operand has 53 states, 35 states have (on average 1.0571428571428572) internal successors, (37), 32 states have internal predecessors, (37), 16 states have call successors, (16), 10 states have call predecessors, (16), 7 states have return successors, (13), 13 states have call predecessors, (13), 13 states have call successors, (13) [2022-12-14 06:14:41,639 WARN L233 SmtUtils]: Spent 7.72s on a formula simplification. DAG size of input: 572 DAG size of output: 359 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 06:14:59,483 WARN L233 SmtUtils]: Spent 5.32s on a formula simplification. DAG size of input: 591 DAG size of output: 338 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 06:15:18,993 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:15:18,993 INFO L93 Difference]: Finished difference Result 892 states and 1367 transitions. [2022-12-14 06:15:18,994 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 60 states. [2022-12-14 06:15:18,994 INFO L78 Accepts]: Start accepts. Automaton has has 53 states, 35 states have (on average 1.0571428571428572) internal successors, (37), 32 states have internal predecessors, (37), 16 states have call successors, (16), 10 states have call predecessors, (16), 7 states have return successors, (13), 13 states have call predecessors, (13), 13 states have call successors, (13) Word has length 73 [2022-12-14 06:15:18,994 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:15:18,997 INFO L225 Difference]: With dead ends: 892 [2022-12-14 06:15:18,997 INFO L226 Difference]: Without dead ends: 591 [2022-12-14 06:15:19,000 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 233 GetRequests, 164 SyntacticMatches, 1 SemanticMatches, 68 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1008 ImplicationChecksByTransitivity, 132.3s TimeCoverageRelationStatistics Valid=257, Invalid=4573, Unknown=0, NotChecked=0, Total=4830 [2022-12-14 06:15:19,000 INFO L413 NwaCegarLoop]: 254 mSDtfsCounter, 348 mSDsluCounter, 5205 mSDsCounter, 0 mSdLazyCounter, 7071 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 19.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 358 SdHoareTripleChecker+Valid, 5459 SdHoareTripleChecker+Invalid, 7121 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.2s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 7071 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 20.1s IncrementalHoareTripleChecker+Time [2022-12-14 06:15:19,001 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [358 Valid, 5459 Invalid, 7121 Unknown, 0 Unchecked, 0.2s Time], IncrementalHoareTripleChecker [50 Valid, 7071 Invalid, 0 Unknown, 0 Unchecked, 20.1s Time] [2022-12-14 06:15:19,002 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 591 states. [2022-12-14 06:15:19,238 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 591 to 470. [2022-12-14 06:15:19,238 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 470 states, 331 states have (on average 1.4652567975830815) internal successors, (485), 335 states have internal predecessors, (485), 109 states have call successors, (109), 31 states have call predecessors, (109), 29 states have return successors, (109), 103 states have call predecessors, (109), 108 states have call successors, (109) [2022-12-14 06:15:19,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 470 states to 470 states and 703 transitions. [2022-12-14 06:15:19,240 INFO L78 Accepts]: Start accepts. Automaton has 470 states and 703 transitions. Word has length 73 [2022-12-14 06:15:19,240 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:15:19,240 INFO L495 AbstractCegarLoop]: Abstraction has 470 states and 703 transitions. [2022-12-14 06:15:19,241 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 53 states, 35 states have (on average 1.0571428571428572) internal successors, (37), 32 states have internal predecessors, (37), 16 states have call successors, (16), 10 states have call predecessors, (16), 7 states have return successors, (13), 13 states have call predecessors, (13), 13 states have call successors, (13) [2022-12-14 06:15:19,241 INFO L276 IsEmpty]: Start isEmpty. Operand 470 states and 703 transitions. [2022-12-14 06:15:19,242 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2022-12-14 06:15:19,242 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:15:19,242 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:15:19,249 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-12-14 06:15:19,443 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2022-12-14 06:15:19,444 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:15:19,444 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:15:19,445 INFO L85 PathProgramCache]: Analyzing trace with hash -466593861, now seen corresponding path program 1 times [2022-12-14 06:15:19,445 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:15:19,445 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [474074052] [2022-12-14 06:15:19,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:15:19,446 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:15:19,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:15:19,581 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 06:15:19,581 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:15:19,581 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [474074052] [2022-12-14 06:15:19,582 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [474074052] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 06:15:19,582 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [971162771] [2022-12-14 06:15:19,582 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:15:19,582 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 06:15:19,582 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 06:15:19,583 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 06:15:19,584 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-14 06:15:19,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:15:19,809 INFO L263 TraceCheckSpWp]: Trace formula consists of 1134 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 06:15:19,813 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 06:15:19,833 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 06:15:19,833 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 06:15:19,879 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-14 06:15:19,879 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [971162771] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 06:15:19,880 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2019727397] [2022-12-14 06:15:19,882 INFO L159 IcfgInterpreter]: Started Sifa with 65 locations of interest [2022-12-14 06:15:19,882 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 06:15:19,882 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 06:15:19,882 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 06:15:19,882 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 06:17:17,041 INFO L197 IcfgInterpreter]: Interpreting procedure setClientId with input of size 439 for LOIs [2022-12-14 06:17:17,323 INFO L197 IcfgInterpreter]: Interpreting procedure setClientKeyringPublicKey with input of size 434 for LOIs [2022-12-14 06:17:17,627 INFO L197 IcfgInterpreter]: Interpreting procedure setClientKeyringUser with input of size 453 for LOIs [2022-12-14 06:17:17,959 INFO L197 IcfgInterpreter]: Interpreting procedure createClientKeyringEntry with input of size 233 for LOIs [2022-12-14 06:17:18,022 INFO L197 IcfgInterpreter]: Interpreting procedure setClientPrivateKey with input of size 441 for LOIs [2022-12-14 06:17:18,312 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 06:18:23,742 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [2019727397] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:18:23,742 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 06:18:23,743 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [29] imperfect sequences [4, 4, 4] total 35 [2022-12-14 06:18:23,743 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [814422384] [2022-12-14 06:18:23,743 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:18:23,744 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-12-14 06:18:23,744 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:18:23,745 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-12-14 06:18:23,745 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=120, Invalid=1070, Unknown=0, NotChecked=0, Total=1190 [2022-12-14 06:18:23,745 INFO L87 Difference]: Start difference. First operand 470 states and 703 transitions. Second operand has 30 states, 19 states have (on average 1.9473684210526316) internal successors, (37), 18 states have internal predecessors, (37), 10 states have call successors, (18), 6 states have call predecessors, (18), 6 states have return successors, (15), 10 states have call predecessors, (15), 10 states have call successors, (15) [2022-12-14 06:18:37,515 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:18:37,515 INFO L93 Difference]: Finished difference Result 897 states and 1386 transitions. [2022-12-14 06:18:37,515 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-12-14 06:18:37,515 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 19 states have (on average 1.9473684210526316) internal successors, (37), 18 states have internal predecessors, (37), 10 states have call successors, (18), 6 states have call predecessors, (18), 6 states have return successors, (15), 10 states have call predecessors, (15), 10 states have call successors, (15) Word has length 76 [2022-12-14 06:18:37,516 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:18:37,519 INFO L225 Difference]: With dead ends: 897 [2022-12-14 06:18:37,519 INFO L226 Difference]: Without dead ends: 596 [2022-12-14 06:18:37,520 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 233 GetRequests, 197 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 294 ImplicationChecksByTransitivity, 70.2s TimeCoverageRelationStatistics Valid=150, Invalid=1256, Unknown=0, NotChecked=0, Total=1406 [2022-12-14 06:18:37,520 INFO L413 NwaCegarLoop]: 203 mSDtfsCounter, 170 mSDsluCounter, 2885 mSDsCounter, 0 mSdLazyCounter, 2957 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 170 SdHoareTripleChecker+Valid, 3088 SdHoareTripleChecker+Invalid, 2968 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 2957 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.4s IncrementalHoareTripleChecker+Time [2022-12-14 06:18:37,521 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [170 Valid, 3088 Invalid, 2968 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [11 Valid, 2957 Invalid, 0 Unknown, 0 Unchecked, 8.4s Time] [2022-12-14 06:18:37,522 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 596 states. [2022-12-14 06:18:37,829 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 596 to 529. [2022-12-14 06:18:37,829 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 529 states, 383 states have (on average 1.4725848563968669) internal successors, (564), 388 states have internal predecessors, (564), 113 states have call successors, (113), 34 states have call predecessors, (113), 32 states have return successors, (113), 106 states have call predecessors, (113), 112 states have call successors, (113) [2022-12-14 06:18:37,831 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 529 states to 529 states and 790 transitions. [2022-12-14 06:18:37,831 INFO L78 Accepts]: Start accepts. Automaton has 529 states and 790 transitions. Word has length 76 [2022-12-14 06:18:37,832 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:18:37,832 INFO L495 AbstractCegarLoop]: Abstraction has 529 states and 790 transitions. [2022-12-14 06:18:37,832 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 19 states have (on average 1.9473684210526316) internal successors, (37), 18 states have internal predecessors, (37), 10 states have call successors, (18), 6 states have call predecessors, (18), 6 states have return successors, (15), 10 states have call predecessors, (15), 10 states have call successors, (15) [2022-12-14 06:18:37,832 INFO L276 IsEmpty]: Start isEmpty. Operand 529 states and 790 transitions. [2022-12-14 06:18:37,833 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2022-12-14 06:18:37,833 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 06:18:37,834 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:18:37,839 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-14 06:18:38,034 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2022-12-14 06:18:38,034 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION === [outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 06:18:38,035 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 06:18:38,035 INFO L85 PathProgramCache]: Analyzing trace with hash 2066226792, now seen corresponding path program 1 times [2022-12-14 06:18:38,035 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 06:18:38,035 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1293193671] [2022-12-14 06:18:38,035 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 06:18:38,036 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 06:18:38,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 06:18:38,188 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-12-14 06:18:38,188 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 06:18:38,188 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1293193671] [2022-12-14 06:18:38,188 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1293193671] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 06:18:38,188 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 06:18:38,188 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-14 06:18:38,189 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1029946021] [2022-12-14 06:18:38,189 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 06:18:38,189 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 06:18:38,189 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 06:18:38,189 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 06:18:38,190 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-14 06:18:38,190 INFO L87 Difference]: Start difference. First operand 529 states and 790 transitions. Second operand has 6 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (16), 1 states have call predecessors, (16), 2 states have return successors, (13), 2 states have call predecessors, (13), 1 states have call successors, (13) [2022-12-14 06:18:38,691 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 06:18:38,691 INFO L93 Difference]: Finished difference Result 529 states and 790 transitions. [2022-12-14 06:18:38,691 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 06:18:38,691 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (16), 1 states have call predecessors, (16), 2 states have return successors, (13), 2 states have call predecessors, (13), 1 states have call successors, (13) Word has length 78 [2022-12-14 06:18:38,692 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 06:18:38,692 INFO L225 Difference]: With dead ends: 529 [2022-12-14 06:18:38,692 INFO L226 Difference]: Without dead ends: 0 [2022-12-14 06:18:38,693 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-14 06:18:38,694 INFO L413 NwaCegarLoop]: 186 mSDtfsCounter, 88 mSDsluCounter, 635 mSDsCounter, 0 mSdLazyCounter, 172 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 118 SdHoareTripleChecker+Valid, 821 SdHoareTripleChecker+Invalid, 172 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 172 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 06:18:38,694 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [118 Valid, 821 Invalid, 172 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 172 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 06:18:38,695 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-14 06:18:38,695 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-14 06:18:38,695 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 06:18:38,695 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-14 06:18:38,695 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 78 [2022-12-14 06:18:38,695 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 06:18:38,695 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-14 06:18:38,695 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (16), 1 states have call predecessors, (16), 2 states have return successors, (13), 2 states have call predecessors, (13), 1 states have call successors, (13) [2022-12-14 06:18:38,695 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-14 06:18:38,696 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-14 06:18:38,697 INFO L805 garLoopResultBuilder]: Registering result SAFE for location outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-14 06:18:38,698 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-12-14 06:18:38,699 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-14 06:20:25,345 INFO L895 garLoopResultBuilder]: At program point L155(line 155) the Hoare annotation is: (or (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~queued_message~0)| 0))) (.cse2 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse3 (not (= |old(~__ste_email_from0~0)| 0))) (.cse4 (not (= ~rjh~0 |old(~__ste_email_to0~0)|))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse23 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse39 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse40 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse41 (not (= ~head~0.offset 0))) (.cse42 (not (= ~__ste_email_id1~0 0))) (.cse43 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse44 (not (= ~__ste_client_outbuffer1~0 0))) (.cse45 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse47 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse48 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse49 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse50 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse51 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse52 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse53 (not (= ~__ste_client_outbuffer3~0 0))) (.cse54 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse55 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse56 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse57 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse58 (not (= ~__ste_email_subject0~0.offset 0))) (.cse59 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse60 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse61 (not (= |#NULL.base| 0))) (.cse62 (not (= |old(~queued_client~0)| 0))) (.cse63 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse64 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse65 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse66 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse67 (not (= ~__ste_email_subject1~0.base 0))) (.cse68 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse69 (not (= ~__ste_client_name1~0.offset 0))) (.cse70 (not (= ~__ste_email_body0~0.base 0))) (.cse71 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse72 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse73 (not (= |old(~queue_empty~0)| 1))) (.cse74 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse75 (not (= ~__ste_client_name0~0.offset 0))) (.cse76 (not (= 3 ~chuck~0))) (.cse77 (not (<= ~__ste_client_idCounter2~0 3))) (.cse78 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse79 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse80 (not (<= 0 |#StackHeapBarrier|))) (.cse81 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse83 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse84 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse85 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse86 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse87 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse88 (not (= ~__ste_client_outbuffer2~0 0))) (.cse89 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse90 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse91 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse92 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse93 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse94 (not (= ~__ste_client_name1~0.base 0))) (.cse95 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse96 (not (= ~head~0.base 0))) (.cse97 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse98 (not (= ~__ste_Email_counter~0 0))) (.cse99 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse100 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse101 (not (= ~__ste_email_subject1~0.offset 0))) (.cse102 (not (= 0 ~__ste_email_subject0~0.base))) (.cse103 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse104 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or (not (<= 1 |outgoing_#in~client#1|)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 (not (<= |outgoing_#in~client#1| 1)) .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (<= 789 ~__ste_client_privateKey2~0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse52 .cse53 (not (<= ~__ste_client_autoResponse0~0 0)) .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 (not (<= ~__ste_client_autoResponse2~0 0)) .cse83 (not (<= ~__ste_client_autoResponse1~0 1)) .cse84 .cse85 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse86 .cse87 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 (not (= ~bob~0 1)) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 (not (= ~__ste_client_autoResponse1~0 0)) .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 (not (= ~__ste_client_autoResponse0~0 0)) .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104))) (and (= |outgoing_outgoing__wrappee__AddressBook_~msg#1| |outgoing_outgoing__wrappee__AddressBook_#in~msg#1|) (<= |outgoing_sign_~msg#1| 1) (<= ~queued_message~0 0) (= |outgoing_outgoing__wrappee__AddressBook_~tmp~2#1| |outgoing_outgoing__wrappee__AddressBook_~size~0#1|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |outgoing_sign_~client#1| |outgoing_getClientPrivateKey_#in~handle#1|) (= |outgoing_getClientPrivateKey_~retValue_acc~31#1| |outgoing_getClientPrivateKey_#res#1|) (<= |outgoing_getClientPrivateKey_~handle#1| 1) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |outgoing_outgoing__wrappee__AddressBook_#in~client#1| |outgoing_outgoing__wrappee__AddressBook_~client#1|) (= |outgoing_sign_#in~client#1| |outgoing_~client#1|) (= ~__ste_email_isSignatureVerified0~0 |old(~__ste_email_isSignatureVerified0~0)|) (<= 0 |outgoing_outgoing__wrappee__AddressBook_~tmp~2#1|) (= |outgoing_sign_~tmp~7#1| |outgoing_getClientPrivateKey_#res#1|) (<= 0 ~queued_message~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (<= 1 |outgoing_sign_~msg#1|) (<= 1 |outgoing_outgoing__wrappee__AddressBook_~client#1|) (<= 1 |outgoing_~msg#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (<= |outgoing_outgoing__wrappee__AddressBook_~tmp~2#1| 0) (= |outgoing_getClientPrivateKey_~retValue_acc~31#1| ~__ste_client_privateKey0~0) (<= 1 |outgoing_getClientPrivateKey_#in~handle#1|) (= ~queued_client~0 |old(~queued_client~0)|) (= |outgoing_sign_~privkey~0#1| |outgoing_sign_~tmp~7#1|) (= |outgoing_~client#1| |outgoing_#in~client#1|) (<= |outgoing_sign_#in~msg#1| 1) (= ~__ste_email_isSignatureVerified1~0 |old(~__ste_email_isSignatureVerified1~0)|) (let ((.cse105 (= |outgoing_sign_~privkey~0#1| 0)) (.cse106 (= ~__ste_email_isSigned1~0 |old(~__ste_email_isSigned1~0)|)) (.cse107 (= ~__ste_email_signKey1~0 |old(~__ste_email_signKey1~0)|))) (or (and (= ~__ste_email_signKey0~0 |old(~__ste_email_signKey0~0)|) .cse105 .cse106 (= ~__ste_email_isSigned0~0 |old(~__ste_email_isSigned0~0)|) .cse107) (and (= ~__ste_email_signKey0~0 |outgoing_setEmailSignKey_~value#1|) (= ~__ste_email_isSigned0~0 |outgoing_setEmailIsSigned_~value#1|) (= |outgoing_setEmailSignKey_#in~value#1| |outgoing_setEmailSignKey_~value#1|) (= |outgoing_setEmailIsSigned_#in~value#1| |outgoing_setEmailIsSigned_~value#1|) (= |outgoing_setEmailIsSigned_#in~handle#1| |outgoing_sign_~msg#1|) (= |outgoing_setEmailSignKey_#in~value#1| |outgoing_sign_~privkey~0#1|) (= |outgoing_setEmailIsSigned_#in~value#1| 1) (not .cse105) (= |outgoing_setEmailSignKey_#in~handle#1| |outgoing_setEmailSignKey_~handle#1|) (= |outgoing_setEmailIsSigned_~handle#1| |outgoing_setEmailIsSigned_#in~handle#1|) (= |outgoing_setEmailSignKey_#in~handle#1| |outgoing_sign_~msg#1|) .cse106 .cse107))) (<= |outgoing_~msg#1| 1) (<= |outgoing_getClientPrivateKey_#res#1| 2147483647) (= |outgoing_~msg#1| |outgoing_outgoing__wrappee__AddressBook_#in~msg#1|) (<= 1 |outgoing_sign_#in~msg#1|) (<= 0 (+ |outgoing_getClientPrivateKey_#res#1| 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= |outgoing_outgoing__wrappee__AddressBook_~client#1| 1) (<= 1 |outgoing_getClientPrivateKey_~handle#1|) (<= |outgoing_getClientPrivateKey_#in~handle#1| 1))) [2022-12-14 06:20:25,346 INFO L902 garLoopResultBuilder]: At program point L155-1(lines 124 160) the Hoare annotation is: true [2022-12-14 06:20:25,346 INFO L895 garLoopResultBuilder]: At program point L147(line 147) the Hoare annotation is: (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~queued_message~0)| 0))) (.cse2 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse3 (not (= |old(~__ste_email_from0~0)| 0))) (.cse4 (not (= ~rjh~0 |old(~__ste_email_to0~0)|))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse23 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse39 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse40 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse41 (not (= ~head~0.offset 0))) (.cse42 (not (= ~__ste_email_id1~0 0))) (.cse43 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse44 (not (= ~__ste_client_outbuffer1~0 0))) (.cse45 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse47 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse48 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse49 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse50 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse51 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse52 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse53 (not (= ~__ste_client_outbuffer3~0 0))) (.cse54 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse55 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse56 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse57 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse58 (not (= ~__ste_email_subject0~0.offset 0))) (.cse59 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse60 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse61 (not (= |#NULL.base| 0))) (.cse62 (not (= |old(~queued_client~0)| 0))) (.cse63 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse64 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse65 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse66 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse67 (not (= ~__ste_email_subject1~0.base 0))) (.cse68 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse69 (not (= ~__ste_client_name1~0.offset 0))) (.cse70 (not (= ~__ste_email_body0~0.base 0))) (.cse71 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse72 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse73 (not (= |old(~queue_empty~0)| 1))) (.cse74 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse75 (not (= ~__ste_client_name0~0.offset 0))) (.cse76 (not (= 3 ~chuck~0))) (.cse77 (not (<= ~__ste_client_idCounter2~0 3))) (.cse78 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse79 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse80 (not (<= 0 |#StackHeapBarrier|))) (.cse81 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse83 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse84 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse85 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse86 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse87 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse88 (not (= ~__ste_client_outbuffer2~0 0))) (.cse89 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse90 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse91 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse92 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse93 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse94 (not (= ~__ste_client_name1~0.base 0))) (.cse95 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse96 (not (= ~head~0.base 0))) (.cse97 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse98 (not (= ~__ste_Email_counter~0 0))) (.cse99 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse100 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse101 (not (= ~__ste_email_subject1~0.offset 0))) (.cse102 (not (= 0 ~__ste_email_subject0~0.base))) (.cse103 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse104 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or (not (<= 1 |outgoing_#in~client#1|)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 (not (<= |outgoing_#in~client#1| 1)) .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (<= 789 ~__ste_client_privateKey2~0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse52 .cse53 (not (<= ~__ste_client_autoResponse0~0 0)) .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 (not (<= ~__ste_client_autoResponse2~0 0)) .cse83 (not (<= ~__ste_client_autoResponse1~0 1)) .cse84 .cse85 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse86 .cse87 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 (not (= ~bob~0 1)) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 (not (= ~__ste_client_autoResponse1~0 0)) .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 (not (= ~__ste_client_autoResponse0~0 0)) .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104))) [2022-12-14 06:20:25,347 INFO L895 garLoopResultBuilder]: At program point L147-1(line 147) the Hoare annotation is: (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~queued_message~0)| 0))) (.cse2 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse3 (not (= |old(~__ste_email_from0~0)| 0))) (.cse4 (not (= ~rjh~0 |old(~__ste_email_to0~0)|))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse23 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse39 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse40 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse41 (not (= ~head~0.offset 0))) (.cse42 (not (= ~__ste_email_id1~0 0))) (.cse43 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse44 (not (= ~__ste_client_outbuffer1~0 0))) (.cse45 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse47 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse48 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse49 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse50 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse51 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse52 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse53 (not (= ~__ste_client_outbuffer3~0 0))) (.cse54 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse55 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse56 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse57 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse58 (not (= ~__ste_email_subject0~0.offset 0))) (.cse59 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse60 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse61 (not (= |#NULL.base| 0))) (.cse62 (not (= |old(~queued_client~0)| 0))) (.cse63 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse64 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse65 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse66 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse67 (not (= ~__ste_email_subject1~0.base 0))) (.cse68 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse69 (not (= ~__ste_client_name1~0.offset 0))) (.cse70 (not (= ~__ste_email_body0~0.base 0))) (.cse71 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse72 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse73 (not (= |old(~queue_empty~0)| 1))) (.cse74 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse75 (not (= ~__ste_client_name0~0.offset 0))) (.cse76 (not (= 3 ~chuck~0))) (.cse77 (not (<= ~__ste_client_idCounter2~0 3))) (.cse78 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse79 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse80 (not (<= 0 |#StackHeapBarrier|))) (.cse81 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse83 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse84 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse85 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse86 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse87 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse88 (not (= ~__ste_client_outbuffer2~0 0))) (.cse89 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse90 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse91 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse92 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse93 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse94 (not (= ~__ste_client_name1~0.base 0))) (.cse95 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse96 (not (= ~head~0.base 0))) (.cse97 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse98 (not (= ~__ste_Email_counter~0 0))) (.cse99 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse100 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse101 (not (= ~__ste_email_subject1~0.offset 0))) (.cse102 (not (= 0 ~__ste_email_subject0~0.base))) (.cse103 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse104 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or (not (<= 1 |outgoing_#in~client#1|)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 (not (<= |outgoing_#in~client#1| 1)) .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (<= 789 ~__ste_client_privateKey2~0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse52 .cse53 (not (<= ~__ste_client_autoResponse0~0 0)) .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 (not (<= ~__ste_client_autoResponse2~0 0)) .cse83 (not (<= ~__ste_client_autoResponse1~0 1)) .cse84 .cse85 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse86 .cse87 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 (not (= ~bob~0 1)) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 (not (= ~__ste_client_autoResponse1~0 0)) .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 (not (= ~__ste_client_autoResponse0~0 0)) .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104))) [2022-12-14 06:20:25,349 INFO L895 garLoopResultBuilder]: At program point L135(line 135) the Hoare annotation is: (or (and (= |outgoing_sign_#in~msg#1| |outgoing_~msg#1|) (= ~queued_message~0 |old(~queued_message~0)|) (= |outgoing_getClientPrivateKey_~handle#1| |outgoing_getClientPrivateKey_#in~handle#1|) (= |outgoing_outgoing__wrappee__AddressBook_~msg#1| |outgoing_outgoing__wrappee__AddressBook_#in~msg#1|) (= |outgoing_sign_#in~client#1| |outgoing_sign_~client#1|) (= |outgoing_sign_#in~msg#1| |outgoing_sign_~msg#1|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |outgoing_sign_~client#1| |outgoing_getClientPrivateKey_#in~handle#1|) (= |outgoing_outgoing__wrappee__AddressBook_#in~client#1| |outgoing_~client#1|) (= |outgoing_getClientPrivateKey_~retValue_acc~31#1| |outgoing_getClientPrivateKey_#res#1|) (= |outgoing_#in~msg#1| |outgoing_~msg#1|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |outgoing_outgoing__wrappee__AddressBook_#in~client#1| |outgoing_outgoing__wrappee__AddressBook_~client#1|) (= |outgoing_sign_#in~client#1| |outgoing_~client#1|) (= ~__ste_email_isSignatureVerified0~0 |old(~__ste_email_isSignatureVerified0~0)|) (= |outgoing_sign_~tmp~7#1| |outgoing_getClientPrivateKey_#res#1|) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= |outgoing_getClientPrivateKey_~retValue_acc~31#1| ~__ste_client_privateKey0~0) (= ~queued_client~0 |old(~queued_client~0)|) (= |outgoing_sign_~privkey~0#1| |outgoing_sign_~tmp~7#1|) (= |outgoing_~client#1| |outgoing_#in~client#1|) (= ~__ste_email_isSignatureVerified1~0 |old(~__ste_email_isSignatureVerified1~0)|) (let ((.cse0 (= |outgoing_sign_~privkey~0#1| 0)) (.cse1 (= ~__ste_email_isSigned1~0 |old(~__ste_email_isSigned1~0)|)) (.cse2 (= ~__ste_email_signKey1~0 |old(~__ste_email_signKey1~0)|))) (or (and (= ~__ste_email_signKey0~0 |old(~__ste_email_signKey0~0)|) .cse0 .cse1 (= ~__ste_email_isSigned0~0 |old(~__ste_email_isSigned0~0)|) .cse2) (and (= ~__ste_email_signKey0~0 |outgoing_setEmailSignKey_~value#1|) (= ~__ste_email_isSigned0~0 |outgoing_setEmailIsSigned_~value#1|) (= |outgoing_setEmailSignKey_#in~value#1| |outgoing_setEmailSignKey_~value#1|) (= |outgoing_setEmailIsSigned_#in~value#1| |outgoing_setEmailIsSigned_~value#1|) (= |outgoing_setEmailIsSigned_#in~handle#1| |outgoing_sign_~msg#1|) (= |outgoing_setEmailSignKey_#in~value#1| |outgoing_sign_~privkey~0#1|) (= |outgoing_setEmailIsSigned_#in~value#1| 1) (not .cse0) (= |outgoing_setEmailSignKey_#in~handle#1| |outgoing_setEmailSignKey_~handle#1|) (= |outgoing_setEmailIsSigned_~handle#1| |outgoing_setEmailIsSigned_#in~handle#1|) (= |outgoing_setEmailSignKey_#in~handle#1| |outgoing_sign_~msg#1|) .cse1 .cse2))) (<= |outgoing_getClientPrivateKey_#res#1| 2147483647) (= |outgoing_~msg#1| |outgoing_outgoing__wrappee__AddressBook_#in~msg#1|) (<= 0 (+ |outgoing_getClientPrivateKey_#res#1| 2147483648))) (let ((.cse3 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse4 (not (= |old(~queued_message~0)| 0))) (.cse5 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse6 (not (= |old(~__ste_email_from0~0)| 0))) (.cse7 (not (= ~rjh~0 |old(~__ste_email_to0~0)|))) (.cse8 (not (= ~__ste_client_name2~0.base 0))) (.cse9 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse10 (not (= ~rjh~0 2))) (.cse11 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse13 (not (= |#NULL.offset| 0))) (.cse14 (not (= ~__ste_Client_counter~0 0))) (.cse15 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse16 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse17 (not (= ~__ste_client_name2~0.offset 0))) (.cse18 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse21 (not (= ~__ste_email_id0~0 0))) (.cse22 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse25 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse26 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse27 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse28 (not (= ~__ste_client_name0~0.base 0))) (.cse29 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse30 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse31 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse32 (not (= ~__ste_email_body1~0.base 0))) (.cse33 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse34 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse35 (not (= ~__ste_client_outbuffer0~0 0))) (.cse36 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse37 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse38 (not (= ~__ste_email_body1~0.offset 0))) (.cse39 (not (= |outgoing_#in~msg#1| 1))) (.cse40 (not (= ~__ste_email_body0~0.offset 0))) (.cse41 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse42 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse43 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse44 (not (= ~head~0.offset 0))) (.cse45 (not (= ~__ste_email_id1~0 0))) (.cse46 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse47 (not (= ~__ste_client_outbuffer1~0 0))) (.cse48 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse49 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse50 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse51 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse52 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse53 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse54 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse55 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse56 (not (= ~__ste_client_outbuffer3~0 0))) (.cse57 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse58 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse59 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse60 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse61 (not (= ~__ste_email_subject0~0.offset 0))) (.cse62 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse63 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse64 (not (= |#NULL.base| 0))) (.cse65 (not (= |old(~queued_client~0)| 0))) (.cse66 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse67 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse68 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse69 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse70 (not (= ~__ste_email_subject1~0.base 0))) (.cse71 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse72 (not (= ~__ste_client_name1~0.offset 0))) (.cse73 (not (= ~__ste_email_body0~0.base 0))) (.cse74 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse75 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse76 (not (= |old(~queue_empty~0)| 1))) (.cse77 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse78 (not (= ~__ste_client_name0~0.offset 0))) (.cse79 (not (= 3 ~chuck~0))) (.cse80 (not (<= ~__ste_client_idCounter2~0 3))) (.cse81 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse83 (not (<= 0 |#StackHeapBarrier|))) (.cse84 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse85 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse86 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse87 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse88 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse89 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse90 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse91 (not (= ~__ste_client_outbuffer2~0 0))) (.cse92 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse93 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse94 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse95 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse96 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse97 (not (= ~__ste_client_name1~0.base 0))) (.cse98 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse99 (not (= ~head~0.base 0))) (.cse100 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse101 (not (= ~__ste_Email_counter~0 0))) (.cse102 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse103 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse104 (not (= ~__ste_email_subject1~0.offset 0))) (.cse105 (not (= 0 ~__ste_email_subject0~0.base))) (.cse106 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse107 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or (not (<= 1 |outgoing_#in~client#1|)) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey2~0 789)) .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 (not (<= |outgoing_#in~client#1| 1)) .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 (not (<= 789 ~__ste_client_privateKey2~0)) .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse55 .cse56 (not (<= ~__ste_client_autoResponse0~0 0)) .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 (not (<= ~__ste_client_autoResponse2~0 0)) .cse86 (not (<= ~__ste_client_autoResponse1~0 1)) .cse87 .cse88 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse89 .cse90 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107) (or .cse3 .cse4 .cse5 .cse6 .cse7 (not (= ~__ste_client_autoResponse2~0 0)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse14 .cse15 (not (= ~bob~0 1)) .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 (not (= ~__ste_client_autoResponse1~0 0)) .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 (not (= ~__ste_client_autoResponse0~0 0)) .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107)))) [2022-12-14 06:20:25,349 INFO L899 garLoopResultBuilder]: For program point L135-1(line 135) no Hoare annotation was computed. [2022-12-14 06:20:25,350 INFO L895 garLoopResultBuilder]: At program point L148(line 148) the Hoare annotation is: (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~queued_message~0)| 0))) (.cse2 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse3 (not (= |old(~__ste_email_from0~0)| 0))) (.cse4 (not (= ~rjh~0 |old(~__ste_email_to0~0)|))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse23 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse39 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse40 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse41 (not (= ~head~0.offset 0))) (.cse42 (not (= ~__ste_email_id1~0 0))) (.cse43 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse44 (not (= ~__ste_client_outbuffer1~0 0))) (.cse45 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse47 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse48 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse49 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse50 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse51 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse52 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse53 (not (= ~__ste_client_outbuffer3~0 0))) (.cse54 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse55 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse56 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse57 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse58 (not (= ~__ste_email_subject0~0.offset 0))) (.cse59 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse60 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse61 (not (= |#NULL.base| 0))) (.cse62 (not (= |old(~queued_client~0)| 0))) (.cse63 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse64 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse65 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse66 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse67 (not (= ~__ste_email_subject1~0.base 0))) (.cse68 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse69 (not (= ~__ste_client_name1~0.offset 0))) (.cse70 (not (= ~__ste_email_body0~0.base 0))) (.cse71 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse72 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse73 (not (= |old(~queue_empty~0)| 1))) (.cse74 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse75 (not (= ~__ste_client_name0~0.offset 0))) (.cse76 (not (= 3 ~chuck~0))) (.cse77 (not (<= ~__ste_client_idCounter2~0 3))) (.cse78 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse79 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse80 (not (<= 0 |#StackHeapBarrier|))) (.cse81 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse83 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse84 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse85 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse86 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse87 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse88 (not (= ~__ste_client_outbuffer2~0 0))) (.cse89 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse90 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse91 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse92 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse93 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse94 (not (= ~__ste_client_name1~0.base 0))) (.cse95 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse96 (not (= ~head~0.base 0))) (.cse97 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse98 (not (= ~__ste_Email_counter~0 0))) (.cse99 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse100 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse101 (not (= ~__ste_email_subject1~0.offset 0))) (.cse102 (not (= 0 ~__ste_email_subject0~0.base))) (.cse103 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse104 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or (not (<= 1 |outgoing_#in~client#1|)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 (not (<= |outgoing_#in~client#1| 1)) .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (<= 789 ~__ste_client_privateKey2~0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse52 .cse53 (not (<= ~__ste_client_autoResponse0~0 0)) .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 (not (<= ~__ste_client_autoResponse2~0 0)) .cse83 (not (<= ~__ste_client_autoResponse1~0 1)) .cse84 .cse85 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse86 .cse87 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 (not (= ~bob~0 1)) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 (not (= ~__ste_client_autoResponse1~0 0)) .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 (not (= ~__ste_client_autoResponse0~0 0)) .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104))) [2022-12-14 06:20:25,350 INFO L899 garLoopResultBuilder]: For program point L149(line 149) no Hoare annotation was computed. [2022-12-14 06:20:25,351 INFO L895 garLoopResultBuilder]: At program point L145(line 145) the Hoare annotation is: (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~queued_message~0)| 0))) (.cse2 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse3 (not (= |old(~__ste_email_from0~0)| 0))) (.cse4 (not (= ~rjh~0 |old(~__ste_email_to0~0)|))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse23 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse39 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse40 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse41 (not (= ~head~0.offset 0))) (.cse42 (not (= ~__ste_email_id1~0 0))) (.cse43 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse44 (not (= ~__ste_client_outbuffer1~0 0))) (.cse45 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse47 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse48 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse49 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse50 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse51 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse52 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse53 (not (= ~__ste_client_outbuffer3~0 0))) (.cse54 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse55 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse56 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse57 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse58 (not (= ~__ste_email_subject0~0.offset 0))) (.cse59 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse60 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse61 (not (= |#NULL.base| 0))) (.cse62 (not (= |old(~queued_client~0)| 0))) (.cse63 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse64 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse65 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse66 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse67 (not (= ~__ste_email_subject1~0.base 0))) (.cse68 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse69 (not (= ~__ste_client_name1~0.offset 0))) (.cse70 (not (= ~__ste_email_body0~0.base 0))) (.cse71 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse72 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse73 (not (= |old(~queue_empty~0)| 1))) (.cse74 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse75 (not (= ~__ste_client_name0~0.offset 0))) (.cse76 (not (= 3 ~chuck~0))) (.cse77 (not (<= ~__ste_client_idCounter2~0 3))) (.cse78 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse79 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse80 (not (<= 0 |#StackHeapBarrier|))) (.cse81 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse83 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse84 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse85 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse86 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse87 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse88 (not (= ~__ste_client_outbuffer2~0 0))) (.cse89 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse90 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse91 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse92 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse93 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse94 (not (= ~__ste_client_name1~0.base 0))) (.cse95 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse96 (not (= ~head~0.base 0))) (.cse97 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse98 (not (= ~__ste_Email_counter~0 0))) (.cse99 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse100 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse101 (not (= ~__ste_email_subject1~0.offset 0))) (.cse102 (not (= 0 ~__ste_email_subject0~0.base))) (.cse103 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse104 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or (not (<= 1 |outgoing_#in~client#1|)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 (not (<= |outgoing_#in~client#1| 1)) .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (<= 789 ~__ste_client_privateKey2~0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse52 .cse53 (not (<= ~__ste_client_autoResponse0~0 0)) .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 (not (<= ~__ste_client_autoResponse2~0 0)) .cse83 (not (<= ~__ste_client_autoResponse1~0 1)) .cse84 .cse85 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse86 .cse87 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 (not (= ~bob~0 1)) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 (not (= ~__ste_client_autoResponse1~0 0)) .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 (not (= ~__ste_client_autoResponse0~0 0)) .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104))) [2022-12-14 06:20:25,351 INFO L899 garLoopResultBuilder]: For program point L145-1(line 145) no Hoare annotation was computed. [2022-12-14 06:20:25,352 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 161 171) the Hoare annotation is: (or (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~queued_message~0)| 0))) (.cse2 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse3 (not (= |old(~__ste_email_from0~0)| 0))) (.cse4 (not (= ~rjh~0 |old(~__ste_email_to0~0)|))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse23 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse39 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse40 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse41 (not (= ~head~0.offset 0))) (.cse42 (not (= ~__ste_email_id1~0 0))) (.cse43 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse44 (not (= ~__ste_client_outbuffer1~0 0))) (.cse45 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse47 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse48 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse49 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse50 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse51 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse52 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse53 (not (= ~__ste_client_outbuffer3~0 0))) (.cse54 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse55 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse56 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse57 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse58 (not (= ~__ste_email_subject0~0.offset 0))) (.cse59 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse60 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse61 (not (= |#NULL.base| 0))) (.cse62 (not (= |old(~queued_client~0)| 0))) (.cse63 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse64 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse65 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse66 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse67 (not (= ~__ste_email_subject1~0.base 0))) (.cse68 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse69 (not (= ~__ste_client_name1~0.offset 0))) (.cse70 (not (= ~__ste_email_body0~0.base 0))) (.cse71 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse72 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse73 (not (= |old(~queue_empty~0)| 1))) (.cse74 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse75 (not (= ~__ste_client_name0~0.offset 0))) (.cse76 (not (= 3 ~chuck~0))) (.cse77 (not (<= ~__ste_client_idCounter2~0 3))) (.cse78 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse79 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse80 (not (<= 0 |#StackHeapBarrier|))) (.cse81 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse83 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse84 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse85 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse86 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse87 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse88 (not (= ~__ste_client_outbuffer2~0 0))) (.cse89 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse90 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse91 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse92 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse93 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse94 (not (= ~__ste_client_name1~0.base 0))) (.cse95 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse96 (not (= ~head~0.base 0))) (.cse97 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse98 (not (= ~__ste_Email_counter~0 0))) (.cse99 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse100 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse101 (not (= ~__ste_email_subject1~0.offset 0))) (.cse102 (not (= 0 ~__ste_email_subject0~0.base))) (.cse103 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse104 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or (not (<= 1 |outgoing_#in~client#1|)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 (not (<= |outgoing_#in~client#1| 1)) .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (<= 789 ~__ste_client_privateKey2~0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse52 .cse53 (not (<= ~__ste_client_autoResponse0~0 0)) .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 (not (<= ~__ste_client_autoResponse2~0 0)) .cse83 (not (<= ~__ste_client_autoResponse1~0 1)) .cse84 .cse85 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse86 .cse87 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 (not (= ~bob~0 1)) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 (not (= ~__ste_client_autoResponse1~0 0)) .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 (not (= ~__ste_client_autoResponse0~0 0)) .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104))) (and (= ~queued_message~0 |old(~queued_message~0)|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_signKey0~0 |old(~__ste_email_signKey0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= ~__ste_email_isSignatureVerified0~0 |old(~__ste_email_isSignatureVerified0~0)|) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= ~__ste_email_isSigned1~0 |old(~__ste_email_isSigned1~0)|) (= ~__ste_email_isSignatureVerified1~0 |old(~__ste_email_isSignatureVerified1~0)|) (= ~__ste_email_isSigned0~0 |old(~__ste_email_isSigned0~0)|) (= ~__ste_email_signKey1~0 |old(~__ste_email_signKey1~0)|))) [2022-12-14 06:20:25,352 INFO L899 garLoopResultBuilder]: For program point outgoingEXIT(lines 161 171) no Hoare annotation was computed. [2022-12-14 06:20:25,353 INFO L895 garLoopResultBuilder]: At program point L150(line 150) the Hoare annotation is: (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~queued_message~0)| 0))) (.cse2 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse3 (not (= |old(~__ste_email_from0~0)| 0))) (.cse4 (not (= ~rjh~0 |old(~__ste_email_to0~0)|))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse23 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse39 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse40 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse41 (not (= ~head~0.offset 0))) (.cse42 (not (= ~__ste_email_id1~0 0))) (.cse43 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse44 (not (= ~__ste_client_outbuffer1~0 0))) (.cse45 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse47 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse48 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse49 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse50 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse51 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse52 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse53 (not (= ~__ste_client_outbuffer3~0 0))) (.cse54 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse55 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse56 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse57 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse58 (not (= ~__ste_email_subject0~0.offset 0))) (.cse59 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse60 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse61 (not (= |#NULL.base| 0))) (.cse62 (not (= |old(~queued_client~0)| 0))) (.cse63 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse64 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse65 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse66 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse67 (not (= ~__ste_email_subject1~0.base 0))) (.cse68 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse69 (not (= ~__ste_client_name1~0.offset 0))) (.cse70 (not (= ~__ste_email_body0~0.base 0))) (.cse71 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse72 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse73 (not (= |old(~queue_empty~0)| 1))) (.cse74 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse75 (not (= ~__ste_client_name0~0.offset 0))) (.cse76 (not (= 3 ~chuck~0))) (.cse77 (not (<= ~__ste_client_idCounter2~0 3))) (.cse78 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse79 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse80 (not (<= 0 |#StackHeapBarrier|))) (.cse81 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse83 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse84 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse85 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse86 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse87 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse88 (not (= ~__ste_client_outbuffer2~0 0))) (.cse89 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse90 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse91 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse92 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse93 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse94 (not (= ~__ste_client_name1~0.base 0))) (.cse95 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse96 (not (= ~head~0.base 0))) (.cse97 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse98 (not (= ~__ste_Email_counter~0 0))) (.cse99 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse100 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse101 (not (= ~__ste_email_subject1~0.offset 0))) (.cse102 (not (= 0 ~__ste_email_subject0~0.base))) (.cse103 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse104 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or (not (<= 1 |outgoing_#in~client#1|)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 (not (<= |outgoing_#in~client#1| 1)) .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (<= 789 ~__ste_client_privateKey2~0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse52 .cse53 (not (<= ~__ste_client_autoResponse0~0 0)) .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 (not (<= ~__ste_client_autoResponse2~0 0)) .cse83 (not (<= ~__ste_client_autoResponse1~0 1)) .cse84 .cse85 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse86 .cse87 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 (not (= ~bob~0 1)) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 (not (= ~__ste_client_autoResponse1~0 0)) .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 (not (= ~__ste_client_autoResponse0~0 0)) .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104))) [2022-12-14 06:20:25,354 INFO L895 garLoopResultBuilder]: At program point L150-1(line 150) the Hoare annotation is: (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~queued_message~0)| 0))) (.cse2 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse3 (not (= |old(~__ste_email_from0~0)| 0))) (.cse4 (not (= ~rjh~0 |old(~__ste_email_to0~0)|))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse23 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse39 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse40 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse41 (not (= ~head~0.offset 0))) (.cse42 (not (= ~__ste_email_id1~0 0))) (.cse43 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse44 (not (= ~__ste_client_outbuffer1~0 0))) (.cse45 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse47 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse48 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse49 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse50 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse51 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse52 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse53 (not (= ~__ste_client_outbuffer3~0 0))) (.cse54 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse55 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse56 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse57 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse58 (not (= ~__ste_email_subject0~0.offset 0))) (.cse59 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse60 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse61 (not (= |#NULL.base| 0))) (.cse62 (not (= |old(~queued_client~0)| 0))) (.cse63 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse64 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse65 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse66 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse67 (not (= ~__ste_email_subject1~0.base 0))) (.cse68 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse69 (not (= ~__ste_client_name1~0.offset 0))) (.cse70 (not (= ~__ste_email_body0~0.base 0))) (.cse71 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse72 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse73 (not (= |old(~queue_empty~0)| 1))) (.cse74 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse75 (not (= ~__ste_client_name0~0.offset 0))) (.cse76 (not (= 3 ~chuck~0))) (.cse77 (not (<= ~__ste_client_idCounter2~0 3))) (.cse78 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse79 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse80 (not (<= 0 |#StackHeapBarrier|))) (.cse81 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse83 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse84 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse85 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse86 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse87 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse88 (not (= ~__ste_client_outbuffer2~0 0))) (.cse89 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse90 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse91 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse92 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse93 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse94 (not (= ~__ste_client_name1~0.base 0))) (.cse95 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse96 (not (= ~head~0.base 0))) (.cse97 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse98 (not (= ~__ste_Email_counter~0 0))) (.cse99 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse100 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse101 (not (= ~__ste_email_subject1~0.offset 0))) (.cse102 (not (= 0 ~__ste_email_subject0~0.base))) (.cse103 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse104 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or (not (<= 1 |outgoing_#in~client#1|)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 (not (<= |outgoing_#in~client#1| 1)) .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (<= 789 ~__ste_client_privateKey2~0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse52 .cse53 (not (<= ~__ste_client_autoResponse0~0 0)) .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 (not (<= ~__ste_client_autoResponse2~0 0)) .cse83 (not (<= ~__ste_client_autoResponse1~0 1)) .cse84 .cse85 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse86 .cse87 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 (not (= ~bob~0 1)) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 (not (= ~__ste_client_autoResponse1~0 0)) .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 (not (= ~__ste_client_autoResponse0~0 0)) .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104))) [2022-12-14 06:20:25,355 INFO L895 garLoopResultBuilder]: At program point L142(line 142) the Hoare annotation is: (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~queued_message~0)| 0))) (.cse2 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse3 (not (= |old(~__ste_email_from0~0)| 0))) (.cse4 (not (= ~rjh~0 |old(~__ste_email_to0~0)|))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse23 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse39 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse40 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse41 (not (= ~head~0.offset 0))) (.cse42 (not (= ~__ste_email_id1~0 0))) (.cse43 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse44 (not (= ~__ste_client_outbuffer1~0 0))) (.cse45 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse47 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse48 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse49 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse50 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse51 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse52 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse53 (not (= ~__ste_client_outbuffer3~0 0))) (.cse54 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse55 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse56 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse57 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse58 (not (= ~__ste_email_subject0~0.offset 0))) (.cse59 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse60 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse61 (not (= |#NULL.base| 0))) (.cse62 (not (= |old(~queued_client~0)| 0))) (.cse63 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse64 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse65 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse66 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse67 (not (= ~__ste_email_subject1~0.base 0))) (.cse68 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse69 (not (= ~__ste_client_name1~0.offset 0))) (.cse70 (not (= ~__ste_email_body0~0.base 0))) (.cse71 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse72 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse73 (not (= |old(~queue_empty~0)| 1))) (.cse74 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse75 (not (= ~__ste_client_name0~0.offset 0))) (.cse76 (not (= 3 ~chuck~0))) (.cse77 (not (<= ~__ste_client_idCounter2~0 3))) (.cse78 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse79 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse80 (not (<= 0 |#StackHeapBarrier|))) (.cse81 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse83 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse84 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse85 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse86 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse87 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse88 (not (= ~__ste_client_outbuffer2~0 0))) (.cse89 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse90 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse91 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse92 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse93 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse94 (not (= ~__ste_client_name1~0.base 0))) (.cse95 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse96 (not (= ~head~0.base 0))) (.cse97 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse98 (not (= ~__ste_Email_counter~0 0))) (.cse99 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse100 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse101 (not (= ~__ste_email_subject1~0.offset 0))) (.cse102 (not (= 0 ~__ste_email_subject0~0.base))) (.cse103 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse104 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or (not (<= 1 |outgoing_#in~client#1|)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 (not (<= |outgoing_#in~client#1| 1)) .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (<= 789 ~__ste_client_privateKey2~0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse52 .cse53 (not (<= ~__ste_client_autoResponse0~0 0)) .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 (not (<= ~__ste_client_autoResponse2~0 0)) .cse83 (not (<= ~__ste_client_autoResponse1~0 1)) .cse84 .cse85 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse86 .cse87 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 (not (= ~bob~0 1)) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 (not (= ~__ste_client_autoResponse1~0 0)) .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 (not (= ~__ste_client_autoResponse0~0 0)) .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104))) [2022-12-14 06:20:25,355 INFO L899 garLoopResultBuilder]: For program point L142-1(line 142) no Hoare annotation was computed. [2022-12-14 06:20:25,357 INFO L895 garLoopResultBuilder]: At program point L138(lines 138 157) the Hoare annotation is: (or (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~queued_message~0)| 0))) (.cse2 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse3 (not (= |old(~__ste_email_from0~0)| 0))) (.cse4 (not (= ~rjh~0 |old(~__ste_email_to0~0)|))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse23 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= ~__ste_email_body1~0.base 0))) (.cse30 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse31 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse32 (not (= ~__ste_client_outbuffer0~0 0))) (.cse33 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse34 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse35 (not (= ~__ste_email_body1~0.offset 0))) (.cse36 (not (= |outgoing_#in~msg#1| 1))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse39 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse40 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse41 (not (= ~head~0.offset 0))) (.cse42 (not (= ~__ste_email_id1~0 0))) (.cse43 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse44 (not (= ~__ste_client_outbuffer1~0 0))) (.cse45 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse47 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse48 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse49 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse50 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse51 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse52 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse53 (not (= ~__ste_client_outbuffer3~0 0))) (.cse54 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse55 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse56 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse57 (not (= ~bob~0 |outgoing_#in~client#1|))) (.cse58 (not (= ~__ste_email_subject0~0.offset 0))) (.cse59 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse60 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse61 (not (= |#NULL.base| 0))) (.cse62 (not (= |old(~queued_client~0)| 0))) (.cse63 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse64 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse65 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse66 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse67 (not (= ~__ste_email_subject1~0.base 0))) (.cse68 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse69 (not (= ~__ste_client_name1~0.offset 0))) (.cse70 (not (= ~__ste_email_body0~0.base 0))) (.cse71 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse72 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse73 (not (= |old(~queue_empty~0)| 1))) (.cse74 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse75 (not (= ~__ste_client_name0~0.offset 0))) (.cse76 (not (= 3 ~chuck~0))) (.cse77 (not (<= ~__ste_client_idCounter2~0 3))) (.cse78 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse79 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse80 (not (<= 0 |#StackHeapBarrier|))) (.cse81 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse83 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse84 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse85 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse86 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse87 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse88 (not (= ~__ste_client_outbuffer2~0 0))) (.cse89 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse90 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse91 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse92 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse93 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse94 (not (= ~__ste_client_name1~0.base 0))) (.cse95 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse96 (not (= ~head~0.base 0))) (.cse97 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse98 (not (= ~__ste_Email_counter~0 0))) (.cse99 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse100 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse101 (not (= ~__ste_email_subject1~0.offset 0))) (.cse102 (not (= 0 ~__ste_email_subject0~0.base))) (.cse103 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse104 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or (not (<= 1 |outgoing_#in~client#1|)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 (not (<= |outgoing_#in~client#1| 1)) .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (<= 789 ~__ste_client_privateKey2~0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse52 .cse53 (not (<= ~__ste_client_autoResponse0~0 0)) .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 (not (<= ~__ste_client_autoResponse2~0 0)) .cse83 (not (<= ~__ste_client_autoResponse1~0 1)) .cse84 .cse85 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse86 .cse87 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104) (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 (not (= ~bob~0 1)) .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 (not (= ~__ste_client_autoResponse1~0 0)) .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 (not (= ~__ste_client_autoResponse0~0 0)) .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104))) (and (= |outgoing_outgoing__wrappee__AddressBook_~msg#1| |outgoing_outgoing__wrappee__AddressBook_#in~msg#1|) (<= |outgoing_sign_~msg#1| 1) (<= ~queued_message~0 0) (= |outgoing_outgoing__wrappee__AddressBook_~tmp~2#1| |outgoing_outgoing__wrappee__AddressBook_~size~0#1|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |outgoing_sign_~client#1| |outgoing_getClientPrivateKey_#in~handle#1|) (= |outgoing_getClientPrivateKey_~retValue_acc~31#1| |outgoing_getClientPrivateKey_#res#1|) (<= |outgoing_getClientPrivateKey_~handle#1| 1) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |outgoing_outgoing__wrappee__AddressBook_#in~client#1| |outgoing_outgoing__wrappee__AddressBook_~client#1|) (= |outgoing_sign_#in~client#1| |outgoing_~client#1|) (= ~__ste_email_isSignatureVerified0~0 |old(~__ste_email_isSignatureVerified0~0)|) (<= 0 |outgoing_outgoing__wrappee__AddressBook_~tmp~2#1|) (= |outgoing_sign_~tmp~7#1| |outgoing_getClientPrivateKey_#res#1|) (<= 0 ~queued_message~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (<= 1 |outgoing_sign_~msg#1|) (<= 1 |outgoing_outgoing__wrappee__AddressBook_~client#1|) (<= 1 |outgoing_~msg#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (<= |outgoing_outgoing__wrappee__AddressBook_~tmp~2#1| 0) (= |outgoing_getClientPrivateKey_~retValue_acc~31#1| ~__ste_client_privateKey0~0) (<= 1 |outgoing_getClientPrivateKey_#in~handle#1|) (= ~queued_client~0 |old(~queued_client~0)|) (= |outgoing_sign_~privkey~0#1| |outgoing_sign_~tmp~7#1|) (= |outgoing_~client#1| |outgoing_#in~client#1|) (<= |outgoing_sign_#in~msg#1| 1) (= ~__ste_email_isSignatureVerified1~0 |old(~__ste_email_isSignatureVerified1~0)|) (let ((.cse105 (= |outgoing_sign_~privkey~0#1| 0)) (.cse106 (= ~__ste_email_isSigned1~0 |old(~__ste_email_isSigned1~0)|)) (.cse107 (= ~__ste_email_signKey1~0 |old(~__ste_email_signKey1~0)|))) (or (and (= ~__ste_email_signKey0~0 |old(~__ste_email_signKey0~0)|) .cse105 .cse106 (= ~__ste_email_isSigned0~0 |old(~__ste_email_isSigned0~0)|) .cse107) (and (= ~__ste_email_signKey0~0 |outgoing_setEmailSignKey_~value#1|) (= ~__ste_email_isSigned0~0 |outgoing_setEmailIsSigned_~value#1|) (= |outgoing_setEmailSignKey_#in~value#1| |outgoing_setEmailSignKey_~value#1|) (= |outgoing_setEmailIsSigned_#in~value#1| |outgoing_setEmailIsSigned_~value#1|) (= |outgoing_setEmailIsSigned_#in~handle#1| |outgoing_sign_~msg#1|) (= |outgoing_setEmailSignKey_#in~value#1| |outgoing_sign_~privkey~0#1|) (= |outgoing_setEmailIsSigned_#in~value#1| 1) (not .cse105) (= |outgoing_setEmailSignKey_#in~handle#1| |outgoing_setEmailSignKey_~handle#1|) (= |outgoing_setEmailIsSigned_~handle#1| |outgoing_setEmailIsSigned_#in~handle#1|) (= |outgoing_setEmailSignKey_#in~handle#1| |outgoing_sign_~msg#1|) .cse106 .cse107))) (<= |outgoing_~msg#1| 1) (<= |outgoing_getClientPrivateKey_#res#1| 2147483647) (= |outgoing_~msg#1| |outgoing_outgoing__wrappee__AddressBook_#in~msg#1|) (<= 1 |outgoing_sign_#in~msg#1|) (<= 0 (+ |outgoing_getClientPrivateKey_#res#1| 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= |outgoing_outgoing__wrappee__AddressBook_~client#1| 1) (<= 1 |outgoing_getClientPrivateKey_~handle#1|) (<= |outgoing_getClientPrivateKey_#in~handle#1| 1))) [2022-12-14 06:20:25,357 INFO L899 garLoopResultBuilder]: For program point isSignedEXIT(lines 843 861) no Hoare annotation was computed. [2022-12-14 06:20:25,357 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 843 861) the Hoare annotation is: true [2022-12-14 06:20:25,358 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 1683 1707) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (and (= |old(~__ste_ClientKeyring_size1~0)| ~__ste_ClientKeyring_size1~0) (= |old(~__ste_ClientKeyring_size2~0)| ~__ste_ClientKeyring_size2~0) (= |old(~__ste_ClientKeyring_size0~0)| ~__ste_ClientKeyring_size0~0)) (not (= ~__ste_email_from0~0 0)) (not (= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (= |old(~__ste_ClientKeyring_size2~0)| 0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~bob~0 1)) (not (= ~queued_message~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~queued_client~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (= ~__ste_Client_Keyring0_User0~0 0)) (not (= ~__ste_email_signKey1~0 0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_email_to0~0 0)) (not (= |createClientKeyringEntry_#in~handle#1| ~bob~0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_Client_Keyring1_User0~0 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring1_User1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_email_to1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_User1~0 0)) (not (= ~__ste_Client_Keyring2_User1~0 0)) (not (= |old(~__ste_ClientKeyring_size1~0)| 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_client_autoResponse1~0 0)) (not (= 789 ~__ste_client_privateKey2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= |old(~__ste_ClientKeyring_size0~0)| 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_client_forwardReceiver1~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_User0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_autoResponse0~0 0)) (not (= ~queue_empty~0 1)) (not (= ~__ste_client_name1~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_from1~0 0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:20:25,358 INFO L899 garLoopResultBuilder]: For program point createClientKeyringEntryEXIT(lines 1683 1707) no Hoare annotation was computed. [2022-12-14 06:20:25,359 INFO L895 garLoopResultBuilder]: At program point L544(line 544) the Hoare annotation is: (or (and (<= ~queued_message~0 0) (= ~__ste_email_signKey0~0 |old(~__ste_email_signKey0~0)|) (<= 0 ~__ste_email_from0~0) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |sendEmail_createEmail_~from#1| ~__ste_email_from0~0) (= ~__ste_email_isSignatureVerified0~0 |old(~__ste_email_isSignatureVerified0~0)|) (<= 0 ~queued_message~0) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (<= 1 |sendEmail_~sender#1|) (<= |sendEmail_~sender#1| 1) (= |old(~queue_empty~0)| ~queue_empty~0) (<= ~__ste_email_from0~0 0) (= ~__ste_email_to0~0 |sendEmail_createEmail_~to#1|) (= ~queued_client~0 |old(~queued_client~0)|) (<= |sendEmail_createEmail_#in~to#1| 2) (= ~__ste_email_isSigned1~0 |old(~__ste_email_isSigned1~0)|) (<= 2 |sendEmail_createEmail_#in~to#1|) (= ~__ste_email_isSignatureVerified1~0 |old(~__ste_email_isSignatureVerified1~0)|) (= ~__ste_email_isSigned0~0 |old(~__ste_email_isSigned0~0)|) (<= 2 |sendEmail_createEmail_~to#1|) (<= ~__ste_email_to0~0 2) (= 1 |sendEmail_createEmail_~msg~0#1|) (= ~__ste_email_signKey1~0 |old(~__ste_email_signKey1~0)|)) (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~queued_message~0)| 0))) (.cse2 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse3 (not (= |old(~__ste_email_from0~0)| 0))) (.cse4 (not (= ~__ste_client_name2~0.base 0))) (.cse5 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse6 (not (= ~rjh~0 2))) (.cse7 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse8 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= ~__ste_Client_counter~0 0))) (.cse11 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse12 (not (= ~bob~0 1))) (.cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse23 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= |old(~__ste_email_to0~0)| 0))) (.cse30 (not (= ~__ste_email_body1~0.base 0))) (.cse31 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse32 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse33 (not (= ~__ste_client_outbuffer0~0 0))) (.cse34 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse35 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse36 (not (= ~__ste_email_body1~0.offset 0))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse39 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse40 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse41 (not (= ~head~0.offset 0))) (.cse42 (not (= ~__ste_email_id1~0 0))) (.cse43 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse44 (not (= ~__ste_client_outbuffer1~0 0))) (.cse45 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse47 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse48 (not (= ~bob~0 |sendEmail_#in~sender#1|))) (.cse49 (not (= |old(~__ste_email_to1~0)| 0))) (.cse50 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse51 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse52 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse53 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse54 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse55 (not (= ~__ste_client_outbuffer3~0 0))) (.cse56 (not (= |sendEmail_#in~receiver#1| ~rjh~0))) (.cse57 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse58 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse59 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse60 (not (= ~__ste_email_subject0~0.offset 0))) (.cse61 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse62 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse63 (not (= |#NULL.base| 0))) (.cse64 (not (= |old(~queued_client~0)| 0))) (.cse65 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse66 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse67 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse68 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse69 (not (= ~__ste_email_subject1~0.base 0))) (.cse70 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse71 (not (= ~__ste_client_name1~0.offset 0))) (.cse72 (not (= ~__ste_email_body0~0.base 0))) (.cse73 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse74 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse75 (not (= |old(~queue_empty~0)| 1))) (.cse76 (not (= |old(~__ste_email_from1~0)| 0))) (.cse77 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse78 (not (= ~__ste_client_name0~0.offset 0))) (.cse79 (not (= 3 ~chuck~0))) (.cse80 (not (<= ~__ste_client_idCounter2~0 3))) (.cse81 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse83 (not (<= 0 |#StackHeapBarrier|))) (.cse84 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse85 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse86 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse87 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse88 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse89 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse90 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse91 (not (= ~__ste_client_outbuffer2~0 0))) (.cse92 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse93 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse94 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse95 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse96 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse97 (not (= ~__ste_client_name1~0.base 0))) (.cse98 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse99 (not (= ~head~0.base 0))) (.cse100 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse101 (not (= ~__ste_Email_counter~0 0))) (.cse102 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse103 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse104 (not (= ~__ste_email_subject1~0.offset 0))) (.cse105 (not (= 0 ~__ste_email_subject0~0.base))) (.cse106 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse107 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~__ste_client_autoResponse2~0 0)) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 (not (= ~__ste_client_autoResponse1~0 0)) .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 (not (= ~__ste_client_autoResponse0~0 0)) .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (not (<= ~__ste_client_privateKey2~0 789)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (<= 789 ~__ste_client_privateKey2~0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse54 .cse55 (not (<= ~__ste_client_autoResponse0~0 0)) .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 (not (<= ~__ste_client_autoResponse2~0 0)) .cse86 (not (<= ~__ste_client_autoResponse1~0 1)) .cse87 .cse88 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse89 .cse90 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107)))) [2022-12-14 06:20:25,360 INFO L899 garLoopResultBuilder]: For program point sendEmailEXIT(lines 236 248) no Hoare annotation was computed. [2022-12-14 06:20:25,361 INFO L895 garLoopResultBuilder]: At program point L543(line 543) the Hoare annotation is: (or (and (= ~queued_message~0 |old(~queued_message~0)|) (= |sendEmail_createEmail_#in~from#1| 0) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_createEmail_~to#1|) (= ~__ste_email_signKey0~0 |old(~__ste_email_signKey0~0)|) (= |sendEmail_#in~sender#1| |sendEmail_~sender#1|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_~receiver#1|) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= ~__ste_email_isSignatureVerified0~0 |old(~__ste_email_isSignatureVerified0~0)|) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= ~__ste_email_isSigned1~0 |old(~__ste_email_isSigned1~0)|) (= ~__ste_email_isSignatureVerified1~0 |old(~__ste_email_isSignatureVerified1~0)|) (= ~__ste_email_isSigned0~0 |old(~__ste_email_isSigned0~0)|) (= 1 |sendEmail_createEmail_~msg~0#1|) (= ~__ste_email_signKey1~0 |old(~__ste_email_signKey1~0)|)) (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~queued_message~0)| 0))) (.cse2 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse3 (not (= |old(~__ste_email_from0~0)| 0))) (.cse4 (not (= ~__ste_client_name2~0.base 0))) (.cse5 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse6 (not (= ~rjh~0 2))) (.cse7 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse8 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= ~__ste_Client_counter~0 0))) (.cse11 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse12 (not (= ~bob~0 1))) (.cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse23 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= |old(~__ste_email_to0~0)| 0))) (.cse30 (not (= ~__ste_email_body1~0.base 0))) (.cse31 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse32 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse33 (not (= ~__ste_client_outbuffer0~0 0))) (.cse34 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse35 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse36 (not (= ~__ste_email_body1~0.offset 0))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse39 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse40 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse41 (not (= ~head~0.offset 0))) (.cse42 (not (= ~__ste_email_id1~0 0))) (.cse43 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse44 (not (= ~__ste_client_outbuffer1~0 0))) (.cse45 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse47 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse48 (not (= ~bob~0 |sendEmail_#in~sender#1|))) (.cse49 (not (= |old(~__ste_email_to1~0)| 0))) (.cse50 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse51 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse52 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse53 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse54 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse55 (not (= ~__ste_client_outbuffer3~0 0))) (.cse56 (not (= |sendEmail_#in~receiver#1| ~rjh~0))) (.cse57 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse58 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse59 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse60 (not (= ~__ste_email_subject0~0.offset 0))) (.cse61 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse62 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse63 (not (= |#NULL.base| 0))) (.cse64 (not (= |old(~queued_client~0)| 0))) (.cse65 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse66 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse67 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse68 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse69 (not (= ~__ste_email_subject1~0.base 0))) (.cse70 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse71 (not (= ~__ste_client_name1~0.offset 0))) (.cse72 (not (= ~__ste_email_body0~0.base 0))) (.cse73 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse74 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse75 (not (= |old(~queue_empty~0)| 1))) (.cse76 (not (= |old(~__ste_email_from1~0)| 0))) (.cse77 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse78 (not (= ~__ste_client_name0~0.offset 0))) (.cse79 (not (= 3 ~chuck~0))) (.cse80 (not (<= ~__ste_client_idCounter2~0 3))) (.cse81 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse83 (not (<= 0 |#StackHeapBarrier|))) (.cse84 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse85 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse86 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse87 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse88 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse89 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse90 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse91 (not (= ~__ste_client_outbuffer2~0 0))) (.cse92 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse93 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse94 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse95 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse96 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse97 (not (= ~__ste_client_name1~0.base 0))) (.cse98 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse99 (not (= ~head~0.base 0))) (.cse100 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse101 (not (= ~__ste_Email_counter~0 0))) (.cse102 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse103 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse104 (not (= ~__ste_email_subject1~0.offset 0))) (.cse105 (not (= 0 ~__ste_email_subject0~0.base))) (.cse106 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse107 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~__ste_client_autoResponse2~0 0)) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 (not (= ~__ste_client_autoResponse1~0 0)) .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 (not (= ~__ste_client_autoResponse0~0 0)) .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (not (<= ~__ste_client_privateKey2~0 789)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (<= 789 ~__ste_client_privateKey2~0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse54 .cse55 (not (<= ~__ste_client_autoResponse0~0 0)) .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 (not (<= ~__ste_client_autoResponse2~0 0)) .cse86 (not (<= ~__ste_client_autoResponse1~0 1)) .cse87 .cse88 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse89 .cse90 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107)))) [2022-12-14 06:20:25,362 INFO L895 garLoopResultBuilder]: At program point L543-1(line 543) the Hoare annotation is: (or (and (= ~queued_message~0 |old(~queued_message~0)|) (= |sendEmail_createEmail_#in~from#1| 0) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_createEmail_~to#1|) (= ~__ste_email_signKey0~0 |old(~__ste_email_signKey0~0)|) (= |sendEmail_#in~sender#1| |sendEmail_~sender#1|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |sendEmail_createEmail_#in~to#1| |sendEmail_~receiver#1|) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= ~__ste_email_isSignatureVerified0~0 |old(~__ste_email_isSignatureVerified0~0)|) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= ~__ste_email_isSigned1~0 |old(~__ste_email_isSigned1~0)|) (= ~__ste_email_isSignatureVerified1~0 |old(~__ste_email_isSignatureVerified1~0)|) (= ~__ste_email_isSigned0~0 |old(~__ste_email_isSigned0~0)|) (= 1 |sendEmail_createEmail_~msg~0#1|) (= ~__ste_email_signKey1~0 |old(~__ste_email_signKey1~0)|)) (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~queued_message~0)| 0))) (.cse2 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse3 (not (= |old(~__ste_email_from0~0)| 0))) (.cse4 (not (= ~__ste_client_name2~0.base 0))) (.cse5 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse6 (not (= ~rjh~0 2))) (.cse7 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse8 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= ~__ste_Client_counter~0 0))) (.cse11 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse12 (not (= ~bob~0 1))) (.cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse23 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= |old(~__ste_email_to0~0)| 0))) (.cse30 (not (= ~__ste_email_body1~0.base 0))) (.cse31 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse32 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse33 (not (= ~__ste_client_outbuffer0~0 0))) (.cse34 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse35 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse36 (not (= ~__ste_email_body1~0.offset 0))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse39 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse40 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse41 (not (= ~head~0.offset 0))) (.cse42 (not (= ~__ste_email_id1~0 0))) (.cse43 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse44 (not (= ~__ste_client_outbuffer1~0 0))) (.cse45 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse47 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse48 (not (= ~bob~0 |sendEmail_#in~sender#1|))) (.cse49 (not (= |old(~__ste_email_to1~0)| 0))) (.cse50 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse51 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse52 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse53 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse54 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse55 (not (= ~__ste_client_outbuffer3~0 0))) (.cse56 (not (= |sendEmail_#in~receiver#1| ~rjh~0))) (.cse57 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse58 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse59 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse60 (not (= ~__ste_email_subject0~0.offset 0))) (.cse61 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse62 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse63 (not (= |#NULL.base| 0))) (.cse64 (not (= |old(~queued_client~0)| 0))) (.cse65 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse66 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse67 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse68 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse69 (not (= ~__ste_email_subject1~0.base 0))) (.cse70 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse71 (not (= ~__ste_client_name1~0.offset 0))) (.cse72 (not (= ~__ste_email_body0~0.base 0))) (.cse73 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse74 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse75 (not (= |old(~queue_empty~0)| 1))) (.cse76 (not (= |old(~__ste_email_from1~0)| 0))) (.cse77 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse78 (not (= ~__ste_client_name0~0.offset 0))) (.cse79 (not (= 3 ~chuck~0))) (.cse80 (not (<= ~__ste_client_idCounter2~0 3))) (.cse81 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse83 (not (<= 0 |#StackHeapBarrier|))) (.cse84 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse85 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse86 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse87 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse88 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse89 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse90 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse91 (not (= ~__ste_client_outbuffer2~0 0))) (.cse92 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse93 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse94 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse95 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse96 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse97 (not (= ~__ste_client_name1~0.base 0))) (.cse98 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse99 (not (= ~head~0.base 0))) (.cse100 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse101 (not (= ~__ste_Email_counter~0 0))) (.cse102 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse103 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse104 (not (= ~__ste_email_subject1~0.offset 0))) (.cse105 (not (= 0 ~__ste_email_subject0~0.base))) (.cse106 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse107 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~__ste_client_autoResponse2~0 0)) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 (not (= ~__ste_client_autoResponse1~0 0)) .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 (not (= ~__ste_client_autoResponse0~0 0)) .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (not (<= ~__ste_client_privateKey2~0 789)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (<= 789 ~__ste_client_privateKey2~0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse54 .cse55 (not (<= ~__ste_client_autoResponse0~0 0)) .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 (not (<= ~__ste_client_autoResponse2~0 0)) .cse86 (not (<= ~__ste_client_autoResponse1~0 1)) .cse87 .cse88 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse89 .cse90 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107)))) [2022-12-14 06:20:25,362 INFO L899 garLoopResultBuilder]: For program point sendEmailFINAL(lines 236 248) no Hoare annotation was computed. [2022-12-14 06:20:25,364 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 236 248) the Hoare annotation is: (or (and (= ~queued_message~0 |old(~queued_message~0)|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_signKey0~0 |old(~__ste_email_signKey0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= ~__ste_email_isSignatureVerified0~0 |old(~__ste_email_isSignatureVerified0~0)|) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= ~__ste_email_isSigned1~0 |old(~__ste_email_isSigned1~0)|) (= ~__ste_email_isSignatureVerified1~0 |old(~__ste_email_isSignatureVerified1~0)|) (= ~__ste_email_isSigned0~0 |old(~__ste_email_isSigned0~0)|) (= ~__ste_email_signKey1~0 |old(~__ste_email_signKey1~0)|)) (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~queued_message~0)| 0))) (.cse2 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse3 (not (= |old(~__ste_email_from0~0)| 0))) (.cse4 (not (= ~__ste_client_name2~0.base 0))) (.cse5 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse6 (not (= ~rjh~0 2))) (.cse7 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse8 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= ~__ste_Client_counter~0 0))) (.cse11 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse12 (not (= ~bob~0 1))) (.cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse23 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= |old(~__ste_email_to0~0)| 0))) (.cse30 (not (= ~__ste_email_body1~0.base 0))) (.cse31 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse32 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse33 (not (= ~__ste_client_outbuffer0~0 0))) (.cse34 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse35 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse36 (not (= ~__ste_email_body1~0.offset 0))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse39 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse40 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse41 (not (= ~head~0.offset 0))) (.cse42 (not (= ~__ste_email_id1~0 0))) (.cse43 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse44 (not (= ~__ste_client_outbuffer1~0 0))) (.cse45 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse47 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse48 (not (= ~bob~0 |sendEmail_#in~sender#1|))) (.cse49 (not (= |old(~__ste_email_to1~0)| 0))) (.cse50 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse51 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse52 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse53 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse54 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse55 (not (= ~__ste_client_outbuffer3~0 0))) (.cse56 (not (= |sendEmail_#in~receiver#1| ~rjh~0))) (.cse57 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse58 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse59 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse60 (not (= ~__ste_email_subject0~0.offset 0))) (.cse61 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse62 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse63 (not (= |#NULL.base| 0))) (.cse64 (not (= |old(~queued_client~0)| 0))) (.cse65 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse66 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse67 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse68 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse69 (not (= ~__ste_email_subject1~0.base 0))) (.cse70 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse71 (not (= ~__ste_client_name1~0.offset 0))) (.cse72 (not (= ~__ste_email_body0~0.base 0))) (.cse73 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse74 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse75 (not (= |old(~queue_empty~0)| 1))) (.cse76 (not (= |old(~__ste_email_from1~0)| 0))) (.cse77 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse78 (not (= ~__ste_client_name0~0.offset 0))) (.cse79 (not (= 3 ~chuck~0))) (.cse80 (not (<= ~__ste_client_idCounter2~0 3))) (.cse81 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse83 (not (<= 0 |#StackHeapBarrier|))) (.cse84 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse85 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse86 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse87 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse88 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse89 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse90 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse91 (not (= ~__ste_client_outbuffer2~0 0))) (.cse92 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse93 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse94 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse95 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse96 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse97 (not (= ~__ste_client_name1~0.base 0))) (.cse98 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse99 (not (= ~head~0.base 0))) (.cse100 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse101 (not (= ~__ste_Email_counter~0 0))) (.cse102 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse103 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse104 (not (= ~__ste_email_subject1~0.offset 0))) (.cse105 (not (= 0 ~__ste_email_subject0~0.base))) (.cse106 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse107 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~__ste_client_autoResponse2~0 0)) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 (not (= ~__ste_client_autoResponse1~0 0)) .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 (not (= ~__ste_client_autoResponse0~0 0)) .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (not (<= ~__ste_client_privateKey2~0 789)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (<= 789 ~__ste_client_privateKey2~0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse54 .cse55 (not (<= ~__ste_client_autoResponse0~0 0)) .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 (not (<= ~__ste_client_autoResponse2~0 0)) .cse86 (not (<= ~__ste_client_autoResponse1~0 1)) .cse87 .cse88 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse89 .cse90 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107)))) [2022-12-14 06:20:25,365 INFO L895 garLoopResultBuilder]: At program point L244(line 244) the Hoare annotation is: (or (and (= |sendEmail_createEmail_~retValue_acc~8#1| |sendEmail_createEmail_~msg~0#1|) (= |sendEmail_createEmail_~retValue_acc~8#1| |sendEmail_createEmail_#res#1|) (<= ~queued_message~0 0) (= |sendEmail_createEmail_#res#1| |sendEmail_~tmp~5#1|) (= ~__ste_email_signKey0~0 |old(~__ste_email_signKey0~0)|) (<= 0 ~__ste_email_from0~0) (= |sendEmail_#in~receiver#1| |sendEmail_~receiver#1|) (= |sendEmail_createEmail_~from#1| ~__ste_email_from0~0) (= ~__ste_email_isSignatureVerified0~0 |old(~__ste_email_isSignatureVerified0~0)|) (= |sendEmail_~email~0#1| |sendEmail_~tmp~5#1|) (<= 0 ~queued_message~0) (= |sendEmail_createEmail_~from#1| |sendEmail_createEmail_#in~from#1|) (<= 1 |sendEmail_~sender#1|) (<= |sendEmail_~sender#1| 1) (= |old(~queue_empty~0)| ~queue_empty~0) (<= ~__ste_email_from0~0 0) (= ~__ste_email_to0~0 |sendEmail_createEmail_~to#1|) (= ~queued_client~0 |old(~queued_client~0)|) (<= |sendEmail_createEmail_#in~to#1| 2) (= ~__ste_email_isSigned1~0 |old(~__ste_email_isSigned1~0)|) (<= 2 |sendEmail_createEmail_#in~to#1|) (= ~__ste_email_isSignatureVerified1~0 |old(~__ste_email_isSignatureVerified1~0)|) (= ~__ste_email_isSigned0~0 |old(~__ste_email_isSigned0~0)|) (<= 2 |sendEmail_createEmail_~to#1|) (<= ~__ste_email_to0~0 2) (= 1 |sendEmail_createEmail_~msg~0#1|) (= ~__ste_email_signKey1~0 |old(~__ste_email_signKey1~0)|)) (let ((.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse1 (not (= |old(~queued_message~0)| 0))) (.cse2 (not (= |old(~__ste_email_signKey0~0)| 0))) (.cse3 (not (= |old(~__ste_email_from0~0)| 0))) (.cse4 (not (= ~__ste_client_name2~0.base 0))) (.cse5 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse6 (not (= ~rjh~0 2))) (.cse7 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse8 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse9 (not (= |#NULL.offset| 0))) (.cse10 (not (= ~__ste_Client_counter~0 0))) (.cse11 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse12 (not (= ~bob~0 1))) (.cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse23 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse25 (not (= ~__ste_client_name0~0.base 0))) (.cse26 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse27 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse28 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse29 (not (= |old(~__ste_email_to0~0)| 0))) (.cse30 (not (= ~__ste_email_body1~0.base 0))) (.cse31 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse32 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse33 (not (= ~__ste_client_outbuffer0~0 0))) (.cse34 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse35 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse36 (not (= ~__ste_email_body1~0.offset 0))) (.cse37 (not (= ~__ste_email_body0~0.offset 0))) (.cse38 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse39 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse40 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse41 (not (= ~head~0.offset 0))) (.cse42 (not (= ~__ste_email_id1~0 0))) (.cse43 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse44 (not (= ~__ste_client_outbuffer1~0 0))) (.cse45 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse46 (not (= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse47 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse48 (not (= ~bob~0 |sendEmail_#in~sender#1|))) (.cse49 (not (= |old(~__ste_email_to1~0)| 0))) (.cse50 (not (= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse51 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse52 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse53 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse54 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse55 (not (= ~__ste_client_outbuffer3~0 0))) (.cse56 (not (= |sendEmail_#in~receiver#1| ~rjh~0))) (.cse57 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse58 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse59 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse60 (not (= ~__ste_email_subject0~0.offset 0))) (.cse61 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse62 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse63 (not (= |#NULL.base| 0))) (.cse64 (not (= |old(~queued_client~0)| 0))) (.cse65 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse66 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse67 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse68 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse69 (not (= ~__ste_email_subject1~0.base 0))) (.cse70 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse71 (not (= ~__ste_client_name1~0.offset 0))) (.cse72 (not (= ~__ste_email_body0~0.base 0))) (.cse73 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse74 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse75 (not (= |old(~queue_empty~0)| 1))) (.cse76 (not (= |old(~__ste_email_from1~0)| 0))) (.cse77 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse78 (not (= ~__ste_client_name0~0.offset 0))) (.cse79 (not (= 3 ~chuck~0))) (.cse80 (not (<= ~__ste_client_idCounter2~0 3))) (.cse81 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse83 (not (<= 0 |#StackHeapBarrier|))) (.cse84 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse85 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse86 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse87 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse88 (not (= |old(~__ste_email_isSigned1~0)| 0))) (.cse89 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse90 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse91 (not (= ~__ste_client_outbuffer2~0 0))) (.cse92 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse93 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse94 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse95 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse96 (not (= |old(~__ste_email_isSigned0~0)| 0))) (.cse97 (not (= ~__ste_client_name1~0.base 0))) (.cse98 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse99 (not (= ~head~0.base 0))) (.cse100 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse101 (not (= ~__ste_Email_counter~0 0))) (.cse102 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse103 (not (= |old(~__ste_email_signKey1~0)| 0))) (.cse104 (not (= ~__ste_email_subject1~0.offset 0))) (.cse105 (not (= 0 ~__ste_email_subject0~0.base))) (.cse106 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse107 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~__ste_client_autoResponse2~0 0)) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 (not (= ~__ste_client_autoResponse1~0 0)) .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 (not (= ~__ste_client_autoResponse0~0 0)) .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (not (<= ~__ste_client_privateKey2~0 789)) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 (not (<= 789 ~__ste_client_privateKey2~0)) .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse54 .cse55 (not (<= ~__ste_client_autoResponse0~0 0)) .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 (not (<= ~__ste_client_autoResponse2~0 0)) .cse86 (not (<= ~__ste_client_autoResponse1~0 1)) .cse87 .cse88 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse89 .cse90 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107)))) [2022-12-14 06:20:25,365 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1136 1159) the Hoare annotation is: true [2022-12-14 06:20:25,365 INFO L899 garLoopResultBuilder]: For program point getClientAddressBookSizeEXIT(lines 1136 1159) no Hoare annotation was computed. [2022-12-14 06:20:25,365 INFO L899 garLoopResultBuilder]: For program point setClientAddressBookAddressEXIT(lines 1486 1541) no Hoare annotation was computed. [2022-12-14 06:20:25,365 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1486 1541) the Hoare annotation is: true [2022-12-14 06:20:25,366 INFO L899 garLoopResultBuilder]: For program point getEmailSignKeyEXIT(lines 880 898) no Hoare annotation was computed. [2022-12-14 06:20:25,366 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 880 898) the Hoare annotation is: true [2022-12-14 06:20:25,366 INFO L899 garLoopResultBuilder]: For program point setClientPrivateKeyEXIT(lines 1616 1635) no Hoare annotation was computed. [2022-12-14 06:20:25,366 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1616 1635) the Hoare annotation is: true [2022-12-14 06:20:25,366 INFO L899 garLoopResultBuilder]: For program point chuckKeyAddEXIT(lines 2659 2670) no Hoare annotation was computed. [2022-12-14 06:20:25,366 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 2659 2670) the Hoare annotation is: true [2022-12-14 06:20:25,366 INFO L899 garLoopResultBuilder]: For program point L2664(line 2664) no Hoare annotation was computed. [2022-12-14 06:20:25,366 INFO L902 garLoopResultBuilder]: At program point L2665-1(line 2665) the Hoare annotation is: true [2022-12-14 06:20:25,366 INFO L902 garLoopResultBuilder]: At program point L2665(line 2665) the Hoare annotation is: true [2022-12-14 06:20:25,366 INFO L899 garLoopResultBuilder]: For program point chuckKeyAddFINAL(lines 2659 2670) no Hoare annotation was computed. [2022-12-14 06:20:25,369 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 673 688) the Hoare annotation is: (or (let ((.cse0 (not (= |setEmailTo_#in~value| ~rjh~0))) (.cse1 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse2 (not (= ~__ste_email_from0~0 0))) (.cse3 (not (= ~__ste_client_name2~0.base 0))) (.cse4 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse5 (not (= ~rjh~0 2))) (.cse6 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse7 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse8 (not (= |#NULL.offset| 0))) (.cse9 (not (= ~__ste_Client_counter~0 0))) (.cse10 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse11 (not (= ~bob~0 1))) (.cse12 (not (= ~queued_message~0 0))) (.cse13 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse14 (not (= ~__ste_client_name2~0.offset 0))) (.cse15 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse16 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse17 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse18 (not (= ~__ste_email_id0~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse21 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse22 (not (= ~queued_client~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse24 (not (= ~__ste_email_isSigned0~0 0))) (.cse25 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse26 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse27 (not (= ~__ste_email_signKey1~0 0))) (.cse28 (not (= ~__ste_client_name0~0.base 0))) (.cse29 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse30 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse31 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse32 (not (= |old(~__ste_email_to0~0)| 0))) (.cse33 (not (= ~__ste_email_body1~0.base 0))) (.cse34 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse35 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse36 (not (= ~__ste_client_outbuffer0~0 0))) (.cse37 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse38 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse39 (not (= ~__ste_email_body1~0.offset 0))) (.cse40 (not (= ~__ste_email_body0~0.offset 0))) (.cse41 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse42 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse43 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse44 (not (= ~head~0.offset 0))) (.cse45 (not (= ~__ste_email_id1~0 0))) (.cse46 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse47 (not (= ~__ste_client_outbuffer1~0 0))) (.cse48 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse49 (not (= ~__ste_email_signKey0~0 0))) (.cse50 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse51 (not (= |setEmailTo_#in~handle| 1))) (.cse52 (not (= |old(~__ste_email_to1~0)| 0))) (.cse53 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse54 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse55 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse56 (not (= ~__ste_email_isSignatureVerified0~0 0))) (.cse57 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse58 (not (= ~__ste_client_outbuffer3~0 0))) (.cse59 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse60 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse61 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse62 (not (= ~__ste_email_subject0~0.offset 0))) (.cse63 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse64 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse65 (not (= |#NULL.base| 0))) (.cse66 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse67 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse68 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse69 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse70 (not (= ~__ste_email_isSignatureVerified1~0 0))) (.cse71 (not (= ~__ste_email_subject1~0.base 0))) (.cse72 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse73 (not (= ~__ste_client_name1~0.offset 0))) (.cse74 (not (= ~__ste_email_body0~0.base 0))) (.cse75 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse76 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse77 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse78 (not (= ~__ste_client_name0~0.offset 0))) (.cse79 (not (= 3 ~chuck~0))) (.cse80 (not (<= ~__ste_client_idCounter2~0 3))) (.cse81 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse83 (not (<= 0 |#StackHeapBarrier|))) (.cse84 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse85 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse86 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse87 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse88 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse89 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse90 (not (= ~__ste_client_outbuffer2~0 0))) (.cse91 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse92 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse93 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse94 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse95 (not (= ~queue_empty~0 1))) (.cse96 (not (= ~__ste_client_name1~0.base 0))) (.cse97 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse98 (not (= ~__ste_email_isSigned1~0 0))) (.cse99 (not (= ~head~0.base 0))) (.cse100 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse101 (not (= ~__ste_Email_counter~0 0))) (.cse102 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse103 (not (= ~__ste_email_subject1~0.offset 0))) (.cse104 (not (= 0 ~__ste_email_subject0~0.base))) (.cse105 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse106 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (<= ~__ste_client_privateKey2~0 789)) .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 (not (<= 789 ~__ste_client_privateKey2~0)) .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse57 .cse58 (not (<= ~__ste_client_autoResponse0~0 0)) .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 (not (<= ~__ste_client_autoResponse2~0 0)) .cse86 (not (<= ~__ste_client_autoResponse1~0 1)) .cse87 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse88 .cse89 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106) (or .cse0 .cse1 .cse2 (not (= ~__ste_client_autoResponse2~0 0)) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 (not (= ~__ste_client_autoResponse1~0 0)) .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 (not (= ~__ste_client_autoResponse0~0 0)) .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106))) (and (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|))) [2022-12-14 06:20:25,370 INFO L899 garLoopResultBuilder]: For program point setEmailToEXIT(lines 673 688) no Hoare annotation was computed. [2022-12-14 06:20:25,370 INFO L899 garLoopResultBuilder]: For program point getEmailToEXIT(lines 654 672) no Hoare annotation was computed. [2022-12-14 06:20:25,370 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 654 672) the Hoare annotation is: true [2022-12-14 06:20:25,370 INFO L899 garLoopResultBuilder]: For program point generateKeyPairFINAL(lines 311 320) no Hoare annotation was computed. [2022-12-14 06:20:25,370 INFO L902 garLoopResultBuilder]: At program point L316(line 316) the Hoare annotation is: true [2022-12-14 06:20:25,370 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 311 320) the Hoare annotation is: true [2022-12-14 06:20:25,370 INFO L899 garLoopResultBuilder]: For program point generateKeyPairEXIT(lines 311 320) no Hoare annotation was computed. [2022-12-14 06:20:25,370 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1160 1179) the Hoare annotation is: true [2022-12-14 06:20:25,370 INFO L899 garLoopResultBuilder]: For program point setClientAddressBookSizeEXIT(lines 1160 1179) no Hoare annotation was computed. [2022-12-14 06:20:25,374 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 1771 1814) the Hoare annotation is: (or (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (= ~__ste_email_from0~0 0)) (not (= |setClientKeyringUser_#in~index| 0)) (not (<= ~__ste_ClientKeyring_size0~0 2147483647)) (not (= |old(~__ste_Client_Keyring1_User0~0)| 0)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= ~__ste_client_privateKey2~0 789)) (not (= |setClientKeyringUser_#in~handle| ~bob~0)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (= |#NULL.offset| 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (= ~__ste_Client_counter~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (= ~queued_message~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey1~0 0)) (not (<= 0 (+ 2147483647 ~__ste_ClientKeyring_size0~0))) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__ste_email_id0~0 0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (= ~queued_client~0 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (= ~__ste_email_encryptionKey0~0 0)) (not (<= ~bob~0 1)) (not (= |setClientKeyringUser_#in~value| 2)) (not (= ~__ste_email_signKey1~0 0)) (and (= ~__ste_Client_Keyring0_User1~0 |old(~__ste_Client_Keyring0_User1~0)|) (= |old(~__ste_Client_Keyring2_User1~0)| ~__ste_Client_Keyring2_User1~0) (= ~__ste_Client_Keyring1_User1~0 |old(~__ste_Client_Keyring1_User1~0)|) (= ~__ste_Client_Keyring0_User0~0 |old(~__ste_Client_Keyring0_User0~0)|) (= ~__ste_Client_Keyring1_User0~0 |old(~__ste_Client_Keyring1_User0~0)|) (= |old(~__ste_Client_Keyring2_User0~0)| ~__ste_Client_Keyring2_User0~0)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_email_to0~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (= ~__ste_email_isEncrypted1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (= ~__ste_email_id1~0 0)) (not (= ~__ste_client_forwardReceiver2~0 0)) (not (<= 789 ~__ste_client_privateKey2~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (= |old(~__ste_Client_Keyring0_User0~0)| 0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (= |old(~__ste_Client_Keyring2_User0~0)| 0)) (not (= ~__ste_Client_Keyring2_PublicKey1~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (= ~__ste_email_subject0~0.offset 0)) (not (= ~__ste_email_to1~0 0)) (not (= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_Client_Keyring1_PublicKey0~0 0)) (not (= |#NULL.base| 0)) (not (= ~__ste_Client_Keyring0_PublicKey1~0 0)) (not (= ~__ste_Client_Keyring0_PublicKey0~0 0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_client_autoResponse1~0 0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (= ~__ste_client_name1~0.offset 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (= ~__ste_client_name0~0.offset 0)) (not (= 3 ~chuck~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (= ~__SELECTED_FEATURE_Verify~0 0)) (not (= |old(~__ste_Client_Keyring1_User1~0)| 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= |old(~__ste_Client_Keyring2_User1~0)| 0)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (= ~__ste_email_isEncrypted0~0 0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~__ste_client_autoResponse0~0 0)) (not (= ~queue_empty~0 1)) (not (= ~__ste_client_name1~0.base 0)) (not (= |old(~__ste_Client_Keyring0_User1~0)| 0)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (= ~__ste_email_from1~0 0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:20:25,374 INFO L899 garLoopResultBuilder]: For program point setClientKeyringUserEXIT(lines 1771 1814) no Hoare annotation was computed. [2022-12-14 06:20:25,374 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1417 1485) the Hoare annotation is: true [2022-12-14 06:20:25,374 INFO L899 garLoopResultBuilder]: For program point getClientAddressBookAddressEXIT(lines 1417 1485) no Hoare annotation was computed. [2022-12-14 06:20:25,377 INFO L895 garLoopResultBuilder]: At program point L440(line 440) the Hoare annotation is: (or (let ((.cse0 (not (<= |old(~__ste_email_isSignatureVerified0~0)| 0))) (.cse1 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse2 (not (<= 0 |old(~queued_message~0)|))) (.cse3 (not (<= 0 |old(~__ste_email_from0~0)|))) (.cse4 (not (<= ~__ste_email_signKey1~0 0))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~bob~0 1))) (.cse14 (not (<= |old(~queued_message~0)| 0))) (.cse15 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse16 (not (= ~__ste_client_name2~0.offset 0))) (.cse17 (not (<= |old(~queued_client~0)| 0))) (.cse18 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse21 (not (= ~__ste_email_id0~0 0))) (.cse22 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse25 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse26 (not (<= ~__ste_client_privateKey0~0 2147483647))) (.cse27 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse28 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse29 (not (= ~__ste_client_name0~0.base 0))) (.cse30 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse31 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse32 (not (<= ~__ste_email_isSigned0~0 1))) (.cse33 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse34 (not (<= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse35 (not (= ~__ste_email_body1~0.base 0))) (.cse36 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse37 (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1))) (.cse38 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse39 (not (= ~__ste_client_outbuffer0~0 0))) (.cse40 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse41 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse42 (not (= ~__ste_email_body1~0.offset 0))) (.cse43 (not (= ~__ste_email_body0~0.offset 0))) (.cse44 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse45 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse46 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse47 (not (= ~head~0.offset 0))) (.cse48 (not (= ~__ste_email_id1~0 0))) (.cse49 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse50 (not (= ~__ste_client_outbuffer1~0 0))) (.cse51 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse52 (not (<= |old(~__ste_email_to0~0)| 2))) (.cse53 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse54 (not (<= 0 ~__ste_email_signKey1~0))) (.cse55 (not (<= 0 |old(~queued_client~0)|))) (.cse56 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse57 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse58 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse59 (not (<= 0 ~__ste_email_isSigned0~0))) (.cse60 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse61 (not (<= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse62 (not (= ~__ste_client_outbuffer3~0 0))) (.cse63 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse64 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse65 (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|))) (.cse66 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse67 (not (= ~__ste_email_subject0~0.offset 0))) (.cse68 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse69 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse70 (not (= |#NULL.base| 0))) (.cse71 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse72 (not (<= |old(~__ste_email_isSignatureVerified1~0)| 0))) (.cse73 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse74 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse75 (not (<= 0 (+ ~__ste_email_signKey0~0 2147483648)))) (.cse76 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse77 (not (<= 0 ~__ste_email_isSigned1~0))) (.cse78 (not (= ~__ste_email_subject1~0.base 0))) (.cse79 (not (<= ~__ste_email_isSigned1~0 0))) (.cse80 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse81 (not (= ~__ste_client_name1~0.offset 0))) (.cse82 (not (= ~__ste_email_body0~0.base 0))) (.cse83 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse84 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse85 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse86 (not (<= |old(~queue_empty~0)| 1))) (.cse87 (not (= ~__ste_client_name0~0.offset 0))) (.cse88 (not (= 3 ~chuck~0))) (.cse89 (not (<= ~__ste_client_idCounter2~0 3))) (.cse90 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse91 (not (<= 2 |old(~__ste_email_to0~0)|))) (.cse92 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse93 (not (<= 0 |#StackHeapBarrier|))) (.cse94 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse95 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse96 (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1))) (.cse97 (not (<= 1 |old(~queue_empty~0)|))) (.cse98 (not (<= |old(~__ste_email_from0~0)| 0))) (.cse99 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse100 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse101 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse102 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse103 (not (<= 0 (+ ~__ste_client_privateKey0~0 2147483648)))) (.cse104 (not (= ~__ste_client_outbuffer2~0 0))) (.cse105 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse106 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse107 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse108 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse109 (not (= ~__ste_client_name1~0.base 0))) (.cse110 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse111 (not (= ~head~0.base 0))) (.cse112 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse113 (not (= ~__ste_Email_counter~0 0))) (.cse114 (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|))) (.cse115 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse116 (not (<= ~__ste_email_signKey0~0 2147483647))) (.cse117 (not (= ~__ste_email_subject1~0.offset 0))) (.cse118 (not (= 0 ~__ste_email_subject0~0.base))) (.cse119 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse120 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 (not (= ~__ste_client_autoResponse1~0 0)) .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 (not (= ~__ste_client_autoResponse0~0 0)) .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 (not (<= 789 ~__ste_client_privateKey2~0)) .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse60 .cse61 .cse62 (not (<= ~__ste_client_autoResponse0~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 (not (<= ~__ste_client_autoResponse2~0 0)) .cse99 (not (<= ~__ste_client_autoResponse1~0 1)) .cse100 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse101 .cse102 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120))) (and (<= |outgoing__wrappee__AutoResponder_mail_~tmp~0#1| 2) (<= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| 1) (<= ~__ste_email_isSignatureVerified1~0 0) (<= |outgoing__wrappee__AutoResponder_~client#1| 1) (= |outgoing__wrappee__AutoResponder_verify_#in~client#1| |outgoing__wrappee__AutoResponder_incoming_~client#1|) (<= ~queued_message~0 0) (<= ~__ste_email_isSignatureVerified0~0 0) (<= ~__ste_email_from0~0 2147483647) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (= |outgoing__wrappee__AutoResponder_verify_#in~msg#1| |outgoing__wrappee__AutoResponder_incoming_~msg#1|) (= |outgoing__wrappee__AutoResponder_mail_~tmp~0#1| |outgoing__wrappee__AutoResponder_incoming_#in~client#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_~client#1|) (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_#in~msg#1| |outgoing__wrappee__AutoResponder_verify_~__utac__ad__arg1~0#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483647) (<= ~queue_empty~0 1) (<= |outgoing__wrappee__AutoResponder_mail_#in~client#1| 1) (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_#in~msg#1| |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~msg#1|) (<= 1 |outgoing__wrappee__AutoResponder_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1| 1) (= |outgoing__wrappee__AutoResponder_verify_~client#1| |outgoing__wrappee__AutoResponder_verify_#in~client#1|) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (<= ~__ste_client_idCounter0~0 2147483647) (<= |outgoing__wrappee__AutoResponder_mail_~client#1| 1) (= |outgoing__wrappee__AutoResponder_incoming_#in~msg#1| |outgoing__wrappee__AutoResponder_mail_~msg#1|) (= |outgoing__wrappee__AutoResponder_incoming_#in~msg#1| |outgoing__wrappee__AutoResponder_incoming_~msg#1|) (<= 2 |outgoing__wrappee__AutoResponder_mail_~tmp~0#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~client#1|) (<= 1 ~queue_empty~0) (<= 1 |outgoing__wrappee__AutoResponder_mail_~msg#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~38#1| 2147483648)) (<= 0 ~queued_message~0) (<= 0 ~__ste_email_isSignatureVerified1~0) (<= 0 (+ |outgoing__wrappee__AutoResponder_~tmp~1#1| 2147483648)) (= |outgoing__wrappee__AutoResponder_verify_~msg#1| |outgoing__wrappee__AutoResponder_verify_~__utac__ad__arg1~0#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483648)) (<= 0 ~queued_client~0) (<= 0 ~__ste_email_isSignatureVerified0~0) (= |outgoing__wrappee__AutoResponder_incoming_~client#1| |outgoing__wrappee__AutoResponder_incoming_#in~client#1|) (<= |outgoing__wrappee__AutoResponder_mail_~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_~tmp~1#1| 2147483647) (<= |outgoing__wrappee__AutoResponder_mail_#in~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~38#1| 2147483647) (<= |outgoing__wrappee__AutoResponder_~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_~handle#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= 1 |outgoing__wrappee__AutoResponder_~client#1|) (= |outgoing__wrappee__AutoResponder_verify_~msg#1| |outgoing__wrappee__AutoResponder_verify_#in~msg#1|) (<= ~queued_client~0 0))) [2022-12-14 06:20:25,377 INFO L899 garLoopResultBuilder]: For program point L440-1(line 440) no Hoare annotation was computed. [2022-12-14 06:20:25,378 INFO L895 garLoopResultBuilder]: At program point L118(line 118) the Hoare annotation is: (or (and (= ~queued_message~0 |old(~queued_message~0)|) (= |outgoing__wrappee__AutoResponder_~client#1| |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_client_idCounter0~0 |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~38#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483647) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |outgoing__wrappee__AutoResponder_getClientId_#res#1| |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~38#1|) (= |outgoing__wrappee__AutoResponder_~client#1| |outgoing__wrappee__AutoResponder_#in~client#1|) (= ~__ste_email_isSignatureVerified0~0 |old(~__ste_email_isSignatureVerified0~0)|) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483648)) (= ~queued_client~0 |old(~queued_client~0)|) (= ~__ste_email_isSignatureVerified1~0 |old(~__ste_email_isSignatureVerified1~0)|) (= |outgoing__wrappee__AutoResponder_~msg#1| |outgoing__wrappee__AutoResponder_#in~msg#1|) (= |outgoing__wrappee__AutoResponder_~tmp~1#1| |outgoing__wrappee__AutoResponder_getClientId_#res#1|)) (let ((.cse0 (not (<= |old(~__ste_email_isSignatureVerified0~0)| 0))) (.cse1 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse2 (not (<= 0 |old(~queued_message~0)|))) (.cse3 (not (<= 0 |old(~__ste_email_from0~0)|))) (.cse4 (not (<= ~__ste_email_signKey1~0 0))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~bob~0 1))) (.cse14 (not (<= |old(~queued_message~0)| 0))) (.cse15 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse16 (not (= ~__ste_client_name2~0.offset 0))) (.cse17 (not (<= |old(~queued_client~0)| 0))) (.cse18 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse21 (not (= ~__ste_email_id0~0 0))) (.cse22 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse25 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse26 (not (<= ~__ste_client_privateKey0~0 2147483647))) (.cse27 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse28 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse29 (not (= ~__ste_client_name0~0.base 0))) (.cse30 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse31 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse32 (not (<= ~__ste_email_isSigned0~0 1))) (.cse33 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse34 (not (<= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse35 (not (= ~__ste_email_body1~0.base 0))) (.cse36 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse37 (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1))) (.cse38 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse39 (not (= ~__ste_client_outbuffer0~0 0))) (.cse40 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse41 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse42 (not (= ~__ste_email_body1~0.offset 0))) (.cse43 (not (= ~__ste_email_body0~0.offset 0))) (.cse44 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse45 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse46 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse47 (not (= ~head~0.offset 0))) (.cse48 (not (= ~__ste_email_id1~0 0))) (.cse49 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse50 (not (= ~__ste_client_outbuffer1~0 0))) (.cse51 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse52 (not (<= |old(~__ste_email_to0~0)| 2))) (.cse53 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse54 (not (<= 0 ~__ste_email_signKey1~0))) (.cse55 (not (<= 0 |old(~queued_client~0)|))) (.cse56 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse57 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse58 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse59 (not (<= 0 ~__ste_email_isSigned0~0))) (.cse60 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse61 (not (<= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse62 (not (= ~__ste_client_outbuffer3~0 0))) (.cse63 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse64 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse65 (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|))) (.cse66 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse67 (not (= ~__ste_email_subject0~0.offset 0))) (.cse68 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse69 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse70 (not (= |#NULL.base| 0))) (.cse71 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse72 (not (<= |old(~__ste_email_isSignatureVerified1~0)| 0))) (.cse73 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse74 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse75 (not (<= 0 (+ ~__ste_email_signKey0~0 2147483648)))) (.cse76 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse77 (not (<= 0 ~__ste_email_isSigned1~0))) (.cse78 (not (= ~__ste_email_subject1~0.base 0))) (.cse79 (not (<= ~__ste_email_isSigned1~0 0))) (.cse80 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse81 (not (= ~__ste_client_name1~0.offset 0))) (.cse82 (not (= ~__ste_email_body0~0.base 0))) (.cse83 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse84 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse85 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse86 (not (<= |old(~queue_empty~0)| 1))) (.cse87 (not (= ~__ste_client_name0~0.offset 0))) (.cse88 (not (= 3 ~chuck~0))) (.cse89 (not (<= ~__ste_client_idCounter2~0 3))) (.cse90 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse91 (not (<= 2 |old(~__ste_email_to0~0)|))) (.cse92 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse93 (not (<= 0 |#StackHeapBarrier|))) (.cse94 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse95 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse96 (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1))) (.cse97 (not (<= 1 |old(~queue_empty~0)|))) (.cse98 (not (<= |old(~__ste_email_from0~0)| 0))) (.cse99 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse100 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse101 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse102 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse103 (not (<= 0 (+ ~__ste_client_privateKey0~0 2147483648)))) (.cse104 (not (= ~__ste_client_outbuffer2~0 0))) (.cse105 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse106 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse107 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse108 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse109 (not (= ~__ste_client_name1~0.base 0))) (.cse110 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse111 (not (= ~head~0.base 0))) (.cse112 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse113 (not (= ~__ste_Email_counter~0 0))) (.cse114 (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|))) (.cse115 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse116 (not (<= ~__ste_email_signKey0~0 2147483647))) (.cse117 (not (= ~__ste_email_subject1~0.offset 0))) (.cse118 (not (= 0 ~__ste_email_subject0~0.base))) (.cse119 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse120 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 (not (= ~__ste_client_autoResponse1~0 0)) .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 (not (= ~__ste_client_autoResponse0~0 0)) .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 (not (<= 789 ~__ste_client_privateKey2~0)) .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse60 .cse61 .cse62 (not (<= ~__ste_client_autoResponse0~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 (not (<= ~__ste_client_autoResponse2~0 0)) .cse99 (not (<= ~__ste_client_autoResponse1~0 1)) .cse100 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse101 .cse102 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120)))) [2022-12-14 06:20:25,378 INFO L899 garLoopResultBuilder]: For program point L118-1(line 118) no Hoare annotation was computed. [2022-12-14 06:20:25,378 INFO L899 garLoopResultBuilder]: For program point outgoing__wrappee__AutoResponderErr0ASSERT_VIOLATIONERROR_FUNCTION(line 957) no Hoare annotation was computed. [2022-12-14 06:20:25,381 INFO L895 garLoopResultBuilder]: At program point L383(line 383) the Hoare annotation is: (and (or (let ((.cse0 (not (<= |old(~__ste_email_isSignatureVerified0~0)| 0))) (.cse1 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse2 (not (<= 0 |old(~queued_message~0)|))) (.cse3 (not (<= 0 |old(~__ste_email_from0~0)|))) (.cse4 (not (<= ~__ste_email_signKey1~0 0))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~bob~0 1))) (.cse14 (not (<= |old(~queued_message~0)| 0))) (.cse15 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse16 (not (= ~__ste_client_name2~0.offset 0))) (.cse17 (not (<= |old(~queued_client~0)| 0))) (.cse18 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse21 (not (= ~__ste_email_id0~0 0))) (.cse22 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse25 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse26 (not (<= ~__ste_client_privateKey0~0 2147483647))) (.cse27 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse28 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse29 (not (= ~__ste_client_name0~0.base 0))) (.cse30 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse31 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse32 (not (<= ~__ste_email_isSigned0~0 1))) (.cse33 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse34 (not (<= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse35 (not (= ~__ste_email_body1~0.base 0))) (.cse36 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse37 (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1))) (.cse38 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse39 (not (= ~__ste_client_outbuffer0~0 0))) (.cse40 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse41 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse42 (not (= ~__ste_email_body1~0.offset 0))) (.cse43 (not (= ~__ste_email_body0~0.offset 0))) (.cse44 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse45 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse46 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse47 (not (= ~head~0.offset 0))) (.cse48 (not (= ~__ste_email_id1~0 0))) (.cse49 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse50 (not (= ~__ste_client_outbuffer1~0 0))) (.cse51 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse52 (not (<= |old(~__ste_email_to0~0)| 2))) (.cse53 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse54 (not (<= 0 ~__ste_email_signKey1~0))) (.cse55 (not (<= 0 |old(~queued_client~0)|))) (.cse56 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse57 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse58 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse59 (not (<= 0 ~__ste_email_isSigned0~0))) (.cse60 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse61 (not (<= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse62 (not (= ~__ste_client_outbuffer3~0 0))) (.cse63 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse64 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse65 (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|))) (.cse66 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse67 (not (= ~__ste_email_subject0~0.offset 0))) (.cse68 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse69 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse70 (not (= |#NULL.base| 0))) (.cse71 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse72 (not (<= |old(~__ste_email_isSignatureVerified1~0)| 0))) (.cse73 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse74 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse75 (not (<= 0 (+ ~__ste_email_signKey0~0 2147483648)))) (.cse76 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse77 (not (<= 0 ~__ste_email_isSigned1~0))) (.cse78 (not (= ~__ste_email_subject1~0.base 0))) (.cse79 (not (<= ~__ste_email_isSigned1~0 0))) (.cse80 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse81 (not (= ~__ste_client_name1~0.offset 0))) (.cse82 (not (= ~__ste_email_body0~0.base 0))) (.cse83 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse84 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse85 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse86 (not (<= |old(~queue_empty~0)| 1))) (.cse87 (not (= ~__ste_client_name0~0.offset 0))) (.cse88 (not (= 3 ~chuck~0))) (.cse89 (not (<= ~__ste_client_idCounter2~0 3))) (.cse90 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse91 (not (<= 2 |old(~__ste_email_to0~0)|))) (.cse92 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse93 (not (<= 0 |#StackHeapBarrier|))) (.cse94 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse95 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse96 (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1))) (.cse97 (not (<= 1 |old(~queue_empty~0)|))) (.cse98 (not (<= |old(~__ste_email_from0~0)| 0))) (.cse99 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse100 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse101 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse102 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse103 (not (<= 0 (+ ~__ste_client_privateKey0~0 2147483648)))) (.cse104 (not (= ~__ste_client_outbuffer2~0 0))) (.cse105 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse106 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse107 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse108 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse109 (not (= ~__ste_client_name1~0.base 0))) (.cse110 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse111 (not (= ~head~0.base 0))) (.cse112 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse113 (not (= ~__ste_Email_counter~0 0))) (.cse114 (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|))) (.cse115 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse116 (not (<= ~__ste_email_signKey0~0 2147483647))) (.cse117 (not (= ~__ste_email_subject1~0.offset 0))) (.cse118 (not (= 0 ~__ste_email_subject0~0.base))) (.cse119 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse120 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 (not (= ~__ste_client_autoResponse1~0 0)) .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 (not (= ~__ste_client_autoResponse0~0 0)) .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 (not (<= 789 ~__ste_client_privateKey2~0)) .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse60 .cse61 .cse62 (not (<= ~__ste_client_autoResponse0~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 (not (<= ~__ste_client_autoResponse2~0 0)) .cse99 (not (<= ~__ste_client_autoResponse1~0 1)) .cse100 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse101 .cse102 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120))) (and (<= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| 1) (<= ~__ste_email_isSignatureVerified1~0 0) (<= |outgoing__wrappee__AutoResponder_~client#1| 1) (<= ~queued_message~0 0) (<= ~__ste_email_isSignatureVerified0~0 0) (<= ~__ste_email_from0~0 2147483647) (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~tmp~9#1| 1) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (= |outgoing__wrappee__AutoResponder_mail_~tmp~0#1| |outgoing__wrappee__AutoResponder_incoming_#in~client#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_~client#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483647) (<= ~queue_empty~0 1) (<= |outgoing__wrappee__AutoResponder_mail_#in~client#1| 1) (<= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_~msg#1|) (<= 1 |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1| 1) (= |outgoing__wrappee__AutoResponder_verify_~client#1| |outgoing__wrappee__AutoResponder_verify_#in~client#1|) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (<= |outgoing__wrappee__AutoResponder_verify_#in~client#1| 2) (<= ~__ste_client_idCounter0~0 2147483647) (<= |outgoing__wrappee__AutoResponder_mail_~client#1| 1) (= |outgoing__wrappee__AutoResponder_incoming_#in~msg#1| |outgoing__wrappee__AutoResponder_mail_~msg#1|) (= |outgoing__wrappee__AutoResponder_incoming_#in~msg#1| |outgoing__wrappee__AutoResponder_incoming_~msg#1|) (<= 2 |outgoing__wrappee__AutoResponder_verify_#in~client#1|) (<= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_#in~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~client#1|) (<= 1 ~queue_empty~0) (<= 2 |outgoing__wrappee__AutoResponder_incoming_~client#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~38#1| 2147483648)) (<= 0 ~queued_message~0) (<= 0 ~__ste_email_isSignatureVerified1~0) (<= 0 (+ |outgoing__wrappee__AutoResponder_~tmp~1#1| 2147483648)) (= |outgoing__wrappee__AutoResponder_verify_~msg#1| |outgoing__wrappee__AutoResponder_verify_~__utac__ad__arg1~0#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= 1 |outgoing__wrappee__AutoResponder_incoming_~msg#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483648)) (<= 0 ~queued_client~0) (<= 0 ~__ste_email_isSignatureVerified0~0) (= |outgoing__wrappee__AutoResponder_incoming_~client#1| |outgoing__wrappee__AutoResponder_incoming_#in~client#1|) (<= |outgoing__wrappee__AutoResponder_mail_~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_~tmp~1#1| 2147483647) (<= 1 |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_#in~msg#1|) (<= |outgoing__wrappee__AutoResponder_mail_#in~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~38#1| 2147483647) (<= |outgoing__wrappee__AutoResponder_~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_verify_#in~msg#1|) (<= |outgoing__wrappee__AutoResponder_verify_#in~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_incoming_#in~client#1| 2) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_~handle#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= 1 |outgoing__wrappee__AutoResponder_~client#1|) (= |outgoing__wrappee__AutoResponder_verify_~msg#1| |outgoing__wrappee__AutoResponder_verify_#in~msg#1|) (<= ~queued_client~0 0))) (not (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~tmp~9#1| 0))) [2022-12-14 06:20:25,381 INFO L899 garLoopResultBuilder]: For program point outgoing__wrappee__AutoResponderEXIT(lines 112 123) no Hoare annotation was computed. [2022-12-14 06:20:25,381 INFO L899 garLoopResultBuilder]: For program point L383-1(line 383) no Hoare annotation was computed. [2022-12-14 06:20:25,381 INFO L895 garLoopResultBuilder]: At program point L400(line 400) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~tmp~9#1| 0)) [2022-12-14 06:20:25,382 INFO L895 garLoopResultBuilder]: At program point L400-1(line 400) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~tmp~9#1| 0)) [2022-12-14 06:20:25,382 INFO L899 garLoopResultBuilder]: For program point L442(lines 442 448) no Hoare annotation was computed. [2022-12-14 06:20:25,384 INFO L895 garLoopResultBuilder]: At program point L442-2(lines 435 451) the Hoare annotation is: (and (or (let ((.cse0 (not (<= |old(~__ste_email_isSignatureVerified0~0)| 0))) (.cse1 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse2 (not (<= 0 |old(~queued_message~0)|))) (.cse3 (not (<= 0 |old(~__ste_email_from0~0)|))) (.cse4 (not (<= ~__ste_email_signKey1~0 0))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~bob~0 1))) (.cse14 (not (<= |old(~queued_message~0)| 0))) (.cse15 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse16 (not (= ~__ste_client_name2~0.offset 0))) (.cse17 (not (<= |old(~queued_client~0)| 0))) (.cse18 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse21 (not (= ~__ste_email_id0~0 0))) (.cse22 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse25 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse26 (not (<= ~__ste_client_privateKey0~0 2147483647))) (.cse27 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse28 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse29 (not (= ~__ste_client_name0~0.base 0))) (.cse30 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse31 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse32 (not (<= ~__ste_email_isSigned0~0 1))) (.cse33 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse34 (not (<= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse35 (not (= ~__ste_email_body1~0.base 0))) (.cse36 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse37 (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1))) (.cse38 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse39 (not (= ~__ste_client_outbuffer0~0 0))) (.cse40 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse41 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse42 (not (= ~__ste_email_body1~0.offset 0))) (.cse43 (not (= ~__ste_email_body0~0.offset 0))) (.cse44 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse45 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse46 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse47 (not (= ~head~0.offset 0))) (.cse48 (not (= ~__ste_email_id1~0 0))) (.cse49 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse50 (not (= ~__ste_client_outbuffer1~0 0))) (.cse51 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse52 (not (<= |old(~__ste_email_to0~0)| 2))) (.cse53 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse54 (not (<= 0 ~__ste_email_signKey1~0))) (.cse55 (not (<= 0 |old(~queued_client~0)|))) (.cse56 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse57 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse58 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse59 (not (<= 0 ~__ste_email_isSigned0~0))) (.cse60 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse61 (not (<= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse62 (not (= ~__ste_client_outbuffer3~0 0))) (.cse63 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse64 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse65 (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|))) (.cse66 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse67 (not (= ~__ste_email_subject0~0.offset 0))) (.cse68 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse69 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse70 (not (= |#NULL.base| 0))) (.cse71 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse72 (not (<= |old(~__ste_email_isSignatureVerified1~0)| 0))) (.cse73 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse74 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse75 (not (<= 0 (+ ~__ste_email_signKey0~0 2147483648)))) (.cse76 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse77 (not (<= 0 ~__ste_email_isSigned1~0))) (.cse78 (not (= ~__ste_email_subject1~0.base 0))) (.cse79 (not (<= ~__ste_email_isSigned1~0 0))) (.cse80 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse81 (not (= ~__ste_client_name1~0.offset 0))) (.cse82 (not (= ~__ste_email_body0~0.base 0))) (.cse83 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse84 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse85 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse86 (not (<= |old(~queue_empty~0)| 1))) (.cse87 (not (= ~__ste_client_name0~0.offset 0))) (.cse88 (not (= 3 ~chuck~0))) (.cse89 (not (<= ~__ste_client_idCounter2~0 3))) (.cse90 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse91 (not (<= 2 |old(~__ste_email_to0~0)|))) (.cse92 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse93 (not (<= 0 |#StackHeapBarrier|))) (.cse94 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse95 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse96 (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1))) (.cse97 (not (<= 1 |old(~queue_empty~0)|))) (.cse98 (not (<= |old(~__ste_email_from0~0)| 0))) (.cse99 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse100 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse101 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse102 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse103 (not (<= 0 (+ ~__ste_client_privateKey0~0 2147483648)))) (.cse104 (not (= ~__ste_client_outbuffer2~0 0))) (.cse105 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse106 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse107 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse108 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse109 (not (= ~__ste_client_name1~0.base 0))) (.cse110 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse111 (not (= ~head~0.base 0))) (.cse112 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse113 (not (= ~__ste_Email_counter~0 0))) (.cse114 (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|))) (.cse115 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse116 (not (<= ~__ste_email_signKey0~0 2147483647))) (.cse117 (not (= ~__ste_email_subject1~0.offset 0))) (.cse118 (not (= 0 ~__ste_email_subject0~0.base))) (.cse119 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse120 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 (not (= ~__ste_client_autoResponse1~0 0)) .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 (not (= ~__ste_client_autoResponse0~0 0)) .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 (not (<= 789 ~__ste_client_privateKey2~0)) .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse60 .cse61 .cse62 (not (<= ~__ste_client_autoResponse0~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 (not (<= ~__ste_client_autoResponse2~0 0)) .cse99 (not (<= ~__ste_client_autoResponse1~0 1)) .cse100 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse101 .cse102 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120))) (and (<= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| 1) (<= ~__ste_email_isSignatureVerified1~0 0) (<= |outgoing__wrappee__AutoResponder_~client#1| 1) (<= ~queued_message~0 0) (<= ~__ste_email_isSignatureVerified0~0 0) (<= ~__ste_email_from0~0 2147483647) (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~tmp~9#1| 1) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (= |outgoing__wrappee__AutoResponder_mail_~tmp~0#1| |outgoing__wrappee__AutoResponder_incoming_#in~client#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_~client#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483647) (<= ~queue_empty~0 1) (<= |outgoing__wrappee__AutoResponder_mail_#in~client#1| 1) (<= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_~msg#1|) (<= 1 |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1| 1) (= |outgoing__wrappee__AutoResponder_verify_~client#1| |outgoing__wrappee__AutoResponder_verify_#in~client#1|) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (<= |outgoing__wrappee__AutoResponder_verify_#in~client#1| 2) (<= ~__ste_client_idCounter0~0 2147483647) (<= |outgoing__wrappee__AutoResponder_mail_~client#1| 1) (= |outgoing__wrappee__AutoResponder_incoming_#in~msg#1| |outgoing__wrappee__AutoResponder_mail_~msg#1|) (= |outgoing__wrappee__AutoResponder_incoming_#in~msg#1| |outgoing__wrappee__AutoResponder_incoming_~msg#1|) (<= 2 |outgoing__wrappee__AutoResponder_verify_#in~client#1|) (<= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_#in~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~client#1|) (<= 1 ~queue_empty~0) (<= 2 |outgoing__wrappee__AutoResponder_incoming_~client#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~38#1| 2147483648)) (<= 0 ~queued_message~0) (<= 0 ~__ste_email_isSignatureVerified1~0) (<= 0 (+ |outgoing__wrappee__AutoResponder_~tmp~1#1| 2147483648)) (= |outgoing__wrappee__AutoResponder_verify_~msg#1| |outgoing__wrappee__AutoResponder_verify_~__utac__ad__arg1~0#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= 1 |outgoing__wrappee__AutoResponder_incoming_~msg#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483648)) (<= 0 ~queued_client~0) (<= 0 ~__ste_email_isSignatureVerified0~0) (= |outgoing__wrappee__AutoResponder_incoming_~client#1| |outgoing__wrappee__AutoResponder_incoming_#in~client#1|) (<= |outgoing__wrappee__AutoResponder_mail_~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_~tmp~1#1| 2147483647) (<= 1 |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_#in~msg#1|) (<= |outgoing__wrappee__AutoResponder_mail_#in~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~38#1| 2147483647) (<= |outgoing__wrappee__AutoResponder_~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_verify_#in~msg#1|) (<= |outgoing__wrappee__AutoResponder_verify_#in~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_incoming_#in~client#1| 2) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_~handle#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= 1 |outgoing__wrappee__AutoResponder_~client#1|) (= |outgoing__wrappee__AutoResponder_verify_~msg#1| |outgoing__wrappee__AutoResponder_verify_#in~msg#1|) (<= ~queued_client~0 0))) (not (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~tmp~9#1| 0))) [2022-12-14 06:20:25,386 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 112 123) the Hoare annotation is: (or (let ((.cse0 (not (<= |old(~__ste_email_isSignatureVerified0~0)| 0))) (.cse1 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse2 (not (<= 0 |old(~queued_message~0)|))) (.cse3 (not (<= 0 |old(~__ste_email_from0~0)|))) (.cse4 (not (<= ~__ste_email_signKey1~0 0))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~bob~0 1))) (.cse14 (not (<= |old(~queued_message~0)| 0))) (.cse15 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse16 (not (= ~__ste_client_name2~0.offset 0))) (.cse17 (not (<= |old(~queued_client~0)| 0))) (.cse18 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse21 (not (= ~__ste_email_id0~0 0))) (.cse22 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse25 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse26 (not (<= ~__ste_client_privateKey0~0 2147483647))) (.cse27 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse28 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse29 (not (= ~__ste_client_name0~0.base 0))) (.cse30 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse31 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse32 (not (<= ~__ste_email_isSigned0~0 1))) (.cse33 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse34 (not (<= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse35 (not (= ~__ste_email_body1~0.base 0))) (.cse36 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse37 (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1))) (.cse38 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse39 (not (= ~__ste_client_outbuffer0~0 0))) (.cse40 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse41 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse42 (not (= ~__ste_email_body1~0.offset 0))) (.cse43 (not (= ~__ste_email_body0~0.offset 0))) (.cse44 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse45 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse46 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse47 (not (= ~head~0.offset 0))) (.cse48 (not (= ~__ste_email_id1~0 0))) (.cse49 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse50 (not (= ~__ste_client_outbuffer1~0 0))) (.cse51 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse52 (not (<= |old(~__ste_email_to0~0)| 2))) (.cse53 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse54 (not (<= 0 ~__ste_email_signKey1~0))) (.cse55 (not (<= 0 |old(~queued_client~0)|))) (.cse56 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse57 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse58 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse59 (not (<= 0 ~__ste_email_isSigned0~0))) (.cse60 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse61 (not (<= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse62 (not (= ~__ste_client_outbuffer3~0 0))) (.cse63 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse64 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse65 (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|))) (.cse66 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse67 (not (= ~__ste_email_subject0~0.offset 0))) (.cse68 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse69 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse70 (not (= |#NULL.base| 0))) (.cse71 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse72 (not (<= |old(~__ste_email_isSignatureVerified1~0)| 0))) (.cse73 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse74 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse75 (not (<= 0 (+ ~__ste_email_signKey0~0 2147483648)))) (.cse76 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse77 (not (<= 0 ~__ste_email_isSigned1~0))) (.cse78 (not (= ~__ste_email_subject1~0.base 0))) (.cse79 (not (<= ~__ste_email_isSigned1~0 0))) (.cse80 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse81 (not (= ~__ste_client_name1~0.offset 0))) (.cse82 (not (= ~__ste_email_body0~0.base 0))) (.cse83 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse84 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse85 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse86 (not (<= |old(~queue_empty~0)| 1))) (.cse87 (not (= ~__ste_client_name0~0.offset 0))) (.cse88 (not (= 3 ~chuck~0))) (.cse89 (not (<= ~__ste_client_idCounter2~0 3))) (.cse90 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse91 (not (<= 2 |old(~__ste_email_to0~0)|))) (.cse92 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse93 (not (<= 0 |#StackHeapBarrier|))) (.cse94 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse95 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse96 (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1))) (.cse97 (not (<= 1 |old(~queue_empty~0)|))) (.cse98 (not (<= |old(~__ste_email_from0~0)| 0))) (.cse99 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse100 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse101 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse102 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse103 (not (<= 0 (+ ~__ste_client_privateKey0~0 2147483648)))) (.cse104 (not (= ~__ste_client_outbuffer2~0 0))) (.cse105 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse106 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse107 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse108 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse109 (not (= ~__ste_client_name1~0.base 0))) (.cse110 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse111 (not (= ~head~0.base 0))) (.cse112 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse113 (not (= ~__ste_Email_counter~0 0))) (.cse114 (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|))) (.cse115 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse116 (not (<= ~__ste_email_signKey0~0 2147483647))) (.cse117 (not (= ~__ste_email_subject1~0.offset 0))) (.cse118 (not (= 0 ~__ste_email_subject0~0.base))) (.cse119 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse120 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 (not (= ~__ste_client_autoResponse1~0 0)) .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 (not (= ~__ste_client_autoResponse0~0 0)) .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 (not (<= 789 ~__ste_client_privateKey2~0)) .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse60 .cse61 .cse62 (not (<= ~__ste_client_autoResponse0~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 (not (<= ~__ste_client_autoResponse2~0 0)) .cse99 (not (<= ~__ste_client_autoResponse1~0 1)) .cse100 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse101 .cse102 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120))) (and (= ~queued_message~0 |old(~queued_message~0)|) (= ~__ste_email_to0~0 |old(~__ste_email_to0~0)|) (= ~__ste_email_to1~0 |old(~__ste_email_to1~0)|) (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= ~__ste_email_isSignatureVerified0~0 |old(~__ste_email_isSignatureVerified0~0)|) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0) (= |old(~queue_empty~0)| ~queue_empty~0) (= ~queued_client~0 |old(~queued_client~0)|) (= ~__ste_email_isSignatureVerified1~0 |old(~__ste_email_isSignatureVerified1~0)|))) [2022-12-14 06:20:25,386 INFO L899 garLoopResultBuilder]: For program point L385(lines 385 389) no Hoare annotation was computed. [2022-12-14 06:20:25,389 INFO L895 garLoopResultBuilder]: At program point L385-1(lines 381 392) the Hoare annotation is: (and (or (let ((.cse0 (not (<= |old(~__ste_email_isSignatureVerified0~0)| 0))) (.cse1 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse2 (not (<= 0 |old(~queued_message~0)|))) (.cse3 (not (<= 0 |old(~__ste_email_from0~0)|))) (.cse4 (not (<= ~__ste_email_signKey1~0 0))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~bob~0 1))) (.cse14 (not (<= |old(~queued_message~0)| 0))) (.cse15 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse16 (not (= ~__ste_client_name2~0.offset 0))) (.cse17 (not (<= |old(~queued_client~0)| 0))) (.cse18 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse21 (not (= ~__ste_email_id0~0 0))) (.cse22 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse25 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse26 (not (<= ~__ste_client_privateKey0~0 2147483647))) (.cse27 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse28 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse29 (not (= ~__ste_client_name0~0.base 0))) (.cse30 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse31 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse32 (not (<= ~__ste_email_isSigned0~0 1))) (.cse33 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse34 (not (<= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse35 (not (= ~__ste_email_body1~0.base 0))) (.cse36 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse37 (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1))) (.cse38 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse39 (not (= ~__ste_client_outbuffer0~0 0))) (.cse40 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse41 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse42 (not (= ~__ste_email_body1~0.offset 0))) (.cse43 (not (= ~__ste_email_body0~0.offset 0))) (.cse44 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse45 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse46 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse47 (not (= ~head~0.offset 0))) (.cse48 (not (= ~__ste_email_id1~0 0))) (.cse49 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse50 (not (= ~__ste_client_outbuffer1~0 0))) (.cse51 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse52 (not (<= |old(~__ste_email_to0~0)| 2))) (.cse53 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse54 (not (<= 0 ~__ste_email_signKey1~0))) (.cse55 (not (<= 0 |old(~queued_client~0)|))) (.cse56 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse57 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse58 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse59 (not (<= 0 ~__ste_email_isSigned0~0))) (.cse60 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse61 (not (<= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse62 (not (= ~__ste_client_outbuffer3~0 0))) (.cse63 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse64 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse65 (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|))) (.cse66 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse67 (not (= ~__ste_email_subject0~0.offset 0))) (.cse68 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse69 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse70 (not (= |#NULL.base| 0))) (.cse71 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse72 (not (<= |old(~__ste_email_isSignatureVerified1~0)| 0))) (.cse73 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse74 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse75 (not (<= 0 (+ ~__ste_email_signKey0~0 2147483648)))) (.cse76 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse77 (not (<= 0 ~__ste_email_isSigned1~0))) (.cse78 (not (= ~__ste_email_subject1~0.base 0))) (.cse79 (not (<= ~__ste_email_isSigned1~0 0))) (.cse80 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse81 (not (= ~__ste_client_name1~0.offset 0))) (.cse82 (not (= ~__ste_email_body0~0.base 0))) (.cse83 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse84 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse85 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse86 (not (<= |old(~queue_empty~0)| 1))) (.cse87 (not (= ~__ste_client_name0~0.offset 0))) (.cse88 (not (= 3 ~chuck~0))) (.cse89 (not (<= ~__ste_client_idCounter2~0 3))) (.cse90 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse91 (not (<= 2 |old(~__ste_email_to0~0)|))) (.cse92 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse93 (not (<= 0 |#StackHeapBarrier|))) (.cse94 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse95 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse96 (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1))) (.cse97 (not (<= 1 |old(~queue_empty~0)|))) (.cse98 (not (<= |old(~__ste_email_from0~0)| 0))) (.cse99 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse100 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse101 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse102 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse103 (not (<= 0 (+ ~__ste_client_privateKey0~0 2147483648)))) (.cse104 (not (= ~__ste_client_outbuffer2~0 0))) (.cse105 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse106 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse107 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse108 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse109 (not (= ~__ste_client_name1~0.base 0))) (.cse110 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse111 (not (= ~head~0.base 0))) (.cse112 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse113 (not (= ~__ste_Email_counter~0 0))) (.cse114 (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|))) (.cse115 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse116 (not (<= ~__ste_email_signKey0~0 2147483647))) (.cse117 (not (= ~__ste_email_subject1~0.offset 0))) (.cse118 (not (= 0 ~__ste_email_subject0~0.base))) (.cse119 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse120 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 (not (= ~__ste_client_autoResponse1~0 0)) .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 (not (= ~__ste_client_autoResponse0~0 0)) .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 (not (<= 789 ~__ste_client_privateKey2~0)) .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse60 .cse61 .cse62 (not (<= ~__ste_client_autoResponse0~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 (not (<= ~__ste_client_autoResponse2~0 0)) .cse99 (not (<= ~__ste_client_autoResponse1~0 1)) .cse100 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse101 .cse102 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120))) (and (<= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| 1) (<= ~__ste_email_isSignatureVerified1~0 0) (<= |outgoing__wrappee__AutoResponder_~client#1| 1) (<= ~queued_message~0 0) (<= ~__ste_email_isSignatureVerified0~0 0) (<= ~__ste_email_from0~0 2147483647) (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~tmp~9#1| 1) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (= |outgoing__wrappee__AutoResponder_mail_~tmp~0#1| |outgoing__wrappee__AutoResponder_incoming_#in~client#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_~client#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483647) (<= ~queue_empty~0 1) (<= |outgoing__wrappee__AutoResponder_mail_#in~client#1| 1) (<= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_~msg#1|) (<= 1 |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1| 1) (= |outgoing__wrappee__AutoResponder_verify_~client#1| |outgoing__wrappee__AutoResponder_verify_#in~client#1|) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (<= |outgoing__wrappee__AutoResponder_verify_#in~client#1| 2) (<= ~__ste_client_idCounter0~0 2147483647) (<= |outgoing__wrappee__AutoResponder_mail_~client#1| 1) (= |outgoing__wrappee__AutoResponder_incoming_#in~msg#1| |outgoing__wrappee__AutoResponder_mail_~msg#1|) (= |outgoing__wrappee__AutoResponder_incoming_#in~msg#1| |outgoing__wrappee__AutoResponder_incoming_~msg#1|) (<= 2 |outgoing__wrappee__AutoResponder_verify_#in~client#1|) (<= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_#in~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~client#1|) (<= 1 ~queue_empty~0) (<= 2 |outgoing__wrappee__AutoResponder_incoming_~client#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~38#1| 2147483648)) (<= 0 ~queued_message~0) (<= 0 ~__ste_email_isSignatureVerified1~0) (<= 0 (+ |outgoing__wrappee__AutoResponder_~tmp~1#1| 2147483648)) (= |outgoing__wrappee__AutoResponder_verify_~msg#1| |outgoing__wrappee__AutoResponder_verify_~__utac__ad__arg1~0#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= 1 |outgoing__wrappee__AutoResponder_incoming_~msg#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483648)) (<= 0 ~queued_client~0) (<= 0 ~__ste_email_isSignatureVerified0~0) (= |outgoing__wrappee__AutoResponder_incoming_~client#1| |outgoing__wrappee__AutoResponder_incoming_#in~client#1|) (<= |outgoing__wrappee__AutoResponder_mail_~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_~tmp~1#1| 2147483647) (<= 1 |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_#in~msg#1|) (<= |outgoing__wrappee__AutoResponder_mail_#in~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~38#1| 2147483647) (<= |outgoing__wrappee__AutoResponder_~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_verify_#in~msg#1|) (<= |outgoing__wrappee__AutoResponder_verify_#in~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_incoming_#in~client#1| 2) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_~handle#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= 1 |outgoing__wrappee__AutoResponder_~client#1|) (= |outgoing__wrappee__AutoResponder_verify_~msg#1| |outgoing__wrappee__AutoResponder_verify_#in~msg#1|) (<= ~queued_client~0 0))) (not (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~tmp~9#1| 0))) [2022-12-14 06:20:25,391 INFO L895 garLoopResultBuilder]: At program point L394(line 394) the Hoare annotation is: (and (or (let ((.cse0 (not (<= |old(~__ste_email_isSignatureVerified0~0)| 0))) (.cse1 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse2 (not (<= 0 |old(~queued_message~0)|))) (.cse3 (not (<= 0 |old(~__ste_email_from0~0)|))) (.cse4 (not (<= ~__ste_email_signKey1~0 0))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~bob~0 1))) (.cse14 (not (<= |old(~queued_message~0)| 0))) (.cse15 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse16 (not (= ~__ste_client_name2~0.offset 0))) (.cse17 (not (<= |old(~queued_client~0)| 0))) (.cse18 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse21 (not (= ~__ste_email_id0~0 0))) (.cse22 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse25 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse26 (not (<= ~__ste_client_privateKey0~0 2147483647))) (.cse27 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse28 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse29 (not (= ~__ste_client_name0~0.base 0))) (.cse30 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse31 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse32 (not (<= ~__ste_email_isSigned0~0 1))) (.cse33 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse34 (not (<= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse35 (not (= ~__ste_email_body1~0.base 0))) (.cse36 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse37 (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1))) (.cse38 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse39 (not (= ~__ste_client_outbuffer0~0 0))) (.cse40 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse41 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse42 (not (= ~__ste_email_body1~0.offset 0))) (.cse43 (not (= ~__ste_email_body0~0.offset 0))) (.cse44 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse45 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse46 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse47 (not (= ~head~0.offset 0))) (.cse48 (not (= ~__ste_email_id1~0 0))) (.cse49 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse50 (not (= ~__ste_client_outbuffer1~0 0))) (.cse51 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse52 (not (<= |old(~__ste_email_to0~0)| 2))) (.cse53 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse54 (not (<= 0 ~__ste_email_signKey1~0))) (.cse55 (not (<= 0 |old(~queued_client~0)|))) (.cse56 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse57 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse58 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse59 (not (<= 0 ~__ste_email_isSigned0~0))) (.cse60 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse61 (not (<= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse62 (not (= ~__ste_client_outbuffer3~0 0))) (.cse63 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse64 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse65 (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|))) (.cse66 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse67 (not (= ~__ste_email_subject0~0.offset 0))) (.cse68 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse69 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse70 (not (= |#NULL.base| 0))) (.cse71 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse72 (not (<= |old(~__ste_email_isSignatureVerified1~0)| 0))) (.cse73 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse74 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse75 (not (<= 0 (+ ~__ste_email_signKey0~0 2147483648)))) (.cse76 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse77 (not (<= 0 ~__ste_email_isSigned1~0))) (.cse78 (not (= ~__ste_email_subject1~0.base 0))) (.cse79 (not (<= ~__ste_email_isSigned1~0 0))) (.cse80 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse81 (not (= ~__ste_client_name1~0.offset 0))) (.cse82 (not (= ~__ste_email_body0~0.base 0))) (.cse83 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse84 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse85 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse86 (not (<= |old(~queue_empty~0)| 1))) (.cse87 (not (= ~__ste_client_name0~0.offset 0))) (.cse88 (not (= 3 ~chuck~0))) (.cse89 (not (<= ~__ste_client_idCounter2~0 3))) (.cse90 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse91 (not (<= 2 |old(~__ste_email_to0~0)|))) (.cse92 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse93 (not (<= 0 |#StackHeapBarrier|))) (.cse94 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse95 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse96 (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1))) (.cse97 (not (<= 1 |old(~queue_empty~0)|))) (.cse98 (not (<= |old(~__ste_email_from0~0)| 0))) (.cse99 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse100 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse101 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse102 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse103 (not (<= 0 (+ ~__ste_client_privateKey0~0 2147483648)))) (.cse104 (not (= ~__ste_client_outbuffer2~0 0))) (.cse105 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse106 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse107 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse108 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse109 (not (= ~__ste_client_name1~0.base 0))) (.cse110 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse111 (not (= ~head~0.base 0))) (.cse112 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse113 (not (= ~__ste_Email_counter~0 0))) (.cse114 (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|))) (.cse115 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse116 (not (<= ~__ste_email_signKey0~0 2147483647))) (.cse117 (not (= ~__ste_email_subject1~0.offset 0))) (.cse118 (not (= 0 ~__ste_email_subject0~0.base))) (.cse119 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse120 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 (not (= ~__ste_client_autoResponse1~0 0)) .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 (not (= ~__ste_client_autoResponse0~0 0)) .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 (not (<= 789 ~__ste_client_privateKey2~0)) .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse60 .cse61 .cse62 (not (<= ~__ste_client_autoResponse0~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 (not (<= ~__ste_client_autoResponse2~0 0)) .cse99 (not (<= ~__ste_client_autoResponse1~0 1)) .cse100 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse101 .cse102 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120))) (and (<= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| 1) (<= ~__ste_email_isSignatureVerified1~0 0) (<= |outgoing__wrappee__AutoResponder_~client#1| 1) (<= ~queued_message~0 0) (<= ~__ste_email_isSignatureVerified0~0 0) (<= ~__ste_email_from0~0 2147483647) (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~tmp~9#1| 1) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (= |outgoing__wrappee__AutoResponder_mail_~tmp~0#1| |outgoing__wrappee__AutoResponder_incoming_#in~client#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_~client#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483647) (<= ~queue_empty~0 1) (<= |outgoing__wrappee__AutoResponder_mail_#in~client#1| 1) (<= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_~msg#1|) (<= 1 |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1| 1) (= |outgoing__wrappee__AutoResponder_verify_~client#1| |outgoing__wrappee__AutoResponder_verify_#in~client#1|) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (<= |outgoing__wrappee__AutoResponder_verify_#in~client#1| 2) (<= ~__ste_client_idCounter0~0 2147483647) (<= |outgoing__wrappee__AutoResponder_mail_~client#1| 1) (= |outgoing__wrappee__AutoResponder_incoming_#in~msg#1| |outgoing__wrappee__AutoResponder_mail_~msg#1|) (= |outgoing__wrappee__AutoResponder_incoming_#in~msg#1| |outgoing__wrappee__AutoResponder_incoming_~msg#1|) (<= 2 |outgoing__wrappee__AutoResponder_verify_#in~client#1|) (<= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_#in~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~client#1|) (<= 1 ~queue_empty~0) (<= 2 |outgoing__wrappee__AutoResponder_incoming_~client#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~38#1| 2147483648)) (<= 0 ~queued_message~0) (<= 0 ~__ste_email_isSignatureVerified1~0) (<= 0 (+ |outgoing__wrappee__AutoResponder_~tmp~1#1| 2147483648)) (= |outgoing__wrappee__AutoResponder_verify_~msg#1| |outgoing__wrappee__AutoResponder_verify_~__utac__ad__arg1~0#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= 1 |outgoing__wrappee__AutoResponder_incoming_~msg#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483648)) (<= 0 ~queued_client~0) (<= 0 ~__ste_email_isSignatureVerified0~0) (= |outgoing__wrappee__AutoResponder_incoming_~client#1| |outgoing__wrappee__AutoResponder_incoming_#in~client#1|) (<= |outgoing__wrappee__AutoResponder_mail_~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_~tmp~1#1| 2147483647) (<= 1 |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_#in~msg#1|) (<= |outgoing__wrappee__AutoResponder_mail_#in~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~38#1| 2147483647) (<= |outgoing__wrappee__AutoResponder_~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_verify_#in~msg#1|) (<= |outgoing__wrappee__AutoResponder_verify_#in~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_incoming_#in~client#1| 2) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_~handle#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= 1 |outgoing__wrappee__AutoResponder_~client#1|) (= |outgoing__wrappee__AutoResponder_verify_~msg#1| |outgoing__wrappee__AutoResponder_verify_#in~msg#1|) (<= ~queued_client~0 0))) (not (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~tmp~9#1| 0))) [2022-12-14 06:20:25,391 INFO L895 garLoopResultBuilder]: At program point L328(line 328) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~tmp~9#1| 0)) [2022-12-14 06:20:25,392 INFO L899 garLoopResultBuilder]: For program point L328-1(line 328) no Hoare annotation was computed. [2022-12-14 06:20:25,393 INFO L895 garLoopResultBuilder]: At program point L106(line 106) the Hoare annotation is: (or (let ((.cse0 (not (<= |old(~__ste_email_isSignatureVerified0~0)| 0))) (.cse1 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse2 (not (<= 0 |old(~queued_message~0)|))) (.cse3 (not (<= 0 |old(~__ste_email_from0~0)|))) (.cse4 (not (<= ~__ste_email_signKey1~0 0))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~bob~0 1))) (.cse14 (not (<= |old(~queued_message~0)| 0))) (.cse15 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse16 (not (= ~__ste_client_name2~0.offset 0))) (.cse17 (not (<= |old(~queued_client~0)| 0))) (.cse18 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse21 (not (= ~__ste_email_id0~0 0))) (.cse22 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse25 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse26 (not (<= ~__ste_client_privateKey0~0 2147483647))) (.cse27 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse28 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse29 (not (= ~__ste_client_name0~0.base 0))) (.cse30 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse31 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse32 (not (<= ~__ste_email_isSigned0~0 1))) (.cse33 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse34 (not (<= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse35 (not (= ~__ste_email_body1~0.base 0))) (.cse36 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse37 (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1))) (.cse38 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse39 (not (= ~__ste_client_outbuffer0~0 0))) (.cse40 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse41 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse42 (not (= ~__ste_email_body1~0.offset 0))) (.cse43 (not (= ~__ste_email_body0~0.offset 0))) (.cse44 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse45 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse46 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse47 (not (= ~head~0.offset 0))) (.cse48 (not (= ~__ste_email_id1~0 0))) (.cse49 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse50 (not (= ~__ste_client_outbuffer1~0 0))) (.cse51 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse52 (not (<= |old(~__ste_email_to0~0)| 2))) (.cse53 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse54 (not (<= 0 ~__ste_email_signKey1~0))) (.cse55 (not (<= 0 |old(~queued_client~0)|))) (.cse56 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse57 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse58 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse59 (not (<= 0 ~__ste_email_isSigned0~0))) (.cse60 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse61 (not (<= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse62 (not (= ~__ste_client_outbuffer3~0 0))) (.cse63 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse64 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse65 (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|))) (.cse66 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse67 (not (= ~__ste_email_subject0~0.offset 0))) (.cse68 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse69 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse70 (not (= |#NULL.base| 0))) (.cse71 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse72 (not (<= |old(~__ste_email_isSignatureVerified1~0)| 0))) (.cse73 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse74 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse75 (not (<= 0 (+ ~__ste_email_signKey0~0 2147483648)))) (.cse76 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse77 (not (<= 0 ~__ste_email_isSigned1~0))) (.cse78 (not (= ~__ste_email_subject1~0.base 0))) (.cse79 (not (<= ~__ste_email_isSigned1~0 0))) (.cse80 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse81 (not (= ~__ste_client_name1~0.offset 0))) (.cse82 (not (= ~__ste_email_body0~0.base 0))) (.cse83 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse84 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse85 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse86 (not (<= |old(~queue_empty~0)| 1))) (.cse87 (not (= ~__ste_client_name0~0.offset 0))) (.cse88 (not (= 3 ~chuck~0))) (.cse89 (not (<= ~__ste_client_idCounter2~0 3))) (.cse90 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse91 (not (<= 2 |old(~__ste_email_to0~0)|))) (.cse92 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse93 (not (<= 0 |#StackHeapBarrier|))) (.cse94 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse95 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse96 (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1))) (.cse97 (not (<= 1 |old(~queue_empty~0)|))) (.cse98 (not (<= |old(~__ste_email_from0~0)| 0))) (.cse99 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse100 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse101 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse102 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse103 (not (<= 0 (+ ~__ste_client_privateKey0~0 2147483648)))) (.cse104 (not (= ~__ste_client_outbuffer2~0 0))) (.cse105 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse106 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse107 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse108 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse109 (not (= ~__ste_client_name1~0.base 0))) (.cse110 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse111 (not (= ~head~0.base 0))) (.cse112 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse113 (not (= ~__ste_Email_counter~0 0))) (.cse114 (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|))) (.cse115 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse116 (not (<= ~__ste_email_signKey0~0 2147483647))) (.cse117 (not (= ~__ste_email_subject1~0.offset 0))) (.cse118 (not (= 0 ~__ste_email_subject0~0.base))) (.cse119 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse120 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 (not (= ~__ste_client_autoResponse1~0 0)) .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 (not (= ~__ste_client_autoResponse0~0 0)) .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 (not (<= 789 ~__ste_client_privateKey2~0)) .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse60 .cse61 .cse62 (not (<= ~__ste_client_autoResponse0~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 (not (<= ~__ste_client_autoResponse2~0 0)) .cse99 (not (<= ~__ste_client_autoResponse1~0 1)) .cse100 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse101 .cse102 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120))) (and (<= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| 1) (= |outgoing__wrappee__AutoResponder_mail_#in~client#1| |outgoing__wrappee__AutoResponder_~client#1|) (<= ~__ste_email_isSignatureVerified1~0 0) (<= |outgoing__wrappee__AutoResponder_~client#1| 1) (= |outgoing__wrappee__AutoResponder_mail_~client#1| |outgoing__wrappee__AutoResponder_mail_#in~client#1|) (<= ~queued_message~0 0) (<= ~__ste_email_isSignatureVerified0~0 0) (<= ~__ste_email_from0~0 2147483647) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (= |outgoing__wrappee__AutoResponder_mail_~msg#1| |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483647) (<= ~queue_empty~0 1) (<= 1 |outgoing__wrappee__AutoResponder_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (<= ~__ste_client_idCounter0~0 2147483647) (<= 1 ~queue_empty~0) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~38#1| 2147483648)) (<= 0 ~queued_message~0) (<= 0 ~__ste_email_isSignatureVerified1~0) (= |outgoing__wrappee__AutoResponder_~msg#1| |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_~tmp~1#1| 2147483648)) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483648)) (<= 0 ~queued_client~0) (<= 0 ~__ste_email_isSignatureVerified0~0) (<= |outgoing__wrappee__AutoResponder_~tmp~1#1| 2147483647) (<= |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~38#1| 2147483647) (<= |outgoing__wrappee__AutoResponder_~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_~handle#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= 1 |outgoing__wrappee__AutoResponder_~client#1|) (<= ~queued_client~0 0))) [2022-12-14 06:20:25,393 INFO L899 garLoopResultBuilder]: For program point L106-1(line 106) no Hoare annotation was computed. [2022-12-14 06:20:25,393 INFO L895 garLoopResultBuilder]: At program point L957(line 957) the Hoare annotation is: false [2022-12-14 06:20:25,396 INFO L895 garLoopResultBuilder]: At program point L379(line 379) the Hoare annotation is: (and (or (let ((.cse0 (not (<= |old(~__ste_email_isSignatureVerified0~0)| 0))) (.cse1 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse2 (not (<= 0 |old(~queued_message~0)|))) (.cse3 (not (<= 0 |old(~__ste_email_from0~0)|))) (.cse4 (not (<= ~__ste_email_signKey1~0 0))) (.cse5 (not (= ~__ste_client_name2~0.base 0))) (.cse6 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse7 (not (= ~rjh~0 2))) (.cse8 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse9 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse10 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~bob~0 1))) (.cse14 (not (<= |old(~queued_message~0)| 0))) (.cse15 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse16 (not (= ~__ste_client_name2~0.offset 0))) (.cse17 (not (<= |old(~queued_client~0)| 0))) (.cse18 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse19 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse21 (not (= ~__ste_email_id0~0 0))) (.cse22 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse25 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse26 (not (<= ~__ste_client_privateKey0~0 2147483647))) (.cse27 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse28 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse29 (not (= ~__ste_client_name0~0.base 0))) (.cse30 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse31 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse32 (not (<= ~__ste_email_isSigned0~0 1))) (.cse33 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse34 (not (<= 0 |old(~__ste_email_isSignatureVerified1~0)|))) (.cse35 (not (= ~__ste_email_body1~0.base 0))) (.cse36 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse37 (not (<= |outgoing__wrappee__AutoResponder_#in~client#1| 1))) (.cse38 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse39 (not (= ~__ste_client_outbuffer0~0 0))) (.cse40 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse41 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse42 (not (= ~__ste_email_body1~0.offset 0))) (.cse43 (not (= ~__ste_email_body0~0.offset 0))) (.cse44 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse45 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse46 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse47 (not (= ~head~0.offset 0))) (.cse48 (not (= ~__ste_email_id1~0 0))) (.cse49 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse50 (not (= ~__ste_client_outbuffer1~0 0))) (.cse51 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse52 (not (<= |old(~__ste_email_to0~0)| 2))) (.cse53 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse54 (not (<= 0 ~__ste_email_signKey1~0))) (.cse55 (not (<= 0 |old(~queued_client~0)|))) (.cse56 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse57 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse58 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse59 (not (<= 0 ~__ste_email_isSigned0~0))) (.cse60 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse61 (not (<= 0 |old(~__ste_email_isSignatureVerified0~0)|))) (.cse62 (not (= ~__ste_client_outbuffer3~0 0))) (.cse63 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse64 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse65 (not (<= 1 |outgoing__wrappee__AutoResponder_#in~client#1|))) (.cse66 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse67 (not (= ~__ste_email_subject0~0.offset 0))) (.cse68 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse69 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse70 (not (= |#NULL.base| 0))) (.cse71 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse72 (not (<= |old(~__ste_email_isSignatureVerified1~0)| 0))) (.cse73 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse74 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse75 (not (<= 0 (+ ~__ste_email_signKey0~0 2147483648)))) (.cse76 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse77 (not (<= 0 ~__ste_email_isSigned1~0))) (.cse78 (not (= ~__ste_email_subject1~0.base 0))) (.cse79 (not (<= ~__ste_email_isSigned1~0 0))) (.cse80 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse81 (not (= ~__ste_client_name1~0.offset 0))) (.cse82 (not (= ~__ste_email_body0~0.base 0))) (.cse83 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse84 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse85 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse86 (not (<= |old(~queue_empty~0)| 1))) (.cse87 (not (= ~__ste_client_name0~0.offset 0))) (.cse88 (not (= 3 ~chuck~0))) (.cse89 (not (<= ~__ste_client_idCounter2~0 3))) (.cse90 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse91 (not (<= 2 |old(~__ste_email_to0~0)|))) (.cse92 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse93 (not (<= 0 |#StackHeapBarrier|))) (.cse94 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse95 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse96 (not (<= |outgoing__wrappee__AutoResponder_#in~msg#1| 1))) (.cse97 (not (<= 1 |old(~queue_empty~0)|))) (.cse98 (not (<= |old(~__ste_email_from0~0)| 0))) (.cse99 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse100 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse101 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse102 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse103 (not (<= 0 (+ ~__ste_client_privateKey0~0 2147483648)))) (.cse104 (not (= ~__ste_client_outbuffer2~0 0))) (.cse105 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse106 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse107 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse108 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse109 (not (= ~__ste_client_name1~0.base 0))) (.cse110 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse111 (not (= ~head~0.base 0))) (.cse112 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse113 (not (= ~__ste_Email_counter~0 0))) (.cse114 (not (<= 1 |outgoing__wrappee__AutoResponder_#in~msg#1|))) (.cse115 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse116 (not (<= ~__ste_email_signKey0~0 2147483647))) (.cse117 (not (= ~__ste_email_subject1~0.offset 0))) (.cse118 (not (= 0 ~__ste_email_subject0~0.base))) (.cse119 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse120 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~__ste_client_autoResponse2~0 0)) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (not (<= ~__ste_client_privateKey1~0 0)) (not (<= 0 ~__ste_client_privateKey1~0)) .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 (not (= ~__ste_client_autoResponse1~0 0)) .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 (not (= ~__ste_client_autoResponse0~0 0)) .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (not (<= ~__ste_client_privateKey2~0 789)) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 (not (<= 789 ~__ste_client_privateKey2~0)) .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 (not (<= 0 ~__ste_client_autoResponse2~0)) .cse60 .cse61 .cse62 (not (<= ~__ste_client_autoResponse0~0 0)) .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 (not (<= ~__ste_client_autoResponse2~0 0)) .cse99 (not (<= ~__ste_client_autoResponse1~0 1)) .cse100 (not (<= 0 ~__ste_client_autoResponse1~0)) .cse101 .cse102 (not (<= 0 ~__ste_client_autoResponse0~0)) .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112 .cse113 .cse114 .cse115 .cse116 .cse117 .cse118 .cse119 .cse120))) (and (<= |outgoing__wrappee__AutoResponder_getClientId_~handle#1| 1) (<= ~__ste_email_isSignatureVerified1~0 0) (<= |outgoing__wrappee__AutoResponder_~client#1| 1) (<= ~queued_message~0 0) (<= ~__ste_email_isSignatureVerified0~0 0) (<= ~__ste_email_from0~0 2147483647) (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~tmp~9#1| 1) (<= 0 (+ ~__ste_email_from0~0 2147483648)) (= |outgoing__wrappee__AutoResponder_mail_~tmp~0#1| |outgoing__wrappee__AutoResponder_incoming_#in~client#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_~client#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483647) (<= ~queue_empty~0 1) (<= |outgoing__wrappee__AutoResponder_mail_#in~client#1| 1) (<= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_~msg#1|) (<= 1 |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~msg#1|) (<= |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1| 1) (= |outgoing__wrappee__AutoResponder_verify_~client#1| |outgoing__wrappee__AutoResponder_verify_#in~client#1|) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_#in~handle#1|) (<= |outgoing__wrappee__AutoResponder_verify_#in~client#1| 2) (<= ~__ste_client_idCounter0~0 2147483647) (<= |outgoing__wrappee__AutoResponder_mail_~client#1| 1) (= |outgoing__wrappee__AutoResponder_incoming_#in~msg#1| |outgoing__wrappee__AutoResponder_mail_~msg#1|) (= |outgoing__wrappee__AutoResponder_incoming_#in~msg#1| |outgoing__wrappee__AutoResponder_incoming_~msg#1|) (<= 2 |outgoing__wrappee__AutoResponder_verify_#in~client#1|) (<= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_#in~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~client#1|) (<= 1 ~queue_empty~0) (<= 2 |outgoing__wrappee__AutoResponder_incoming_~client#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~38#1| 2147483648)) (<= 0 ~queued_message~0) (<= 0 ~__ste_email_isSignatureVerified1~0) (<= 0 (+ |outgoing__wrappee__AutoResponder_~tmp~1#1| 2147483648)) (= |outgoing__wrappee__AutoResponder_verify_~msg#1| |outgoing__wrappee__AutoResponder_verify_~__utac__ad__arg1~0#1|) (<= 1 |outgoing__wrappee__AutoResponder_mail_#in~msg#1|) (<= 1 |outgoing__wrappee__AutoResponder_incoming_~msg#1|) (<= 0 (+ |outgoing__wrappee__AutoResponder_getClientId_#res#1| 2147483648)) (<= 0 ~queued_client~0) (<= 0 ~__ste_email_isSignatureVerified0~0) (= |outgoing__wrappee__AutoResponder_incoming_~client#1| |outgoing__wrappee__AutoResponder_incoming_#in~client#1|) (<= |outgoing__wrappee__AutoResponder_mail_~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_~tmp~1#1| 2147483647) (<= 1 |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_#in~msg#1|) (<= |outgoing__wrappee__AutoResponder_mail_#in~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_getClientId_~retValue_acc~38#1| 2147483647) (<= |outgoing__wrappee__AutoResponder_~msg#1| 1) (<= 1 |outgoing__wrappee__AutoResponder_verify_#in~msg#1|) (<= |outgoing__wrappee__AutoResponder_verify_#in~msg#1| 1) (<= |outgoing__wrappee__AutoResponder_incoming_#in~client#1| 2) (<= 1 |outgoing__wrappee__AutoResponder_getClientId_~handle#1|) (<= 0 (+ ~__ste_client_idCounter0~0 2147483648)) (<= 2 ~__ste_email_to0~0) (<= ~__ste_email_to0~0 2) (<= 1 |outgoing__wrappee__AutoResponder_~client#1|) (= |outgoing__wrappee__AutoResponder_verify_~msg#1| |outgoing__wrappee__AutoResponder_verify_#in~msg#1|) (<= ~queued_client~0 0))) (not (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~tmp~9#1| 0))) [2022-12-14 06:20:25,396 INFO L899 garLoopResultBuilder]: For program point L379-1(line 379) no Hoare annotation was computed. [2022-12-14 06:20:25,396 INFO L895 garLoopResultBuilder]: At program point L330(line 330) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~tmp~9#1| 0)) [2022-12-14 06:20:25,396 INFO L895 garLoopResultBuilder]: At program point L330-1(line 330) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~tmp~9#1| 0)) [2022-12-14 06:20:25,396 INFO L899 garLoopResultBuilder]: For program point L381(lines 381 392) no Hoare annotation was computed. [2022-12-14 06:20:25,397 INFO L899 garLoopResultBuilder]: For program point L398(lines 398 412) no Hoare annotation was computed. [2022-12-14 06:20:25,397 INFO L895 garLoopResultBuilder]: At program point L398-1(lines 365 415) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~tmp~9#1| 0)) [2022-12-14 06:20:25,397 INFO L899 garLoopResultBuilder]: For program point L200(lines 200 206) no Hoare annotation was computed. [2022-12-14 06:20:25,397 INFO L895 garLoopResultBuilder]: At program point L200-2(lines 192 209) the Hoare annotation is: (not (= |outgoing__wrappee__AutoResponder___utac_acc__EncryptVerify_spec__1_~tmp~9#1| 0)) [2022-12-14 06:20:25,397 INFO L899 garLoopResultBuilder]: For program point setEmailFromEXIT(lines 636 651) no Hoare annotation was computed. [2022-12-14 06:20:25,400 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 636 651) the Hoare annotation is: (or (let ((.cse1 (not (= |old(~__ste_email_from0~0)| 0))) (.cse14 (not (= ~queued_message~0 0))) (.cse19 (not (= |setEmailFrom_#in~value| 0))) (.cse25 (not (= ~queued_client~0 0))) (.cse27 (not (= ~__ste_email_isSigned0~0 0))) (.cse30 (not (= ~__ste_email_signKey1~0 0))) (.cse37 (not (= ~__ste_email_to0~0 0))) (.cse38 (not (= |setEmailFrom_#in~handle| 1))) (.cse53 (not (= ~__ste_email_signKey0~0 0))) (.cse58 (not (= ~__ste_email_isSignatureVerified0~0 0))) (.cse65 (not (= ~__ste_email_to1~0 0))) (.cse73 (not (= ~__ste_email_isSignatureVerified1~0 0))) (.cse81 (not (= |old(~__ste_email_from1~0)| 0))) (.cse101 (not (= ~queue_empty~0 1))) (.cse104 (not (= ~__ste_email_isSigned1~0 0))) (.cse2 (not (= ~__ste_client_autoResponse2~0 0))) (.cse9 (not (<= ~__ste_client_privateKey1~0 0))) (.cse10 (not (<= 0 ~__ste_client_privateKey1~0))) (.cse75 (not (= ~__ste_client_autoResponse1~0 0))) (.cse100 (not (= ~__ste_client_autoResponse0~0 0))) (.cse121 (not (<= 0 ~queued_client~0))) (.cse0 (not (= ~__ste_Client_AddressBook1_Address2~0 0))) (.cse122 (not (<= |setEmailFrom_#in~value| 2147483647))) (.cse123 (not (<= 0 |old(~__ste_email_from0~0)|))) (.cse124 (not (<= ~__ste_email_signKey1~0 0))) (.cse125 (not (<= |setEmailFrom_#in~handle| 1))) (.cse3 (not (= ~__ste_client_name2~0.base 0))) (.cse4 (not (= ~__ste_Client_AddressBook1_Alias1~0 0))) (.cse5 (not (= ~rjh~0 2))) (.cse113 (not (<= ~__ste_client_privateKey2~0 789))) (.cse6 (not (= ~__ste_ClientAddressBook_size1~0 0))) (.cse7 (not (= 0 ~__ste_Client_AddressBook0_Address0~0))) (.cse8 (not (= |#NULL.offset| 0))) (.cse11 (not (= ~__ste_Client_counter~0 0))) (.cse126 (not (<= ~queued_message~0 0))) (.cse12 (not (= 0 ~__ste_Client_AddressBook0_Address1~0))) (.cse13 (not (= ~bob~0 1))) (.cse15 (not (= ~__ste_Client_Keyring1_PublicKey1~0 0))) (.cse16 (not (= ~__ste_client_name2~0.offset 0))) (.cse17 (not (= ~__ste_ClientAddressBook_size2~0 0))) (.cse18 (not (= ~__SELECTED_FEATURE_AddressBook~0 0))) (.cse20 (not (= ~__ste_Client_AddressBook0_Alias2~0 0))) (.cse21 (not (= ~__ste_email_id0~0 0))) (.cse127 (not (= ~__ste_client_idCounter0~0 |setEmailFrom_#in~value|))) (.cse22 (not (= ~__SELECTED_FEATURE_Keys~0 0))) (.cse23 (not (= ~__ste_Client_AddressBook2_Address0~0 0))) (.cse24 (not (= ~__ste_Client_Keyring0_User2~0 0))) (.cse128 (not (<= ~__ste_email_to0~0 2))) (.cse26 (not (= ~__ste_Client_AddressBook2_Alias2~0 0))) (.cse129 (not (<= ~__ste_client_privateKey0~0 2147483647))) (.cse28 (not (= ~__ste_email_encryptionKey0~0 0))) (.cse29 (not (= ~__ste_Client_Keyring0_User0~0 0))) (.cse31 (not (= ~__ste_client_name0~0.base 0))) (.cse32 (not (= ~__ste_Client_AddressBook2_Address1~0 0))) (.cse33 (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0))) (.cse130 (not (<= 0 ~__ste_email_isSignatureVerified0~0))) (.cse131 (not (<= ~__ste_email_isSigned0~0 1))) (.cse34 (not (= ~__SELECTED_FEATURE_Forward~0 0))) (.cse35 (not (= ~__ste_email_body1~0.base 0))) (.cse36 (not (= ~__GUIDSL_NON_TERMINAL_main~0 0))) (.cse39 (not (= ~__ste_Client_Keyring1_PublicKey2~0 0))) (.cse132 (not (<= 0 ~queued_message~0))) (.cse40 (not (= ~__ste_client_outbuffer0~0 0))) (.cse41 (not (= 0 ~__ste_Client_AddressBook0_Address2~0))) (.cse42 (not (= ~__ste_client_forwardReceiver0~0 0))) (.cse43 (not (= ~__ste_email_body1~0.offset 0))) (.cse44 (not (= ~__ste_email_body0~0.offset 0))) (.cse45 (not (= ~__ste_Client_Keyring1_User0~0 0))) (.cse46 (not (= ~__ste_email_isEncrypted1~0 0))) (.cse47 (not (= ~__ste_Client_AddressBook1_Alias0~0 0))) (.cse48 (not (= ~head~0.offset 0))) (.cse49 (not (= ~__ste_email_id1~0 0))) (.cse50 (not (= ~__ste_client_forwardReceiver2~0 0))) (.cse133 (not (<= 1 |setEmailFrom_#in~handle|))) (.cse114 (not (<= 789 ~__ste_client_privateKey2~0))) (.cse51 (not (= ~__ste_client_outbuffer1~0 0))) (.cse52 (not (= ~__ste_ClientKeyring_size0~0 0))) (.cse134 (not (<= 2 ~__ste_email_to0~0))) (.cse135 (not (<= 0 ~__ste_email_isSignatureVerified1~0))) (.cse54 (not (= ~__SELECTED_FEATURE_Sign~0 0))) (.cse136 (not (<= 0 ~__ste_email_signKey1~0))) (.cse55 (not (= ~__ste_Client_AddressBook2_Alias1~0 0))) (.cse56 (not (= ~__ste_Client_Keyring1_User1~0 0))) (.cse57 (not (= ~__ste_Client_Keyring2_PublicKey0~0 0))) (.cse137 (not (<= 0 (+ |setEmailFrom_#in~value| 2147483648)))) (.cse138 (not (<= 0 ~__ste_email_isSigned0~0))) (.cse115 (not (<= 0 ~__ste_client_autoResponse2~0))) (.cse59 (not (= ~__ste_Client_AddressBook0_Alias0~0 0))) (.cse139 (not (<= 1 ~queue_empty~0))) (.cse60 (not (= ~__ste_client_outbuffer3~0 0))) (.cse116 (not (<= ~__ste_client_autoResponse0~0 0))) (.cse61 (not (= ~__ste_Client_Keyring2_PublicKey1~0 0))) (.cse62 (not (= ~__SELECTED_FEATURE_Base~0 0))) (.cse63 (not (= ~__ste_email_encryptionKey1~0 0))) (.cse64 (not (= ~__ste_email_subject0~0.offset 0))) (.cse66 (not (= ~__ste_Client_AddressBook1_Alias2~0 0))) (.cse67 (not (= ~__ste_Client_Keyring1_PublicKey0~0 0))) (.cse68 (not (= |#NULL.base| 0))) (.cse69 (not (= ~__ste_Client_Keyring0_PublicKey1~0 0))) (.cse70 (not (= ~__ste_Client_Keyring0_User1~0 0))) (.cse71 (not (= ~__ste_Client_Keyring2_User1~0 0))) (.cse140 (not (<= 0 (+ ~__ste_email_signKey0~0 2147483648)))) (.cse72 (not (= ~__ste_Client_Keyring0_PublicKey0~0 0))) (.cse141 (not (<= 0 ~__ste_email_isSigned1~0))) (.cse74 (not (= ~__ste_email_subject1~0.base 0))) (.cse142 (not (<= ~__ste_email_isSigned1~0 0))) (.cse76 (not (= ~__ste_Client_AddressBook2_Address2~0 0))) (.cse77 (not (= ~__ste_client_name1~0.offset 0))) (.cse78 (not (= ~__ste_email_body0~0.base 0))) (.cse79 (not (= ~__ste_ClientKeyring_size2~0 0))) (.cse80 (not (= ~__ste_Client_AddressBook1_Address1~0 0))) (.cse82 (not (= ~__SELECTED_FEATURE_Decrypt~0 0))) (.cse143 (not (<= ~queue_empty~0 1))) (.cse83 (not (= ~__ste_client_name0~0.offset 0))) (.cse84 (not (= 3 ~chuck~0))) (.cse85 (not (<= ~__ste_client_idCounter2~0 3))) (.cse86 (not (= ~__ste_Client_AddressBook1_Address0~0 0))) (.cse87 (not (= ~__SELECTED_FEATURE_Verify~0 0))) (.cse88 (not (<= 0 |#StackHeapBarrier|))) (.cse89 (not (= ~__ste_Client_Keyring2_User2~0 0))) (.cse144 (not (<= ~__ste_email_isSignatureVerified0~0 0))) (.cse90 (not (= ~__SELECTED_FEATURE_AutoResponder~0 0))) (.cse145 (not (<= |old(~__ste_email_from0~0)| 0))) (.cse117 (not (<= ~__ste_client_autoResponse2~0 0))) (.cse91 (not (= ~__ste_ClientAddressBook_size0~0 0))) (.cse118 (not (<= ~__ste_client_autoResponse1~0 1))) (.cse146 (not (<= ~queued_client~0 0))) (.cse92 (not (= ~__ste_client_forwardReceiver3~0 0))) (.cse119 (not (<= 0 ~__ste_client_autoResponse1~0))) (.cse93 (not (= ~__ste_client_forwardReceiver1~0 0))) (.cse94 (not (= ~__ste_Client_Keyring1_User2~0 0))) (.cse120 (not (<= 0 ~__ste_client_autoResponse0~0))) (.cse147 (not (<= 0 (+ ~__ste_client_privateKey0~0 2147483648)))) (.cse95 (not (= ~__ste_client_outbuffer2~0 0))) (.cse96 (not (= ~__ste_email_isEncrypted0~0 0))) (.cse148 (not (<= ~__ste_email_isSignatureVerified1~0 0))) (.cse97 (not (= ~__ste_Client_Keyring2_User0~0 0))) (.cse98 (not (= ~__ste_Client_Keyring2_PublicKey2~0 0))) (.cse99 (not (= ~__SELECTED_FEATURE_Encrypt~0 0))) (.cse102 (not (= ~__ste_client_name1~0.base 0))) (.cse103 (not (= ~__ste_Client_AddressBook2_Alias0~0 0))) (.cse105 (not (= ~head~0.base 0))) (.cse106 (not (= ~__ste_Client_AddressBook0_Alias1~0 0))) (.cse107 (not (= ~__ste_Email_counter~0 0))) (.cse108 (not (<= 3 ~__ste_client_idCounter2~0))) (.cse149 (not (<= ~__ste_email_signKey0~0 2147483647))) (.cse109 (not (= ~__ste_email_subject1~0.offset 0))) (.cse110 (not (= 0 ~__ste_email_subject0~0.base))) (.cse111 (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) (.cse112 (not (= ~__ste_ClientKeyring_size1~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse59 .cse60 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse75 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse91 .cse92 .cse93 .cse94 .cse95 .cse96 .cse97 .cse98 .cse99 .cse100 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112) (or .cse0 .cse1 .cse3 .cse4 .cse5 .cse113 .cse6 .cse7 .cse8 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27 .cse28 .cse29 .cse30 .cse31 .cse32 .cse33 .cse34 .cse35 .cse36 .cse37 .cse38 .cse39 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse114 .cse51 .cse52 .cse53 .cse54 .cse55 .cse56 .cse57 .cse58 .cse115 .cse59 .cse60 .cse116 .cse61 .cse62 .cse63 .cse64 .cse65 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse72 .cse73 .cse74 .cse76 .cse77 .cse78 .cse79 .cse80 .cse81 .cse82 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse90 .cse117 .cse91 .cse118 .cse92 .cse119 .cse93 .cse94 .cse120 .cse95 .cse96 .cse97 .cse98 .cse99 .cse101 .cse102 .cse103 .cse104 .cse105 .cse106 .cse107 .cse108 .cse109 .cse110 .cse111 .cse112) (or .cse121 .cse0 .cse122 .cse123 .cse124 .cse2 .cse125 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse126 .cse12 .cse13 .cse15 .cse16 .cse17 .cse18 .cse20 .cse21 .cse127 .cse22 .cse23 .cse24 .cse128 .cse26 .cse129 .cse28 .cse29 .cse31 .cse32 .cse33 .cse130 .cse131 .cse34 .cse35 .cse36 .cse39 .cse132 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse133 .cse51 .cse52 .cse134 .cse135 .cse54 .cse136 .cse55 .cse56 .cse57 .cse137 .cse138 .cse59 .cse139 .cse60 .cse61 .cse62 .cse63 .cse64 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse140 .cse72 .cse141 .cse74 .cse75 .cse142 .cse76 .cse77 .cse78 .cse79 .cse80 .cse82 .cse143 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse144 .cse90 .cse145 .cse91 .cse146 .cse92 .cse93 .cse94 .cse147 .cse95 .cse96 .cse148 .cse97 .cse98 .cse99 .cse100 .cse102 .cse103 .cse105 .cse106 .cse107 .cse108 .cse149 .cse109 .cse110 .cse111 .cse112) (or .cse121 .cse0 .cse122 .cse123 .cse124 .cse125 .cse3 .cse4 .cse5 .cse113 .cse6 .cse7 .cse8 .cse11 .cse126 .cse12 .cse13 .cse15 .cse16 .cse17 .cse18 .cse20 .cse21 .cse127 .cse22 .cse23 .cse24 .cse128 .cse26 .cse129 .cse28 .cse29 .cse31 .cse32 .cse33 .cse130 .cse131 .cse34 .cse35 .cse36 .cse39 .cse132 .cse40 .cse41 .cse42 .cse43 .cse44 .cse45 .cse46 .cse47 .cse48 .cse49 .cse50 .cse133 .cse114 .cse51 .cse52 .cse134 .cse135 .cse54 .cse136 .cse55 .cse56 .cse57 .cse137 .cse138 .cse115 .cse59 .cse139 .cse60 .cse116 .cse61 .cse62 .cse63 .cse64 .cse66 .cse67 .cse68 .cse69 .cse70 .cse71 .cse140 .cse72 .cse141 .cse74 .cse142 .cse76 .cse77 .cse78 .cse79 .cse80 .cse82 .cse143 .cse83 .cse84 .cse85 .cse86 .cse87 .cse88 .cse89 .cse144 .cse90 .cse145 .cse117 .cse91 .cse118 .cse146 .cse92 .cse119 .cse93 .cse94 .cse120 .cse147 .cse95 .cse96 .cse148 .cse97 .cse98 .cse99 .cse102 .cse103 .cse105 .cse106 .cse107 .cse108 .cse149 .cse109 .cse110 .cse111 .cse112))) (and (= |old(~__ste_email_from0~0)| ~__ste_email_from0~0) (= |old(~__ste_email_from1~0)| ~__ste_email_from1~0))) [2022-12-14 06:20:25,400 INFO L899 garLoopResultBuilder]: For program point L2777(lines 2776 2946) no Hoare annotation was computed. [2022-12-14 06:20:25,400 INFO L895 garLoopResultBuilder]: At program point L2678(lines 2671 2682) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,400 INFO L895 garLoopResultBuilder]: At program point L2728(line 2728) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,400 INFO L895 garLoopResultBuilder]: At program point L2728-1(line 2728) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,401 INFO L895 garLoopResultBuilder]: At program point L2629-1(line 2629) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,401 INFO L895 garLoopResultBuilder]: At program point L2629(line 2629) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,403 INFO L895 garLoopResultBuilder]: At program point L2497-1(lines 2491 2501) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1| 2) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~42#1|)) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (<= ~__ste_client_idCounter1~0 2) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= |ULTIMATE.start_main_~tmp~19#1| 1) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_main_~retValue_acc~42#1| 2147483647) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~21#1|) (= ~__ste_client_name1~0.offset 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_email_from0~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 2 ~__ste_client_idCounter1~0) (= ~__ste_client_outbuffer0~0 0) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1|) (= ~queue_empty~0 1) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1| 2) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_privateKey1~0 456) (= ~__ste_client_forwardReceiver0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 32) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (<= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (= ~head~0.base 0) (<= ~__ste_client_forwardReceiver1~0 0) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1|) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (<= ~__ste_Client_Keyring2_User1~0 0) (<= 0 ~__ste_email_isSigned0~0) (<= 0 ~__ste_client_autoResponse2~0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_email_isEncrypted0~0 0) (<= 0 ~__ste_Client_Keyring2_User1~0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (<= 0 ~__ste_ClientKeyring_size0~0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~chuck~0 0) (<= 0 ~__ste_client_forwardReceiver1~0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= ~bob~0 1) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (<= ~__ste_client_autoResponse2~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (<= ~__ste_email_isSigned0~0 0) (<= 1 ~bob~0) (= ~__ste_ClientKeyring_size2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:20:25,404 INFO L895 garLoopResultBuilder]: At program point L2497(line 2497) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1| 2) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~42#1|)) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (<= ~__ste_client_idCounter1~0 2) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= |ULTIMATE.start_main_~tmp~19#1| 1) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_main_~retValue_acc~42#1| 2147483647) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~21#1|) (= ~__ste_client_name1~0.offset 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 2 ~__ste_client_idCounter1~0) (= ~__ste_client_outbuffer0~0 0) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1|) (= ~queue_empty~0 1) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1| 2) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 32) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (<= ~__ste_client_privateKey0~0 123) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (= ~head~0.base 0) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1|) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (<= 123 ~__ste_client_privateKey0~0) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:20:25,404 INFO L899 garLoopResultBuilder]: For program point L2844(lines 2844 2851) no Hoare annotation was computed. [2022-12-14 06:20:25,404 INFO L899 garLoopResultBuilder]: For program point L2927-1(line 2927) no Hoare annotation was computed. [2022-12-14 06:20:25,404 INFO L895 garLoopResultBuilder]: At program point L2927(line 2927) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,404 INFO L895 garLoopResultBuilder]: At program point L2630(lines 2623 2634) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,405 INFO L895 garLoopResultBuilder]: At program point L2531-1(line 2531) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,405 INFO L895 garLoopResultBuilder]: At program point L2531(line 2531) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,407 INFO L895 garLoopResultBuilder]: At program point L2465-1(lines 2460 2469) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~42#1|)) (= ~__ste_Client_counter~0 0) (= ~rjh~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= ~__ste_client_autoResponse1~0 0) (= ~__ste_Client_AddressBook2_Alias0~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= |ULTIMATE.start_main_~tmp~19#1| 1) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_main_~retValue_acc~42#1| 2147483647) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~21#1|) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= ~__ste_client_idCounter0~0 1) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (<= 1 ~__ste_client_idCounter0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:20:25,409 INFO L895 garLoopResultBuilder]: At program point L2465(line 2465) the Hoare annotation is: (let ((.cse3 (select |#memory_int| 1)) (.cse0 (select |#memory_int| 37)) (.cse2 (select |#memory_int| 10)) (.cse1 (select |#memory_int| 36))) (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= (select .cse0 2) 10) (= |ULTIMATE.start_setup_bob_~bob___0#1| |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= (select |#valid| 30) 1) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~42#1|)) (= ~__ste_Client_counter~0 0) (= ~rjh~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (= 44 (select |#length| 30)) (= (select |#length| 12) 12) (= (select |#valid| 26) 1) (= (select |#length| 4) 10) (= ~__ste_client_autoResponse1~0 0) (= 30 (select |#length| 24)) (= (select .cse1 1) 100) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= 0 ~__ste_email_subject0~0.base) (= 11 (select |#length| 34)) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= (select |#length| 6) 30) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_main_~retValue_acc~42#1| 2147483647) (= (select |#valid| 35) 1) (= (select |#valid| 9) 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= (select |#length| 15) 13) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= (select |#valid| 11) 1) (= ~__ste_Client_AddressBook1_Address2~0 0) (= (select |#valid| 27) 1) (= 21 (select |#length| 20)) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= (select |#valid| 33) 1) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= (select |#length| 29) 25) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= |ULTIMATE.start_setup_bob_#in~bob___0#1| ~bob~0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~21#1|) (= ~__ste_client_name1~0.offset 0) (= 9 (select |#length| 25)) (= ~__ste_client_privateKey1~0 0) (= (select .cse2 2) 10) (= 34 (select |#length| 5)) (= (select |#length| 9) 22) (= ~head~0.offset 0) (= (select |#length| 27) 30) (= ~__ste_client_name0~0.offset 0) (= (select .cse2 3) 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= 2 (select |#length| 1)) (= 18 (select |#length| 14)) (= ~__ste_client_idCounter1~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= (select .cse0 3) 0) (= ~__ste_email_to0~0 0) (= (select |#valid| 3) 1) (= ~__ste_email_signKey0~0 0) (= (select |#valid| 7) 1) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= (select |#length| 36) 4) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= (select |#valid| 18) 1) (= (select |#valid| 22) 1) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= (select |#valid| 24) 1) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= (select |#length| 37) 4) (= (select .cse2 0) 37) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (= (select |#valid| 12) 1) (= (select |#length| 19) 9) (= (select |#valid| 32) 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (= 16 (select |#length| 7)) (= (select |#valid| 28) 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= (select .cse1 3) 0) (= (select |#length| 13) 10) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (= 16 (select |#length| 16)) (= (select |#valid| 37) 1) (= (select |#valid| 4) 1) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= (select |#length| 32) 9) (= (select .cse0 1) 100) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= (select |#valid| 1) 1) (= ~__ste_client_forwardReceiver0~0 0) (= (select |#valid| 20) 1) (= 19 (select |#length| 35)) (= ~__ste_Client_Keyring2_User0~0 0) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= (select |#length| 8) 20) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (= |ULTIMATE.start_valid_product_#res#1| |ULTIMATE.start_valid_product_~retValue_acc~21#1|) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= (select |#valid| 21) 1) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_idCounter2~0 0) (= (select |#length| 28) 9) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (= (select |#length| 22) 9) (= 28 (select |#length| 2)) (= (select |#length| 17) 25) (= (select |#valid| 14) 1) (= ~__ste_email_subject1~0.base 0) (= (select |#length| 21) 30) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= (select |#valid| 0) 0) (= ~__ste_Client_Keyring2_User2~0 0) (= (select |#valid| 25) 1) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= (select |#valid| 2) 1) (= (select |#length| 10) 4) (= 25 (select |#length| 26)) (= |#NULL.offset| 0) (= (select |#valid| 36) 1) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= (select |#length| 33) 9) (= (select .cse3 0) 48) (= ~__ste_email_subject1~0.offset 0) (= (select |#valid| 23) 1) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= ~__ste_client_idCounter0~0 0) (= 44 (select |#length| 31)) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= (select |#valid| 19) 1) (= (select |#valid| 31) 1) (= (select |#valid| 34) 1) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= |ULTIMATE.start_main_~tmp~19#1| |ULTIMATE.start_valid_product_#res#1|) (= (select |#valid| 16) 1) (= (select |#length| 11) 10) (= (select |#valid| 6) 1) (= ~chuck~0 0) (= 30 (select |#length| 18)) (= (select .cse3 1) 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= |ULTIMATE.start_setup_bob_#in~bob___0#1| |ULTIMATE.start_setup_bob_~bob___0#1|) (= 21 (select |#length| 23)) (= ~__ste_client_outbuffer2~0 0) (= (select |#valid| 29) 1) (= (select .cse0 0) 37) (= 115 (select .cse2 1)) (= (select .cse1 2) 10) (= ~__ste_ClientAddressBook_size2~0 0) (= (select |#valid| 17) 1) (= (select .cse1 0) 37) (= (select |#valid| 10) 1) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= (select |#valid| 8) 1) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0))) [2022-12-14 06:20:25,409 INFO L899 garLoopResultBuilder]: For program point L2911(lines 2911 2918) no Hoare annotation was computed. [2022-12-14 06:20:25,409 INFO L895 garLoopResultBuilder]: At program point $Ultimate##93(lines 2865 2939) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,409 INFO L895 garLoopResultBuilder]: At program point L2730(line 2730) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,409 INFO L895 garLoopResultBuilder]: At program point L2730-1(line 2730) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,409 INFO L895 garLoopResultBuilder]: At program point $Ultimate##99(lines 2879 2938) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,409 INFO L895 garLoopResultBuilder]: At program point $Ultimate##81(lines 2840 2941) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,409 INFO L899 garLoopResultBuilder]: For program point L2830(lines 2830 2837) no Hoare annotation was computed. [2022-12-14 06:20:25,410 INFO L895 garLoopResultBuilder]: At program point L2698(line 2698) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,410 INFO L895 garLoopResultBuilder]: At program point L2731(lines 2723 2735) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,410 INFO L895 garLoopResultBuilder]: At program point $Ultimate##87(lines 2854 2940) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,410 INFO L895 garLoopResultBuilder]: At program point L2698-1(lines 2693 2702) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,410 INFO L899 garLoopResultBuilder]: For program point L2897(lines 2897 2904) no Hoare annotation was computed. [2022-12-14 06:20:25,410 INFO L895 garLoopResultBuilder]: At program point $Ultimate##75(lines 2826 2942) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,410 INFO L895 garLoopResultBuilder]: At program point L2534(lines 2534 2542) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,410 INFO L895 garLoopResultBuilder]: At program point L2947(lines 2775 2948) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,413 INFO L895 garLoopResultBuilder]: At program point L2518(line 2518) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (<= 456 ~__ste_client_privateKey1~0) (<= 3 |ULTIMATE.start_setup_chuck__wrappee__Base_~chuck___0#1|) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.offset| 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1| 2) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~42#1|)) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.base| 33) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= |ULTIMATE.start_main_~tmp~19#1| 1) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_main_~retValue_acc~42#1| 2147483647) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (<= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| 3) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (<= ~__ste_client_idCounter2~0 3) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~21#1|) (= ~__ste_client_name1~0.offset 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (<= ~__ste_client_privateKey1~0 456) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (<= 3 ~__ste_client_idCounter2~0) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (<= |ULTIMATE.start_setup_chuck__wrappee__Base_~chuck___0#1| 3) (= 3 ~chuck~0) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (<= 3 |ULTIMATE.start_setup_chuck_~chuck___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1|) (= ~queue_empty~0 1) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1| 2) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 32) (<= 3 |ULTIMATE.start_setup_chuck_#in~chuck___0#1|) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (<= |ULTIMATE.start_setup_chuck__wrappee__Base_#in~chuck___0#1| 3) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (= ~head~0.base 0) (<= |ULTIMATE.start_setup_chuck_~chuck___0#1| 3) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1|) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (<= 3 |ULTIMATE.start_setup_chuck__wrappee__Base_#in~chuck___0#1|) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:20:25,415 INFO L895 garLoopResultBuilder]: At program point L2518-1(lines 2512 2522) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (<= 3 |ULTIMATE.start_setup_chuck__wrappee__Base_~chuck___0#1|) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.offset| 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1| 2) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~42#1|)) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.base| 33) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= |ULTIMATE.start_main_~tmp~19#1| 1) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_main_~retValue_acc~42#1| 2147483647) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (<= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| 3) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (<= ~__ste_client_idCounter2~0 3) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~21#1|) (= ~__ste_client_name1~0.offset 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= 789 ~__ste_client_privateKey2~0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (<= 3 ~__ste_client_idCounter2~0) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (<= |ULTIMATE.start_setup_chuck__wrappee__Base_~chuck___0#1| 3) (= 3 ~chuck~0) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~__ste_client_forwardReceiver1~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (<= 3 |ULTIMATE.start_setup_chuck_~chuck___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1|) (= ~queue_empty~0 1) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1| 2) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 32) (<= 3 |ULTIMATE.start_setup_chuck_#in~chuck___0#1|) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (<= |ULTIMATE.start_setup_chuck__wrappee__Base_#in~chuck___0#1| 3) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (= ~head~0.base 0) (<= |ULTIMATE.start_setup_chuck_~chuck___0#1| 3) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1|) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (<= 3 |ULTIMATE.start_setup_chuck__wrappee__Base_#in~chuck___0#1|) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= ~bob~0 1) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (<= 1 ~bob~0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:20:25,416 INFO L895 garLoopResultBuilder]: At program point $Ultimate##69(lines 2812 2943) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,416 INFO L899 garLoopResultBuilder]: For program point L2816(lines 2816 2823) no Hoare annotation was computed. [2022-12-14 06:20:25,416 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-14 06:20:25,417 INFO L895 garLoopResultBuilder]: At program point L2486(line 2486) the Hoare annotation is: (and (= ~__SELECTED_FEATURE_Sign~0 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~42#1|)) (= ~__ste_Client_counter~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= ~__ste_client_autoResponse1~0 0) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (= |ULTIMATE.start_main_~tmp~19#1| 1) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (<= |ULTIMATE.start_main_~retValue_acc~42#1| 2147483647) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (<= |ULTIMATE.start_valid_product_~retValue_acc~21#1| 1) (= ~__ste_ClientAddressBook_size0~0 0) (<= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_client_name1~0.offset 0) (<= ~__GUIDSL_NON_TERMINAL_main~0 0) (<= ~__ste_Client_AddressBook2_Address0~0 0) (<= ~__ste_email_id0~0 0) (<= 0 ~__ste_client_name2~0.offset) (= ~head~0.offset 0) (<= ~__GUIDSL_ROOT_PRODUCTION~0 0) (<= ~__ste_Client_AddressBook2_Alias1~0 0) (<= 0 ~__GUIDSL_ROOT_PRODUCTION~0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (<= ~__ste_Email_counter~0 0) (<= ~__ste_Client_Keyring2_User2~0 0) (<= ~__ste_email_body1~0.offset 0) (= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| ~rjh~0) (<= 0 ~__ste_email_to0~0) (<= 0 ~__ste_email_to1~0) (<= ~queue_empty~0 1) (= ~__ste_email_signKey0~0 0) (<= 0 ~__ste_Client_AddressBook2_Alias1~0) (<= 0 ~__ste_Client_Keyring2_User2~0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (<= 0 ~__ste_Client_Keyring1_User2~0) (<= 0 ~__ste_email_from0~0) (<= 0 ~__ste_email_isEncrypted1~0) (= ~__SELECTED_FEATURE_Keys~0 0) (<= |#NULL.offset| 0) (<= 0 ~__ste_Client_Keyring1_User0~0) (<= 0 ~__SELECTED_FEATURE_AddressBook~0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| |ULTIMATE.start_setup_rjh_~rjh___0#1|) (<= 0 ~__ste_email_from1~0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= 0 ~__ste_email_isEncrypted0~0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (<= 0 ~__ste_email_id1~0) (<= ~__ste_Client_AddressBook0_Address1~0 0) (= ~__ste_email_body0~0.base 0) (<= ~__ste_email_isEncrypted0~0 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (<= 0 ~__ste_Client_AddressBook2_Address1~0) (<= 0 ~__ste_client_name0~0.offset) (= |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1| |ULTIMATE.start_setup_rjh_~rjh___0#1|) (<= ~__ste_Client_Keyring0_PublicKey0~0 0) (<= ~__ste_client_name1~0.base 0) (<= ~__ste_client_autoResponse0~0 0) (<= ~__ste_email_to1~0 0) (<= ~__SELECTED_FEATURE_AddressBook~0 0) (<= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (<= 0 ~__ste_Client_Keyring0_PublicKey0~0) (<= ~__ste_client_forwardReceiver3~0 0) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= 0 ~__ste_Client_Keyring1_PublicKey2~0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (<= ~__ste_Client_AddressBook0_Address0~0 0) (<= 0 ~__ste_email_signKey1~0) (<= 0 ~__ste_email_body1~0.offset) (<= 1 ~queue_empty~0) (<= ~__ste_email_signKey1~0 0) (<= 0 ~__ste_client_forwardReceiver3~0) (<= ~__ste_client_name2~0.offset 0) (<= 0 ~__ste_Email_counter~0) (<= ~__ste_email_subject0~0.offset 0) (<= 0 ~__ste_client_autoResponse0~0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (<= 0 ~__ste_Client_AddressBook0_Alias2~0) (= ~__ste_client_outbuffer0~0 0) (<= ~__SELECTED_FEATURE_Verify~0 0) (<= ~__ste_ClientKeyring_size1~0 0) (<= ~__ste_Client_Keyring1_User2~0 0) (<= 0 ~head~0.base) (= ~__SELECTED_FEATURE_Base~0 0) (<= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_forwardReceiver0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 32) (= ~__ste_Client_Keyring2_User0~0 0) (<= 0 ~__ste_email_subject0~0.offset) (= ~rjh~0 2) (<= ~__ste_email_from0~0 0) (<= 1 |ULTIMATE.start_valid_product_~retValue_acc~21#1|) (<= 0 ~__ste_Client_AddressBook1_Alias0~0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (<= 0 ~queued_client~0) (<= ~__ste_client_privateKey0~0 123) (<= ~__ste_Client_AddressBook1_Alias0~0 0) (<= 0 ~__ste_Client_Keyring1_PublicKey0~0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (<= 0 ~__ste_ClientKeyring_size1~0) (<= 0 ~__ste_client_forwardReceiver2~0) (= ~__ste_client_name2~0.base 0) (<= 0 ~__ste_Client_AddressBook0_Address1~0) (<= ~__ste_email_encryptionKey0~0 0) (<= ~__ste_client_idCounter0~0 1) (= ~__ste_email_subject1~0.base 0) (<= ~__ste_ClientKeyring_size0~0 0) (<= ~__ste_email_id1~0 0) (<= 0 ~__ste_Client_AddressBook0_Address0~0) (<= ~__ste_Client_Keyring1_User0~0 0) (<= ~__ste_Client_AddressBook0_Alias2~0 0) (<= ~__ste_Client_AddressBook0_Address2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (<= ~__ste_email_from1~0 0) (<= ~head~0.base 0) (<= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (<= ~__ste_email_to0~0 0) (<= ~__ste_Client_Keyring2_User1~0 0) (<= 0 ~__ste_email_isSigned0~0) (<= 0 ~__SELECTED_FEATURE_Verify~0) (<= 0 ~__ste_Client_AddressBook1_Alias2~0) (<= 0 ~__ste_client_autoResponse2~0) (= ~__ste_email_subject1~0.offset 0) (<= 0 ~__ste_Client_AddressBook2_Address0~0) (<= 0 ~__ste_Client_Keyring2_User1~0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (<= ~__ste_client_name0~0.offset 0) (<= 1 ~__ste_client_idCounter0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (<= 0 ~__ste_ClientKeyring_size0~0) (<= ~__ste_email_isEncrypted1~0 0) (<= 0 |#NULL.offset|) (= |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1| |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1|) (<= 123 ~__ste_client_privateKey0~0) (= ~chuck~0 0) (<= 0 ~__ste_client_forwardReceiver1~0) (= ~__ste_client_name0~0.base 0) (<= ~__ste_Client_AddressBook2_Address1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= ~bob~0 1) (<= 0 ~__GUIDSL_NON_TERMINAL_main~0) (<= ~__ste_client_forwardReceiver2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (<= ~__ste_client_autoResponse2~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_email_body1~0.base 0) (<= ~__ste_email_isSigned0~0 0) (<= 1 ~bob~0) (= ~__ste_ClientKeyring_size2~0 0) (<= 0 ~__ste_client_name1~0.base) (<= 0 ~__ste_email_id0~0) (<= 0 ~__ste_email_encryptionKey0~0) (= |#NULL.base| 0) (<= ~queued_client~0 0)) [2022-12-14 06:20:25,418 INFO L895 garLoopResultBuilder]: At program point L2486-1(lines 2481 2490) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1| 2) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~42#1|)) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (<= ~__ste_client_idCounter1~0 2) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= |ULTIMATE.start_main_~tmp~19#1| 1) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_main_~retValue_acc~42#1| 2147483647) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~21#1|) (= ~__ste_client_name1~0.offset 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 2 ~__ste_client_idCounter1~0) (= ~__ste_client_outbuffer0~0 0) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1|) (= ~queue_empty~0 1) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1| 2) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 32) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (<= ~__ste_client_privateKey0~0 123) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (= ~head~0.base 0) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1|) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (<= 123 ~__ste_client_privateKey0~0) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:20:25,418 INFO L899 garLoopResultBuilder]: For program point L2899-1(line 2899) no Hoare annotation was computed. [2022-12-14 06:20:25,418 INFO L895 garLoopResultBuilder]: At program point L2899(line 2899) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,418 INFO L895 garLoopResultBuilder]: At program point $Ultimate##54(lines 2798 2944) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,418 INFO L899 garLoopResultBuilder]: For program point L2883(lines 2883 2890) no Hoare annotation was computed. [2022-12-14 06:20:25,418 INFO L899 garLoopResultBuilder]: For program point L2784(lines 2784 2945) no Hoare annotation was computed. [2022-12-14 06:20:25,418 INFO L895 garLoopResultBuilder]: At program point L2802(lines 2802 2809) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~19#1| 1) (= |ULTIMATE.start_test_~op2~0#1| 0)) [2022-12-14 06:20:25,418 INFO L899 garLoopResultBuilder]: For program point L2869(lines 2869 2876) no Hoare annotation was computed. [2022-12-14 06:20:25,418 INFO L895 garLoopResultBuilder]: At program point $Ultimate##141(lines 2893 2937) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,418 INFO L895 garLoopResultBuilder]: At program point $Ultimate##147(lines 2907 2936) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,419 INFO L895 garLoopResultBuilder]: At program point L2688(line 2688) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,419 INFO L895 garLoopResultBuilder]: At program point L2688-1(lines 2683 2692) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,419 INFO L895 garLoopResultBuilder]: At program point L2540(line 2540) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,421 INFO L895 garLoopResultBuilder]: At program point L2507-1(lines 2502 2511) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (<= 456 ~__ste_client_privateKey1~0) (<= 3 |ULTIMATE.start_setup_chuck__wrappee__Base_~chuck___0#1|) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.offset| 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1| 2) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~42#1|)) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.base| 33) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= |ULTIMATE.start_main_~tmp~19#1| 1) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_main_~retValue_acc~42#1| 2147483647) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (<= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| 3) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (<= ~__ste_client_idCounter2~0 3) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~21#1|) (= ~__ste_client_name1~0.offset 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (<= ~__ste_client_privateKey1~0 456) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (<= 3 ~__ste_client_idCounter2~0) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (<= |ULTIMATE.start_setup_chuck__wrappee__Base_~chuck___0#1| 3) (= 3 ~chuck~0) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (<= 3 |ULTIMATE.start_setup_chuck_~chuck___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1|) (= ~queue_empty~0 1) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1| 2) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 32) (<= 3 |ULTIMATE.start_setup_chuck_#in~chuck___0#1|) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (<= |ULTIMATE.start_setup_chuck__wrappee__Base_#in~chuck___0#1| 3) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (= ~head~0.base 0) (<= |ULTIMATE.start_setup_chuck_~chuck___0#1| 3) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1|) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (<= 3 |ULTIMATE.start_setup_chuck__wrappee__Base_#in~chuck___0#1|) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:20:25,424 INFO L895 garLoopResultBuilder]: At program point L2507(line 2507) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.offset| 0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1| 2) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~42#1|)) (= |ULTIMATE.start_setup_chuck_~chuck___0#1| |ULTIMATE.start_setup_chuck__wrappee__Base_#in~chuck___0#1|) (= ~__ste_Client_counter~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= |ULTIMATE.start_setup_~__cil_tmp2~0#1.base| 33) (= ~__ste_client_autoResponse1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_~rjh___0#1|) (= ~__ste_Client_AddressBook2_Alias0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.offset| 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (<= ~__ste_client_idCounter1~0 2) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= |ULTIMATE.start_main_~tmp~19#1| 1) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_main_~retValue_acc~42#1| 2147483647) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| ~chuck~0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~21#1|) (= ~__ste_client_name1~0.offset 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= |ULTIMATE.start_setup_chuck_#in~chuck___0#1| |ULTIMATE.start_setup_chuck_~chuck___0#1|) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= |ULTIMATE.start_setup_chuck__wrappee__Base_~chuck___0#1| |ULTIMATE.start_setup_chuck__wrappee__Base_#in~chuck___0#1|) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (<= |ULTIMATE.start_setup_rjh_~rjh___0#1| 2) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (<= |ULTIMATE.start_setup_rjh_#in~rjh___0#1| 2) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= 3 ~chuck~0) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~__ste_client_forwardReceiver1~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (<= 2 ~__ste_client_idCounter1~0) (= ~__ste_client_outbuffer0~0 0) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1|) (= ~queue_empty~0 1) (<= |ULTIMATE.start_setup_rjh__wrappee__Base_~rjh___0#1| 2) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_privateKey1~0 456) (= ~__ste_client_forwardReceiver0~0 0) (= |ULTIMATE.start_setup_~__cil_tmp1~0#1.base| 32) (= ~__ste_Client_Keyring2_User0~0 0) (= ~rjh~0 2) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= 2 |ULTIMATE.start_setup_rjh_#in~rjh___0#1|) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (= ~head~0.base 0) (<= 2 |ULTIMATE.start_setup_rjh__wrappee__Base_#in~rjh___0#1|) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= ~bob~0 1) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (<= 1 ~bob~0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:20:25,424 INFO L902 garLoopResultBuilder]: At program point L2540-1(lines 2523 2545) the Hoare annotation is: true [2022-12-14 06:20:25,424 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(line -1) the Hoare annotation is: true [2022-12-14 06:20:25,424 INFO L895 garLoopResultBuilder]: At program point $Ultimate##153(lines 2921 2935) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,424 INFO L899 garLoopResultBuilder]: For program point L2788(lines 2788 2795) no Hoare annotation was computed. [2022-12-14 06:20:25,424 INFO L899 garLoopResultBuilder]: For program point L2590(lines 2590 2597) no Hoare annotation was computed. [2022-12-14 06:20:25,424 INFO L902 garLoopResultBuilder]: At program point L2590-2(lines 2590 2597) the Hoare annotation is: true [2022-12-14 06:20:25,425 INFO L895 garLoopResultBuilder]: At program point L2476(line 2476) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~42#1|)) (= ~__ste_Client_counter~0 0) (= ~rjh~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= ~__ste_client_autoResponse1~0 0) (= ~__ste_Client_AddressBook2_Alias0~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= |ULTIMATE.start_main_~tmp~19#1| 1) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_main_~retValue_acc~42#1| 2147483647) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~21#1|) (= ~__ste_client_name1~0.offset 0) (= ~__ste_client_privateKey1~0 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_email_isSigned0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= ~__ste_client_privateKey0~0 0) (= ~__ste_email_from0~0 0) (= ~__ste_Client_Keyring2_User1~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (= ~bob~0 1) (= ~__ste_client_forwardReceiver1~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= ~__ste_client_idCounter0~0 1) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (= ~head~0.base 0) (= ~__ste_client_privateKey2~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (<= 1 ~__ste_client_idCounter0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~chuck~0 0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (= ~__ste_ClientKeyring_size2~0 0) (= ~__ste_client_autoResponse2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:20:25,426 INFO L895 garLoopResultBuilder]: At program point L2476-1(lines 2470 2480) the Hoare annotation is: (and (= ~queued_client~0 0) (= ~__ste_Client_Keyring1_User2~0 0) (= ~__GUIDSL_NON_TERMINAL_main~0 0) (= ~__ste_email_isEncrypted1~0 0) (= ~__ste_email_subject0~0.offset 0) (= ~__SELECTED_FEATURE_Sign~0 0) (= 0 ~__ste_Client_AddressBook0_Address2~0) (= ~__ste_client_outbuffer3~0 0) (<= 1 |ULTIMATE.start_valid_product_#res#1|) (<= 1 |ULTIMATE.start_setup_bob_#in~bob___0#1|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_~retValue_acc~42#1|)) (= ~__ste_Client_counter~0 0) (= ~rjh~0 0) (= ~__ste_Client_Keyring1_PublicKey2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1| 1) (= ~__ste_client_autoResponse1~0 0) (= ~__ste_Client_AddressBook2_Alias0~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_#in~bob___0#1|) (= 0 ~__ste_email_subject0~0.base) (= ~__ste_Client_AddressBook2_Alias1~0 0) (= |ULTIMATE.start_main_~tmp~19#1| 1) (= ~__ste_Client_Keyring2_PublicKey2~0 0) (= ~__ste_client_forwardReceiver3~0 0) (<= |ULTIMATE.start_main_~retValue_acc~42#1| 2147483647) (<= |ULTIMATE.start_setup_bob_#in~bob___0#1| 1) (= ~__ste_client_name2~0.offset 0) (= ~__ste_client_name1~0.base 0) (= ~__SELECTED_FEATURE_Verify~0 0) (= ~__ste_Client_Keyring1_User0~0 0) (= ~__ste_client_privateKey0~0 123) (= ~__ste_email_body1~0.offset 0) (= ~__SELECTED_FEATURE_Encrypt~0 0) (= ~__ste_Client_AddressBook1_Address2~0 0) (<= 1 |ULTIMATE.start_setup_bob_~bob___0#1|) (= ~__ste_ClientAddressBook_size1~0 0) (= ~__ste_Client_Keyring0_PublicKey0~0 0) (= ~__ste_Email_counter~0 0) (= ~__ste_ClientKeyring_size1~0 0) (= ~__ste_email_body0~0.offset 0) (= ~__ste_email_isSignatureVerified0~0 0) (= ~__ste_Client_Keyring0_User2~0 0) (= ~__ste_ClientAddressBook_size0~0 0) (= ~__ste_Client_Keyring0_User1~0 0) (= ~__ste_Client_AddressBook1_Alias1~0 0) (= ~__ste_email_to1~0 0) (= 1 |ULTIMATE.start_valid_product_~retValue_acc~21#1|) (= ~__ste_client_name1~0.offset 0) (= ~head~0.offset 0) (= ~__ste_client_name0~0.offset 0) (= ~__ste_Client_Keyring0_PublicKey2~0 0) (= ~__ste_Client_Keyring1_PublicKey0~0 0) (= ~__ste_email_to0~0 0) (= ~__ste_email_signKey0~0 0) (= ~__SELECTED_FEATURE_Decrypt~0 0) (= ~__ste_email_encryptionKey0~0 0) (= ~__SELECTED_FEATURE_Keys~0 0) (= ~__SELECTED_FEATURE_AddressBook~0 0) (= ~__ste_client_forwardReceiver2~0 0) (= ~__ste_Client_Keyring0_PublicKey1~0 0) (= ~__SELECTED_FEATURE_Forward~0 0) (= ~__ste_Client_Keyring0_User0~0 0) (= ~__ste_Client_Keyring2_PublicKey1~0 0) (= ~__ste_email_isSigned1~0 0) (= ~__ste_email_body0~0.base 0) (= ~__ste_Client_AddressBook0_Alias0~0 0) (= ~__ste_email_id0~0 0) (= ~__ste_email_from0~0 0) (<= |ULTIMATE.start_setup_bob_~bob___0#1| 1) (= ~__ste_Client_AddressBook2_Address2~0 0) (<= |ULTIMATE.start_valid_product_#res#1| 1) (= ~__ste_Client_AddressBook2_Address1~0 0) (<= 1 |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1|) (= ~__ste_Client_AddressBook1_Alias2~0 0) (= ~__ste_client_outbuffer0~0 0) (= ~queue_empty~0 1) (= ~__SELECTED_FEATURE_Base~0 0) (= ~__ste_client_forwardReceiver0~0 0) (= ~__ste_Client_Keyring2_User0~0 0) (= 0 ~__ste_Client_AddressBook0_Address1~0) (= ~__ste_Client_AddressBook2_Address0~0 0) (= ~__ste_email_isSignatureVerified1~0 0) (= ~__ste_Client_Keyring1_PublicKey1~0 0) (= ~__ste_Client_Keyring2_PublicKey0~0 0) (= ~__ste_Client_AddressBook1_Address0~0 0) (= ~__ste_client_name2~0.base 0) (= ~__ste_email_from1~0 0) (<= ~__ste_client_idCounter0~0 1) (= ~__ste_email_subject1~0.base 0) (= ~__ste_Client_AddressBook1_Alias0~0 0) (= ~__ste_Client_Keyring2_User2~0 0) (<= |ULTIMATE.start_setup_bob__wrappee__Base_~bob___0#1| 1) (= ~head~0.base 0) (<= ~__ste_client_forwardReceiver1~0 0) (= ~__ste_Client_Keyring1_User1~0 0) (= |#NULL.offset| 0) (= ~__ste_Client_AddressBook2_Alias2~0 0) (<= ~__ste_Client_Keyring2_User1~0 0) (<= 0 ~__ste_email_isSigned0~0) (<= 0 ~__ste_client_autoResponse2~0) (= ~__ste_email_subject1~0.offset 0) (= ~__ste_Client_AddressBook0_Alias2~0 0) (= ~__ste_ClientKeyring_size0~0 0) (= ~__ste_email_isEncrypted0~0 0) (<= 0 ~__ste_Client_Keyring2_User1~0) (= ~queued_message~0 0) (= ~__ste_Client_AddressBook1_Address1~0 0) (= 0 ~__ste_Client_AddressBook0_Address0~0) (<= 1 ~__ste_client_idCounter0~0) (= ~__ste_client_outbuffer1~0 0) (= ~__ste_Client_AddressBook0_Alias1~0 0) (= ~__GUIDSL_ROOT_PRODUCTION~0 0) (= ~chuck~0 0) (<= 0 ~__ste_client_forwardReceiver1~0) (= ~__ste_client_name0~0.base 0) (= ~__ste_email_id1~0 0) (= ~__ste_client_outbuffer2~0 0) (<= ~bob~0 1) (<= 0 |#StackHeapBarrier|) (= ~__ste_ClientAddressBook_size2~0 0) (= ~__SELECTED_FEATURE_AutoResponder~0 0) (<= ~__ste_client_autoResponse2~0 0) (= ~__ste_email_encryptionKey1~0 0) (= ~__ste_client_autoResponse0~0 0) (= ~__ste_email_body1~0.base 0) (<= ~__ste_email_isSigned0~0 0) (<= 1 ~bob~0) (= ~__ste_ClientKeyring_size2~0 0) (= |#NULL.base| 0) (= ~__ste_email_signKey1~0 0)) [2022-12-14 06:20:25,426 INFO L895 garLoopResultBuilder]: At program point L2708(line 2708) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,426 INFO L895 garLoopResultBuilder]: At program point L2708-1(lines 2703 2712) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,426 INFO L899 garLoopResultBuilder]: For program point L2609-1(line 2609) no Hoare annotation was computed. [2022-12-14 06:20:25,426 INFO L895 garLoopResultBuilder]: At program point L2609(line 2609) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~19#1| 1) (= |ULTIMATE.start_test_~op1~0#1| 0)) [2022-12-14 06:20:25,426 INFO L895 garLoopResultBuilder]: At program point L2676(line 2676) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,426 INFO L895 garLoopResultBuilder]: At program point L2610(line 2610) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~19#1| 1) (= |ULTIMATE.start_test_~op1~0#1| 0)) [2022-12-14 06:20:25,426 INFO L899 garLoopResultBuilder]: For program point L2676-1(line 2676) no Hoare annotation was computed. [2022-12-14 06:20:25,426 INFO L895 garLoopResultBuilder]: At program point L2610-1(line 2610) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~19#1| 1) (= |ULTIMATE.start_test_~op1~0#1| 0)) [2022-12-14 06:20:25,426 INFO L899 garLoopResultBuilder]: For program point L2858(lines 2858 2862) no Hoare annotation was computed. [2022-12-14 06:20:25,427 INFO L895 garLoopResultBuilder]: At program point L2677-1(line 2677) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,427 INFO L895 garLoopResultBuilder]: At program point L2677(line 2677) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,427 INFO L895 garLoopResultBuilder]: At program point L2611(line 2611) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~19#1| 1) (= |ULTIMATE.start_test_~op1~0#1| 0)) [2022-12-14 06:20:25,427 INFO L895 garLoopResultBuilder]: At program point L2925-1(lines 2776 2946) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,427 INFO L899 garLoopResultBuilder]: For program point L2925(lines 2925 2932) no Hoare annotation was computed. [2022-12-14 06:20:25,427 INFO L895 garLoopResultBuilder]: At program point L2628(line 2628) the Hoare annotation is: (= |ULTIMATE.start_main_~tmp~19#1| 1) [2022-12-14 06:20:25,427 INFO L899 garLoopResultBuilder]: For program point L2628-1(line 2628) no Hoare annotation was computed. [2022-12-14 06:20:25,427 INFO L899 garLoopResultBuilder]: For program point getEmailFromEXIT(lines 617 635) no Hoare annotation was computed. [2022-12-14 06:20:25,427 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 617 635) the Hoare annotation is: true [2022-12-14 06:20:25,427 INFO L899 garLoopResultBuilder]: For program point isReadableEXIT(lines 518 526) no Hoare annotation was computed. [2022-12-14 06:20:25,427 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 518 526) the Hoare annotation is: true [2022-12-14 06:20:25,427 INFO L899 garLoopResultBuilder]: For program point setClientKeyringPublicKeyEXIT(lines 1932 1975) no Hoare annotation was computed. [2022-12-14 06:20:25,432 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 1932 1975) the Hoare annotation is: (or (not (<= 0 ~queued_client~0)) (not (<= 0 ~__ste_email_subject0~0.offset)) (not (= ~__ste_Client_AddressBook1_Address2~0 0)) (not (<= 0 ~__ste_Client_AddressBook2_Address1~0)) (not (= ~__ste_email_from0~0 0)) (not (<= ~__ste_Client_Keyring0_User0~0 2)) (not (<= ~__ste_ClientKeyring_size0~0 2147483647)) (not (<= ~__ste_email_signKey1~0 0)) (not (<= ~__SELECTED_FEATURE_Verify~0 0)) (not (<= 0 ~head~0.base)) (not (= ~__ste_client_name2~0.base 0)) (not (= ~__ste_Client_AddressBook1_Alias1~0 0)) (not (= ~rjh~0 2)) (not (<= ~__ste_client_privateKey2~0 789)) (not (<= 0 |#NULL.offset|)) (not (= ~__ste_ClientAddressBook_size1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver1~0)) (not (= ~__ste_Client_counter~0 0)) (not (<= 0 ~__ste_email_id1~0)) (not (= |setClientKeyringPublicKey_#in~handle| ~bob~0)) (not (= |old(~__ste_Client_Keyring2_PublicKey0~0)| 0)) (not (<= ~__ste_Client_AddressBook2_Address1~0 0)) (not (= ~queued_message~0 0)) (not (<= 0 (+ 2147483647 ~__ste_ClientKeyring_size0~0))) (not (= ~__ste_client_name2~0.offset 0)) (not (= ~__ste_ClientAddressBook_size2~0 0)) (not (<= 0 ~__ste_email_encryptionKey0~0)) (not (= ~__ste_email_id0~0 0)) (not (<= 0 ~__SELECTED_FEATURE_AddressBook~0)) (not (= ~__SELECTED_FEATURE_Keys~0 0)) (not (= |setClientKeyringPublicKey_#in~index| 0)) (not (= ~__ste_Client_AddressBook2_Address0~0 0)) (not (= ~__ste_Client_Keyring0_User2~0 0)) (not (<= ~head~0.base 0)) (not (= ~__ste_Client_AddressBook2_Alias2~0 0)) (not (<= ~bob~0 1)) (not (= ~__ste_client_name0~0.base 0)) (not (= ~__GUIDSL_ROOT_PRODUCTION~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Alias2~0)) (not (= ~__SELECTED_FEATURE_Forward~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias0~0 0)) (not (<= 2 ~__ste_Client_Keyring0_User0~0)) (not (<= 0 |old(~__ste_Client_Keyring0_PublicKey1~0)|)) (not (= ~__ste_email_body1~0.base 0)) (not (= ~__GUIDSL_NON_TERMINAL_main~0 0)) (not (= ~__ste_email_to0~0 0)) (not (= ~__ste_client_outbuffer0~0 0)) (not (= ~__ste_client_forwardReceiver0~0 0)) (not (= ~__ste_email_body1~0.offset 0)) (not (= ~__ste_email_body0~0.offset 0)) (not (<= 0 ~__ste_Client_Keyring1_PublicKey2~0)) (not (= ~__ste_email_isEncrypted1~0 0)) (and (= ~__ste_Client_Keyring1_PublicKey1~0 |old(~__ste_Client_Keyring1_PublicKey1~0)|) (= |old(~__ste_Client_Keyring2_PublicKey1~0)| ~__ste_Client_Keyring2_PublicKey1~0) (= |old(~__ste_Client_Keyring0_PublicKey1~0)| ~__ste_Client_Keyring0_PublicKey1~0) (= |old(~__ste_Client_Keyring2_PublicKey0~0)| ~__ste_Client_Keyring2_PublicKey0~0) (= |old(~__ste_Client_Keyring0_PublicKey0~0)| ~__ste_Client_Keyring0_PublicKey0~0) (= ~__ste_Client_Keyring1_PublicKey0~0 |old(~__ste_Client_Keyring1_PublicKey0~0)|)) (not (<= 1 ~bob~0)) (not (= ~head~0.offset 0)) (not (= 456 |setClientKeyringPublicKey_#in~value|)) (not (<= 789 ~__ste_client_privateKey2~0)) (not (= ~__ste_client_outbuffer1~0 0)) (not (<= ~__ste_client_forwardReceiver3~0 0)) (not (= ~__ste_email_signKey0~0 0)) (not (= ~__SELECTED_FEATURE_Sign~0 0)) (not (<= 0 ~__ste_email_signKey1~0)) (not (= ~__ste_Client_AddressBook2_Alias1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias0~0)) (not (<= ~__ste_client_name0~0.offset 0)) (not (<= ~__ste_email_id1~0 0)) (not (= ~__ste_email_isSignatureVerified0~0 0)) (not (<= 0 ~__ste_email_isSigned0~0)) (not (<= 0 ~__ste_client_autoResponse2~0)) (not (= ~__ste_Client_AddressBook0_Alias0~0 0)) (not (<= |old(~__ste_Client_Keyring1_PublicKey0~0)| 0)) (not (<= ~__ste_Client_Keyring1_PublicKey2~0 0)) (not (= ~__ste_client_outbuffer3~0 0)) (not (<= ~__ste_client_autoResponse0~0 0)) (not (<= ~__ste_Client_AddressBook0_Alias2~0 0)) (not (= ~__SELECTED_FEATURE_Base~0 0)) (not (<= ~__ste_Client_AddressBook1_Alias2~0 0)) (not (= ~__ste_email_encryptionKey1~0 0)) (not (<= |#NULL.offset| 0)) (not (<= ~__ste_Client_AddressBook0_Address1~0 0)) (not (<= 0 ~__ste_client_forwardReceiver2~0)) (not (<= ~__ste_email_subject0~0.offset 0)) (not (<= |old(~__ste_Client_Keyring0_PublicKey1~0)| 0)) (not (= ~__ste_email_to1~0 0)) (not (= |#NULL.base| 0)) (not (<= ~__ste_Client_AddressBook0_Address2~0 0)) (not (<= 0 ~__SELECTED_FEATURE_Verify~0)) (not (<= 0 ~__ste_client_forwardReceiver3~0)) (not (= ~__ste_email_isSignatureVerified1~0 0)) (not (<= ~__SELECTED_FEATURE_AddressBook~0 0)) (not (= ~__ste_email_subject1~0.base 0)) (not (= ~__ste_client_autoResponse1~0 0)) (not (<= 0 ~__ste_Client_AddressBook1_Alias2~0)) (not (= ~__ste_Client_AddressBook2_Address2~0 0)) (not (<= 0 ~__ste_email_from1~0)) (not (= ~__ste_client_name1~0.offset 0)) (not (<= ~__ste_client_forwardReceiver2~0 0)) (not (= |old(~__ste_Client_Keyring1_PublicKey1~0)| 0)) (not (= ~__ste_email_body0~0.base 0)) (not (= ~__ste_Client_AddressBook1_Address1~0 0)) (not (<= 0 |old(~__ste_Client_Keyring1_PublicKey0~0)|)) (not (= ~__SELECTED_FEATURE_Decrypt~0 0)) (not (<= 0 ~__ste_client_name1~0.base)) (not (<= ~__ste_Client_AddressBook0_Address0~0 0)) (not (= |old(~__ste_Client_Keyring2_PublicKey1~0)| 0)) (not (= 3 ~chuck~0)) (not (<= 0 ~__ste_Client_AddressBook0_Address0~0)) (not (<= ~__ste_client_idCounter2~0 3)) (not (= |old(~__ste_Client_Keyring0_PublicKey0~0)| 0)) (not (= ~__ste_Client_AddressBook1_Address0~0 0)) (not (<= 0 |#StackHeapBarrier|)) (not (= ~__ste_Client_Keyring2_User2~0 0)) (not (= ~__SELECTED_FEATURE_AutoResponder~0 0)) (not (<= ~__ste_client_forwardReceiver1~0 0)) (not (<= ~__ste_email_isEncrypted0~0 0)) (not (<= ~__ste_client_autoResponse2~0 0)) (not (= ~__ste_ClientAddressBook_size0~0 0)) (not (<= ~queued_client~0 0)) (not (<= 0 ~__ste_client_name0~0.offset)) (not (= ~__ste_Client_Keyring1_User2~0 0)) (not (<= ~__ste_email_encryptionKey0~0 0)) (not (<= 0 ~__ste_client_autoResponse0~0)) (not (= ~__ste_client_outbuffer2~0 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address1~0)) (not (<= ~__ste_client_name1~0.base 0)) (not (<= 0 ~__ste_Client_AddressBook0_Address2~0)) (not (= ~__ste_Client_Keyring2_PublicKey2~0 0)) (not (= ~__SELECTED_FEATURE_Encrypt~0 0)) (not (= ~queue_empty~0 1)) (not (<= ~__ste_email_isSigned0~0 0)) (not (= ~__ste_Client_AddressBook2_Alias0~0 0)) (not (= ~__ste_email_isSigned1~0 0)) (not (<= ~__ste_email_from1~0 0)) (not (= ~__ste_Client_AddressBook0_Alias1~0 0)) (not (= ~__ste_Email_counter~0 0)) (not (<= 3 ~__ste_client_idCounter2~0)) (not (<= 0 ~__ste_email_isEncrypted0~0)) (not (= ~__ste_email_subject1~0.offset 0)) (not (= 0 ~__ste_email_subject0~0.base)) (not (= ~__ste_Client_Keyring0_PublicKey2~0 0))) [2022-12-14 06:20:25,432 INFO L899 garLoopResultBuilder]: For program point setClientIdEXIT(lines 2051 2070) no Hoare annotation was computed. [2022-12-14 06:20:25,432 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 2051 2070) the Hoare annotation is: true [2022-12-14 06:20:25,434 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 06:20:25,436 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-14 06:20:25,503 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.12 06:20:25 BoogieIcfgContainer [2022-12-14 06:20:25,503 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-14 06:20:25,504 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-14 06:20:25,504 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-14 06:20:25,504 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-14 06:20:25,504 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 06:09:13" (3/4) ... [2022-12-14 06:20:25,506 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-14 06:20:25,510 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getEmailSignKey [2022-12-14 06:20:25,511 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure outgoing [2022-12-14 06:20:25,511 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isSigned [2022-12-14 06:20:25,511 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientPrivateKey [2022-12-14 06:20:25,511 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure chuckKeyAdd [2022-12-14 06:20:25,511 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setEmailTo [2022-12-14 06:20:25,511 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getEmailTo [2022-12-14 06:20:25,511 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure createClientKeyringEntry [2022-12-14 06:20:25,511 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure generateKeyPair [2022-12-14 06:20:25,511 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientAddressBookSize [2022-12-14 06:20:25,511 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientKeyringUser [2022-12-14 06:20:25,511 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure sendEmail [2022-12-14 06:20:25,511 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getClientAddressBookSize [2022-12-14 06:20:25,511 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getClientAddressBookAddress [2022-12-14 06:20:25,511 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure outgoing__wrappee__AutoResponder [2022-12-14 06:20:25,511 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setEmailFrom [2022-12-14 06:20:25,511 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getEmailFrom [2022-12-14 06:20:25,511 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientAddressBookAddress [2022-12-14 06:20:25,512 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isReadable [2022-12-14 06:20:25,512 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientKeyringPublicKey [2022-12-14 06:20:25,512 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure setClientId [2022-12-14 06:20:25,523 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 258 nodes and edges [2022-12-14 06:20:25,524 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 78 nodes and edges [2022-12-14 06:20:25,525 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 12 nodes and edges [2022-12-14 06:20:25,526 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-12-14 06:20:25,527 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-12-14 06:20:25,527 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 06:20:25,548 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && 0 <= 2147483648 + retValue_acc) && __ste_Client_counter == 0) && rjh == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_autoResponse1 == 0) && __ste_Client_AddressBook2_Alias0 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && tmp == 1) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && retValue_acc <= 2147483647) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && 1 == retValue_acc) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 1 <= bob___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && __ste_client_idCounter0 <= 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && 1 <= __ste_client_idCounter0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 [2022-12-14 06:20:25,548 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && 0 <= 2147483648 + retValue_acc) && __ste_Client_counter == 0) && rjh == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_autoResponse1 == 0) && __ste_Client_AddressBook2_Alias0 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && tmp == 1) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && retValue_acc <= 2147483647) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_client_privateKey0 == 123) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && 1 == retValue_acc) && __ste_client_name1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && __ste_Client_Keyring0_User0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && __ste_email_from0 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && 1 <= bob___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && __ste_client_idCounter0 <= 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head == 0) && __ste_client_forwardReceiver1 <= 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_Client_Keyring2_User1 <= 0) && 0 <= __ste_email_isSigned0) && 0 <= __ste_client_autoResponse2) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && 0 <= __ste_Client_Keyring2_User1) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && 1 <= __ste_client_idCounter0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && 0 <= __ste_client_forwardReceiver1) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && bob <= 1) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_client_autoResponse2 <= 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_email_isSigned0 <= 0) && 1 <= bob) && __ste_ClientKeyring_size2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 [2022-12-14 06:20:25,548 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && \old(rjh___0) <= 2) && 1 <= \old(bob___0)) && 0 <= 2147483648 + retValue_acc) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_client_idCounter1 <= 2) && __ste_Client_AddressBook2_Alias1 == 0) && tmp == 1) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && retValue_acc <= 2147483647) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && 1 == retValue_acc) && __ste_client_name1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 1 <= bob___0) && __ste_Client_AddressBook1_Alias2 == 0) && 2 <= __ste_client_idCounter1) && __ste_client_outbuffer0 == 0) && 2 <= rjh___0) && queue_empty == 1) && rjh___0 <= 2) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __cil_tmp1 == 32) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_client_privateKey0 <= 123) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head == 0) && 2 <= \old(rjh___0)) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && 123 <= __ste_client_privateKey0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 [2022-12-14 06:20:25,548 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && 456 <= __ste_client_privateKey1) && 3 <= chuck___0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __cil_tmp2 == 0) && __ste_client_outbuffer3 == 0) && 1 <= \result) && \old(rjh___0) <= 2) && 1 <= \old(bob___0)) && 0 <= 2147483648 + retValue_acc) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __cil_tmp2 == 33) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && tmp == 1) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && retValue_acc <= 2147483647) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && \old(chuck___0) <= 3) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_client_idCounter2 <= 3) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && 1 == retValue_acc) && __ste_client_name1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_client_privateKey1 <= 456) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && 3 <= __ste_client_idCounter2) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && chuck___0 <= 3) && 3 == chuck) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 1 <= bob___0) && 3 <= chuck___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && 2 <= rjh___0) && queue_empty == 1) && rjh___0 <= 2) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __cil_tmp1 == 32) && 3 <= \old(chuck___0)) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && \old(chuck___0) <= 3) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head == 0) && chuck___0 <= 3) && 2 <= \old(rjh___0)) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && 3 <= \old(chuck___0)) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 [2022-12-14 06:20:25,549 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && \old(rjh___0) <= 2) && 1 <= \old(bob___0)) && 0 <= 2147483648 + retValue_acc) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_client_idCounter1 <= 2) && __ste_Client_AddressBook2_Alias1 == 0) && tmp == 1) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && retValue_acc <= 2147483647) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && 1 == retValue_acc) && __ste_client_name1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_email_from0 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && 1 <= bob___0) && __ste_Client_AddressBook1_Alias2 == 0) && 2 <= __ste_client_idCounter1) && __ste_client_outbuffer0 == 0) && 2 <= rjh___0) && queue_empty == 1) && rjh___0 <= 2) && __SELECTED_FEATURE_Base == 0) && __ste_client_privateKey1 == 456) && __ste_client_forwardReceiver0 == 0) && __cil_tmp1 == 32) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_ClientKeyring_size0 <= 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head == 0) && __ste_client_forwardReceiver1 <= 0) && 2 <= \old(rjh___0)) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_Client_Keyring2_User1 <= 0) && 0 <= __ste_email_isSigned0) && 0 <= __ste_client_autoResponse2) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_email_isEncrypted0 == 0) && 0 <= __ste_Client_Keyring2_User1) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && 0 <= __ste_ClientKeyring_size0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && 0 <= __ste_client_forwardReceiver1) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && bob <= 1) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_client_autoResponse2 <= 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_email_isSigned0 <= 0) && 1 <= bob) && __ste_ClientKeyring_size2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 [2022-12-14 06:20:25,549 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && 3 <= chuck___0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __cil_tmp2 == 0) && __ste_client_outbuffer3 == 0) && 1 <= \result) && \old(rjh___0) <= 2) && 1 <= \old(bob___0)) && 0 <= 2147483648 + retValue_acc) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __cil_tmp2 == 33) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && tmp == 1) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && retValue_acc <= 2147483647) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && \old(chuck___0) <= 3) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_client_idCounter2 <= 3) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && 1 == retValue_acc) && __ste_client_name1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && 789 == __ste_client_privateKey2) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && 3 <= __ste_client_idCounter2) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && chuck___0 <= 3) && 3 == chuck) && __ste_Client_AddressBook2_Address1 == 0) && __ste_client_forwardReceiver1 == 0) && 1 <= bob___0) && 3 <= chuck___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && 2 <= rjh___0) && queue_empty == 1) && rjh___0 <= 2) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __cil_tmp1 == 32) && 3 <= \old(chuck___0)) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && \old(chuck___0) <= 3) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head == 0) && chuck___0 <= 3) && 2 <= \old(rjh___0)) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && 3 <= \old(chuck___0)) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && bob <= 1) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && 1 <= bob) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 [2022-12-14 06:20:25,551 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || ((\old(__ste_ClientKeyring_size1) == __ste_ClientKeyring_size1 && \old(__ste_ClientKeyring_size2) == __ste_ClientKeyring_size2) && \old(__ste_ClientKeyring_size0) == __ste_ClientKeyring_size0)) || !(__ste_email_from0 == 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(\old(__ste_ClientKeyring_size2) == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_email_to0 == 0)) || !(\old(handle) == bob)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_email_to1 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(\old(__ste_ClientKeyring_size1) == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(789 == __ste_client_privateKey2)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(\old(__ste_ClientKeyring_size0) == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_from1 == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0) [2022-12-14 06:20:25,553 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((queued_message <= 0 && __ste_email_signKey0 == \old(__ste_email_signKey0)) && 0 <= __ste_email_from0) && \old(receiver) == receiver) && from == __ste_email_from0) && __ste_email_isSignatureVerified0 == \old(__ste_email_isSignatureVerified0)) && 0 <= queued_message) && from == \old(from)) && 1 <= sender) && sender <= 1) && \old(queue_empty) == queue_empty) && __ste_email_from0 <= 0) && __ste_email_to0 == to) && queued_client == \old(queued_client)) && \old(to) <= 2) && __ste_email_isSigned1 == \old(__ste_email_isSigned1)) && 2 <= \old(to)) && __ste_email_isSignatureVerified1 == \old(__ste_email_isSignatureVerified1)) && __ste_email_isSigned0 == \old(__ste_email_isSigned0)) && 2 <= to) && __ste_email_to0 <= 2) && 1 == msg) && __ste_email_signKey1 == \old(__ste_email_signKey1)) || (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(queued_message) == 0)) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(\old(__ste_email_to0) == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(bob == \old(sender))) || !(\old(__ste_email_to1) == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(\old(receiver) == rjh)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(\old(__ste_email_from1) == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0)) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(queued_message) == 0)) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(\old(__ste_email_to0) == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(bob == \old(sender))) || !(\old(__ste_email_to1) == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(\old(receiver) == rjh)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(\old(__ste_email_from1) == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0))) [2022-12-14 06:20:25,555 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\old(__ste_email_isSignatureVerified0) <= 0) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_email_signKey1 <= 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_client_privateKey0 <= 2147483647)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__ste_email_isSigned0 <= 1)) || !(__SELECTED_FEATURE_Forward == 0)) || !(0 <= \old(__ste_email_isSignatureVerified1))) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(0 <= \old(__ste_email_isSignatureVerified0))) || !(__ste_client_outbuffer3 == 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(\old(__ste_email_isSignatureVerified1) <= 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(0 <= __ste_email_signKey0 + 2147483648)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned1)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_email_isSigned1 <= 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_privateKey0 + 2147483648)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_autoResponse0 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_signKey0 <= 2147483647)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\old(__ste_email_isSignatureVerified0) <= 0) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_email_signKey1 <= 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_client_privateKey0 <= 2147483647)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__ste_email_isSigned0 <= 1)) || !(__SELECTED_FEATURE_Forward == 0)) || !(0 <= \old(__ste_email_isSignatureVerified1))) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(0 <= \old(__ste_email_isSignatureVerified0))) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(\old(__ste_email_isSignatureVerified1) <= 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(0 <= __ste_email_signKey0 + 2147483648)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned1)) || !(__ste_email_subject1 == 0)) || !(__ste_email_isSigned1 <= 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(0 <= __ste_client_privateKey0 + 2147483648)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_signKey0 <= 2147483647)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0))) || ((((((((queued_message == \old(queued_message) && __ste_email_to0 == \old(__ste_email_to0)) && __ste_email_to1 == \old(__ste_email_to1)) && \old(__ste_email_from0) == __ste_email_from0) && __ste_email_isSignatureVerified0 == \old(__ste_email_isSignatureVerified0)) && \old(__ste_email_from1) == __ste_email_from1) && \old(queue_empty) == queue_empty) && queued_client == \old(queued_client)) && __ste_email_isSignatureVerified1 == \old(__ste_email_isSignatureVerified1)) [2022-12-14 06:20:25,555 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(1 <= \old(client)) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(\old(queued_message) == 0)) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(rjh == \old(__ste_email_to0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(\old(client) <= 1)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(queued_message) == 0)) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(rjh == \old(__ste_email_to0))) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0))) || ((((((((((((queued_message == \old(queued_message) && __ste_email_to0 == \old(__ste_email_to0)) && __ste_email_signKey0 == \old(__ste_email_signKey0)) && __ste_email_to1 == \old(__ste_email_to1)) && \old(__ste_email_from0) == __ste_email_from0) && __ste_email_isSignatureVerified0 == \old(__ste_email_isSignatureVerified0)) && \old(__ste_email_from1) == __ste_email_from1) && \old(queue_empty) == queue_empty) && queued_client == \old(queued_client)) && __ste_email_isSigned1 == \old(__ste_email_isSigned1)) && __ste_email_isSignatureVerified1 == \old(__ste_email_isSignatureVerified1)) && __ste_email_isSigned0 == \old(__ste_email_isSigned0)) && __ste_email_signKey1 == \old(__ste_email_signKey1)) [2022-12-14 06:20:25,558 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\old(__ste_email_isSignatureVerified0) <= 0) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_email_signKey1 <= 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_client_privateKey0 <= 2147483647)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__ste_email_isSigned0 <= 1)) || !(__SELECTED_FEATURE_Forward == 0)) || !(0 <= \old(__ste_email_isSignatureVerified1))) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(0 <= \old(__ste_email_isSignatureVerified0))) || !(__ste_client_outbuffer3 == 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(\old(__ste_email_isSignatureVerified1) <= 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(0 <= __ste_email_signKey0 + 2147483648)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned1)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_email_isSigned1 <= 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_privateKey0 + 2147483648)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_autoResponse0 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_signKey0 <= 2147483647)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\old(__ste_email_isSignatureVerified0) <= 0) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_email_signKey1 <= 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_client_privateKey0 <= 2147483647)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__ste_email_isSigned0 <= 1)) || !(__SELECTED_FEATURE_Forward == 0)) || !(0 <= \old(__ste_email_isSignatureVerified1))) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(0 <= \old(__ste_email_isSignatureVerified0))) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(\old(__ste_email_isSignatureVerified1) <= 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(0 <= __ste_email_signKey0 + 2147483648)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned1)) || !(__ste_email_subject1 == 0)) || !(__ste_email_isSigned1 <= 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(0 <= __ste_client_privateKey0 + 2147483648)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_signKey0 <= 2147483647)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0))) || (((((((((((((((((((((((((((((((((((((((((((((((((((((((handle <= 1 && __ste_email_isSignatureVerified1 <= 0) && client <= 1) && queued_message <= 0) && __ste_email_isSignatureVerified0 <= 0) && __ste_email_from0 <= 2147483647) && tmp == 1) && 0 <= __ste_email_from0 + 2147483648) && tmp == \old(client)) && 1 <= client) && \result <= 2147483647) && queue_empty <= 1) && \old(client) <= 1) && msg <= 1) && 1 <= msg) && 1 <= msg) && \old(handle) <= 1) && client == \old(client)) && 1 <= \old(handle)) && \old(client) <= 2) && __ste_client_idCounter0 <= 2147483647) && client <= 1) && \old(msg) == msg) && \old(msg) == msg) && 2 <= \old(client)) && \old(msg) <= 1) && 1 <= \old(client)) && 1 <= queue_empty) && 2 <= client) && 0 <= retValue_acc + 2147483648) && 0 <= queued_message) && 0 <= __ste_email_isSignatureVerified1) && 0 <= tmp + 2147483648) && msg == __utac__ad__arg1) && 1 <= \old(msg)) && 1 <= msg) && 0 <= \result + 2147483648) && 0 <= queued_client) && 0 <= __ste_email_isSignatureVerified0) && client == \old(client)) && msg <= 1) && tmp <= 2147483647) && 1 <= \old(msg)) && \old(msg) <= 1) && retValue_acc <= 2147483647) && msg <= 1) && 1 <= \old(msg)) && \old(msg) <= 1) && \old(client) <= 2) && 1 <= handle) && 0 <= __ste_client_idCounter0 + 2147483648) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2) && 1 <= client) && msg == \old(msg)) && queued_client <= 0)) && !(tmp == 0) [2022-12-14 06:20:25,559 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(1 <= \old(client)) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(\old(queued_message) == 0)) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(rjh == \old(__ste_email_to0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(\old(client) <= 1)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(queued_message) == 0)) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(rjh == \old(__ste_email_to0))) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0))) || ((((((((((((((((((((((((((((((((((((((msg == \old(msg) && msg <= 1) && queued_message <= 0) && tmp == size) && __ste_email_to1 == \old(__ste_email_to1)) && client == \old(handle)) && retValue_acc == \result) && handle <= 1) && \old(__ste_email_from0) == __ste_email_from0) && \old(client) == client) && \old(client) == client) && __ste_email_isSignatureVerified0 == \old(__ste_email_isSignatureVerified0)) && 0 <= tmp) && tmp == \result) && 0 <= queued_message) && \old(__ste_email_from1) == __ste_email_from1) && 1 <= msg) && 1 <= client) && 1 <= msg) && \old(queue_empty) == queue_empty) && tmp <= 0) && retValue_acc == __ste_client_privateKey0) && 1 <= \old(handle)) && queued_client == \old(queued_client)) && privkey == tmp) && client == \old(client)) && \old(msg) <= 1) && __ste_email_isSignatureVerified1 == \old(__ste_email_isSignatureVerified1)) && (((((__ste_email_signKey0 == \old(__ste_email_signKey0) && privkey == 0) && __ste_email_isSigned1 == \old(__ste_email_isSigned1)) && __ste_email_isSigned0 == \old(__ste_email_isSigned0)) && __ste_email_signKey1 == \old(__ste_email_signKey1)) || ((((((((((((__ste_email_signKey0 == value && __ste_email_isSigned0 == value) && \old(value) == value) && \old(value) == value) && \old(handle) == msg) && \old(value) == privkey) && \old(value) == 1) && !(privkey == 0)) && \old(handle) == handle) && handle == \old(handle)) && \old(handle) == msg) && __ste_email_isSigned1 == \old(__ste_email_isSigned1)) && __ste_email_signKey1 == \old(__ste_email_signKey1)))) && msg <= 1) && \result <= 2147483647) && msg == \old(msg)) && 1 <= \old(msg)) && 0 <= \result + 2147483648) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2) && client <= 1) && 1 <= handle) && \old(handle) <= 1) [2022-12-14 06:20:25,559 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\old(__ste_email_isSignatureVerified0) <= 0) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_email_signKey1 <= 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_client_privateKey0 <= 2147483647)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__ste_email_isSigned0 <= 1)) || !(__SELECTED_FEATURE_Forward == 0)) || !(0 <= \old(__ste_email_isSignatureVerified1))) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(0 <= \old(__ste_email_isSignatureVerified0))) || !(__ste_client_outbuffer3 == 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(\old(__ste_email_isSignatureVerified1) <= 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(0 <= __ste_email_signKey0 + 2147483648)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned1)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_email_isSigned1 <= 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_privateKey0 + 2147483648)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_autoResponse0 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_signKey0 <= 2147483647)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\old(__ste_email_isSignatureVerified0) <= 0) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_email_signKey1 <= 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_client_privateKey0 <= 2147483647)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__ste_email_isSigned0 <= 1)) || !(__SELECTED_FEATURE_Forward == 0)) || !(0 <= \old(__ste_email_isSignatureVerified1))) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(0 <= \old(__ste_email_isSignatureVerified0))) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(\old(__ste_email_isSignatureVerified1) <= 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(0 <= __ste_email_signKey0 + 2147483648)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned1)) || !(__ste_email_subject1 == 0)) || !(__ste_email_isSigned1 <= 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(0 <= __ste_client_privateKey0 + 2147483648)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_signKey0 <= 2147483647)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0))) || (((((((((((((((((((((((((((((((((((((((((((((((((((((((handle <= 1 && __ste_email_isSignatureVerified1 <= 0) && client <= 1) && queued_message <= 0) && __ste_email_isSignatureVerified0 <= 0) && __ste_email_from0 <= 2147483647) && tmp == 1) && 0 <= __ste_email_from0 + 2147483648) && tmp == \old(client)) && 1 <= client) && \result <= 2147483647) && queue_empty <= 1) && \old(client) <= 1) && msg <= 1) && 1 <= msg) && 1 <= msg) && \old(handle) <= 1) && client == \old(client)) && 1 <= \old(handle)) && \old(client) <= 2) && __ste_client_idCounter0 <= 2147483647) && client <= 1) && \old(msg) == msg) && \old(msg) == msg) && 2 <= \old(client)) && \old(msg) <= 1) && 1 <= \old(client)) && 1 <= queue_empty) && 2 <= client) && 0 <= retValue_acc + 2147483648) && 0 <= queued_message) && 0 <= __ste_email_isSignatureVerified1) && 0 <= tmp + 2147483648) && msg == __utac__ad__arg1) && 1 <= \old(msg)) && 1 <= msg) && 0 <= \result + 2147483648) && 0 <= queued_client) && 0 <= __ste_email_isSignatureVerified0) && client == \old(client)) && msg <= 1) && tmp <= 2147483647) && 1 <= \old(msg)) && \old(msg) <= 1) && retValue_acc <= 2147483647) && msg <= 1) && 1 <= \old(msg)) && \old(msg) <= 1) && \old(client) <= 2) && 1 <= handle) && 0 <= __ste_client_idCounter0 + 2147483648) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2) && 1 <= client) && msg == \old(msg)) && queued_client <= 0)) && !(tmp == 0) [2022-12-14 06:20:25,606 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/witness.graphml [2022-12-14 06:20:25,606 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-14 06:20:25,607 INFO L158 Benchmark]: Toolchain (without parser) took 673742.16ms. Allocated memory was 125.8MB in the beginning and 520.1MB in the end (delta: 394.3MB). Free memory was 88.8MB in the beginning and 249.9MB in the end (delta: -161.0MB). Peak memory consumption was 235.5MB. Max. memory is 16.1GB. [2022-12-14 06:20:25,607 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 125.8MB. Free memory is still 92.6MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-14 06:20:25,607 INFO L158 Benchmark]: CACSL2BoogieTranslator took 546.44ms. Allocated memory is still 125.8MB. Free memory was 88.5MB in the beginning and 47.3MB in the end (delta: 41.1MB). Peak memory consumption was 41.9MB. Max. memory is 16.1GB. [2022-12-14 06:20:25,607 INFO L158 Benchmark]: Boogie Procedure Inliner took 71.44ms. Allocated memory is still 125.8MB. Free memory was 47.3MB in the beginning and 41.5MB in the end (delta: 5.8MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-12-14 06:20:25,608 INFO L158 Benchmark]: Boogie Preprocessor took 75.16ms. Allocated memory was 125.8MB in the beginning and 169.9MB in the end (delta: 44.0MB). Free memory was 41.5MB in the beginning and 138.6MB in the end (delta: -97.1MB). Peak memory consumption was 15.0MB. Max. memory is 16.1GB. [2022-12-14 06:20:25,608 INFO L158 Benchmark]: RCFGBuilder took 1166.55ms. Allocated memory is still 169.9MB. Free memory was 138.6MB in the beginning and 76.7MB in the end (delta: 61.9MB). Peak memory consumption was 77.6MB. Max. memory is 16.1GB. [2022-12-14 06:20:25,608 INFO L158 Benchmark]: TraceAbstraction took 671774.85ms. Allocated memory was 169.9MB in the beginning and 520.1MB in the end (delta: 350.2MB). Free memory was 76.7MB in the beginning and 270.3MB in the end (delta: -193.6MB). Peak memory consumption was 296.1MB. Max. memory is 16.1GB. [2022-12-14 06:20:25,609 INFO L158 Benchmark]: Witness Printer took 102.34ms. Allocated memory is still 520.1MB. Free memory was 270.3MB in the beginning and 249.9MB in the end (delta: 20.4MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2022-12-14 06:20:25,611 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 125.8MB. Free memory is still 92.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 546.44ms. Allocated memory is still 125.8MB. Free memory was 88.5MB in the beginning and 47.3MB in the end (delta: 41.1MB). Peak memory consumption was 41.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 71.44ms. Allocated memory is still 125.8MB. Free memory was 47.3MB in the beginning and 41.5MB in the end (delta: 5.8MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Preprocessor took 75.16ms. Allocated memory was 125.8MB in the beginning and 169.9MB in the end (delta: 44.0MB). Free memory was 41.5MB in the beginning and 138.6MB in the end (delta: -97.1MB). Peak memory consumption was 15.0MB. Max. memory is 16.1GB. * RCFGBuilder took 1166.55ms. Allocated memory is still 169.9MB. Free memory was 138.6MB in the beginning and 76.7MB in the end (delta: 61.9MB). Peak memory consumption was 77.6MB. Max. memory is 16.1GB. * TraceAbstraction took 671774.85ms. Allocated memory was 169.9MB in the beginning and 520.1MB in the end (delta: 350.2MB). Free memory was 76.7MB in the beginning and 270.3MB in the end (delta: -193.6MB). Peak memory consumption was 296.1MB. Max. memory is 16.1GB. * Witness Printer took 102.34ms. Allocated memory is still 520.1MB. Free memory was 270.3MB in the beginning and 249.9MB in the end (delta: 20.4MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 957]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 22 procedures, 172 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 671.6s, OverallIterations: 8, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 103.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 106.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1231 SdHoareTripleChecker+Valid, 49.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1149 mSDsluCounter, 15962 SdHoareTripleChecker+Invalid, 46.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 14246 mSDsCounter, 100 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 17591 IncrementalHoareTripleChecker+Invalid, 17691 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 100 mSolverCounterUnsat, 1716 mSDtfsCounter, 17591 mSolverCounterSat, 0.4s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 698 GetRequests, 522 SyntacticMatches, 2 SemanticMatches, 174 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2140 ImplicationChecksByTransitivity, 301.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=529occurred in iteration=7, InterpolantAutomatonStates: 160, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.9s AutomataMinimizationTime, 8 MinimizatonAttempts, 305 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 112 LocationsWithAnnotation, 1322 PreInvPairs, 1612 NumberOfFragments, 36122 HoareAnnotationTreeSize, 1322 FomulaSimplifications, 610292 FormulaSimplificationTreeSizeReduction, 26.0s HoareSimplificationTime, 112 FomulaSimplificationsInter, 46370 FormulaSimplificationTreeSizeReductionInter, 80.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 769 NumberOfCodeBlocks, 769 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 971 ConstructedInterpolants, 0 QuantifiedInterpolants, 1187 SizeOfPredicates, 0 NumberOfNonLiveVariables, 3169 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 14 InterpolantComputations, 5 PerfectInterpolantSequences, 239/257 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 208.2s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 28, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 172, DAG_INTERPRETER_EARLY_EXITS: 3, TOOLS_POST_APPLICATIONS: 150, TOOLS_POST_TIME: 49.3s, TOOLS_POST_CALL_APPLICATIONS: 118, TOOLS_POST_CALL_TIME: 90.1s, TOOLS_POST_RETURN_APPLICATIONS: 78, TOOLS_POST_RETURN_TIME: 35.0s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 346, TOOLS_QUANTIFIERELIM_TIME: 174.1s, TOOLS_QUANTIFIERELIM_MAX_TIME: 5.1s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 492, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 107, DOMAIN_JOIN_TIME: 32.4s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 2, DOMAIN_WIDEN_TIME: 0.6s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 5, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 172, DOMAIN_ISBOTTOM_TIME: 0.6s, LOOP_SUMMARIZER_APPLICATIONS: 3, LOOP_SUMMARIZER_CACHE_MISSES: 3, LOOP_SUMMARIZER_OVERALL_TIME: 64.0s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 64.0s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 5, CALL_SUMMARIZER_APPLICATIONS: 78, CALL_SUMMARIZER_CACHE_MISSES: 19, CALL_SUMMARIZER_OVERALL_TIME: 0.2s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.2s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 3304, DAG_COMPRESSION_RETAINED_NODES: 514, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 2460]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && 0 <= 2147483648 + retValue_acc) && __ste_Client_counter == 0) && rjh == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_autoResponse1 == 0) && __ste_Client_AddressBook2_Alias0 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && tmp == 1) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && retValue_acc <= 2147483647) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && 1 == retValue_acc) && __ste_client_name1 == 0) && __ste_client_privateKey1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && __ste_client_privateKey0 == 0) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 1 <= bob___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && __ste_client_idCounter0 <= 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head == 0) && __ste_client_privateKey2 == 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && 1 <= __ste_client_idCounter0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 - InvariantResult [Line: 2826]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2534]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2798]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2470]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && 1 <= \old(bob___0)) && 0 <= 2147483648 + retValue_acc) && __ste_Client_counter == 0) && rjh == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_autoResponse1 == 0) && __ste_Client_AddressBook2_Alias0 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && tmp == 1) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && retValue_acc <= 2147483647) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_client_privateKey0 == 123) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && 1 == retValue_acc) && __ste_client_name1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && __ste_Client_Keyring0_User0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && __ste_email_from0 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && 1 <= bob___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && queue_empty == 1) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __ste_Client_Keyring2_User0 == 0) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && __ste_client_idCounter0 <= 1) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head == 0) && __ste_client_forwardReceiver1 <= 0) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_Client_Keyring2_User1 <= 0) && 0 <= __ste_email_isSigned0) && 0 <= __ste_client_autoResponse2) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && 0 <= __ste_Client_Keyring2_User1) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && 1 <= __ste_client_idCounter0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && 0 <= __ste_client_forwardReceiver1) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && bob <= 1) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_client_autoResponse2 <= 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_email_isSigned0 <= 0) && 1 <= bob) && __ste_ClientKeyring_size2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 - InvariantResult [Line: 2693]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 544]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((queued_message <= 0 && __ste_email_signKey0 == \old(__ste_email_signKey0)) && 0 <= __ste_email_from0) && \old(receiver) == receiver) && from == __ste_email_from0) && __ste_email_isSignatureVerified0 == \old(__ste_email_isSignatureVerified0)) && 0 <= queued_message) && from == \old(from)) && 1 <= sender) && sender <= 1) && \old(queue_empty) == queue_empty) && __ste_email_from0 <= 0) && __ste_email_to0 == to) && queued_client == \old(queued_client)) && \old(to) <= 2) && __ste_email_isSigned1 == \old(__ste_email_isSigned1)) && 2 <= \old(to)) && __ste_email_isSignatureVerified1 == \old(__ste_email_isSignatureVerified1)) && __ste_email_isSigned0 == \old(__ste_email_isSigned0)) && 2 <= to) && __ste_email_to0 <= 2) && 1 == msg) && __ste_email_signKey1 == \old(__ste_email_signKey1)) || (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(queued_message) == 0)) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(\old(__ste_email_to0) == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(bob == \old(sender))) || !(\old(__ste_email_to1) == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(\old(receiver) == rjh)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(\old(__ste_email_from1) == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0)) && (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(queued_message) == 0)) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(\old(__ste_email_to0) == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(bob == \old(sender))) || !(\old(__ste_email_to1) == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(\old(receiver) == rjh)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(\old(__ste_email_from1) == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0))) - InvariantResult [Line: 2683]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2531]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2671]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2502]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && 456 <= __ste_client_privateKey1) && 3 <= chuck___0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __cil_tmp2 == 0) && __ste_client_outbuffer3 == 0) && 1 <= \result) && \old(rjh___0) <= 2) && 1 <= \old(bob___0)) && 0 <= 2147483648 + retValue_acc) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __cil_tmp2 == 33) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && tmp == 1) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && retValue_acc <= 2147483647) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && \old(chuck___0) <= 3) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_client_idCounter2 <= 3) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && 1 == retValue_acc) && __ste_client_name1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_client_privateKey1 <= 456) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && 3 <= __ste_client_idCounter2) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && chuck___0 <= 3) && 3 == chuck) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 1 <= bob___0) && 3 <= chuck___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && 2 <= rjh___0) && queue_empty == 1) && rjh___0 <= 2) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __cil_tmp1 == 32) && 3 <= \old(chuck___0)) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && \old(chuck___0) <= 3) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head == 0) && chuck___0 <= 3) && 2 <= \old(rjh___0)) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && 3 <= \old(chuck___0)) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 - InvariantResult [Line: 192]: Loop Invariant Derived loop invariant: !(tmp == 0) - InvariantResult [Line: 2523]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: !(tmp == 0) - InvariantResult [Line: 2854]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 365]: Loop Invariant Derived loop invariant: !(tmp == 0) - InvariantResult [Line: 1683]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || ((\old(__ste_ClientKeyring_size1) == __ste_ClientKeyring_size1 && \old(__ste_ClientKeyring_size2) == __ste_ClientKeyring_size2) && \old(__ste_ClientKeyring_size0) == __ste_ClientKeyring_size0)) || !(__ste_email_from0 == 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(\old(__ste_ClientKeyring_size2) == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(queued_message == 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(queued_client == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_isSigned0 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_email_signKey1 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_email_to0 == 0)) || !(\old(handle) == bob)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_email_signKey0 == 0)) || !(__SELECTED_FEATURE_Sign == 0)) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified0 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_email_to1 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(\old(__ste_ClientKeyring_size1) == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_isSignatureVerified1 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(789 == __ste_client_privateKey2)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(\old(__ste_ClientKeyring_size0) == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_autoResponse0 == 0)) || !(queue_empty == 1)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(__ste_email_isSigned1 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_from1 == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0) - InvariantResult [Line: 2728]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2481]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && \old(rjh___0) <= 2) && 1 <= \old(bob___0)) && 0 <= 2147483648 + retValue_acc) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_client_idCounter1 <= 2) && __ste_Client_AddressBook2_Alias1 == 0) && tmp == 1) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && retValue_acc <= 2147483647) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && 1 == retValue_acc) && __ste_client_name1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && bob == 1) && __ste_client_forwardReceiver1 == 0) && 1 <= bob___0) && __ste_Client_AddressBook1_Alias2 == 0) && 2 <= __ste_client_idCounter1) && __ste_client_outbuffer0 == 0) && 2 <= rjh___0) && queue_empty == 1) && rjh___0 <= 2) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __cil_tmp1 == 32) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_client_privateKey0 <= 123) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head == 0) && 2 <= \old(rjh___0)) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && 123 <= __ste_client_privateKey0) && chuck == 0) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 - InvariantResult [Line: 2921]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 435]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\old(__ste_email_isSignatureVerified0) <= 0) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_email_signKey1 <= 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_client_privateKey0 <= 2147483647)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__ste_email_isSigned0 <= 1)) || !(__SELECTED_FEATURE_Forward == 0)) || !(0 <= \old(__ste_email_isSignatureVerified1))) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(0 <= \old(__ste_email_isSignatureVerified0))) || !(__ste_client_outbuffer3 == 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(\old(__ste_email_isSignatureVerified1) <= 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(0 <= __ste_email_signKey0 + 2147483648)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned1)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_email_isSigned1 <= 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_privateKey0 + 2147483648)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_autoResponse0 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_signKey0 <= 2147483647)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\old(__ste_email_isSignatureVerified0) <= 0) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_email_signKey1 <= 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_client_privateKey0 <= 2147483647)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__ste_email_isSigned0 <= 1)) || !(__SELECTED_FEATURE_Forward == 0)) || !(0 <= \old(__ste_email_isSignatureVerified1))) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(0 <= \old(__ste_email_isSignatureVerified0))) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(\old(__ste_email_isSignatureVerified1) <= 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(0 <= __ste_email_signKey0 + 2147483648)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned1)) || !(__ste_email_subject1 == 0)) || !(__ste_email_isSigned1 <= 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(0 <= __ste_client_privateKey0 + 2147483648)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_signKey0 <= 2147483647)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0))) || (((((((((((((((((((((((((((((((((((((((((((((((((((((((handle <= 1 && __ste_email_isSignatureVerified1 <= 0) && client <= 1) && queued_message <= 0) && __ste_email_isSignatureVerified0 <= 0) && __ste_email_from0 <= 2147483647) && tmp == 1) && 0 <= __ste_email_from0 + 2147483648) && tmp == \old(client)) && 1 <= client) && \result <= 2147483647) && queue_empty <= 1) && \old(client) <= 1) && msg <= 1) && 1 <= msg) && 1 <= msg) && \old(handle) <= 1) && client == \old(client)) && 1 <= \old(handle)) && \old(client) <= 2) && __ste_client_idCounter0 <= 2147483647) && client <= 1) && \old(msg) == msg) && \old(msg) == msg) && 2 <= \old(client)) && \old(msg) <= 1) && 1 <= \old(client)) && 1 <= queue_empty) && 2 <= client) && 0 <= retValue_acc + 2147483648) && 0 <= queued_message) && 0 <= __ste_email_isSignatureVerified1) && 0 <= tmp + 2147483648) && msg == __utac__ad__arg1) && 1 <= \old(msg)) && 1 <= msg) && 0 <= \result + 2147483648) && 0 <= queued_client) && 0 <= __ste_email_isSignatureVerified0) && client == \old(client)) && msg <= 1) && tmp <= 2147483647) && 1 <= \old(msg)) && \old(msg) <= 1) && retValue_acc <= 2147483647) && msg <= 1) && 1 <= \old(msg)) && \old(msg) <= 1) && \old(client) <= 2) && 1 <= handle) && 0 <= __ste_client_idCounter0 + 2147483648) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2) && 1 <= client) && msg == \old(msg)) && queued_client <= 0)) && !(tmp == 0) - InvariantResult [Line: 2512]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && 3 <= chuck___0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __cil_tmp2 == 0) && __ste_client_outbuffer3 == 0) && 1 <= \result) && \old(rjh___0) <= 2) && 1 <= \old(bob___0)) && 0 <= 2147483648 + retValue_acc) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __cil_tmp2 == 33) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_Client_AddressBook2_Alias1 == 0) && tmp == 1) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && retValue_acc <= 2147483647) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && \old(chuck___0) <= 3) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_client_idCounter2 <= 3) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && 1 == retValue_acc) && __ste_client_name1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && 789 == __ste_client_privateKey2) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_email_isSigned0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_email_from0 == 0) && __ste_Client_Keyring2_User1 == 0) && bob___0 <= 1) && 3 <= __ste_client_idCounter2) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && chuck___0 <= 3) && 3 == chuck) && __ste_Client_AddressBook2_Address1 == 0) && __ste_client_forwardReceiver1 == 0) && 1 <= bob___0) && 3 <= chuck___0) && __ste_Client_AddressBook1_Alias2 == 0) && __ste_client_outbuffer0 == 0) && 2 <= rjh___0) && queue_empty == 1) && rjh___0 <= 2) && __SELECTED_FEATURE_Base == 0) && __ste_client_forwardReceiver0 == 0) && __cil_tmp1 == 32) && 3 <= \old(chuck___0)) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && \old(chuck___0) <= 3) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head == 0) && chuck___0 <= 3) && 2 <= \old(rjh___0)) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_ClientKeyring_size0 == 0) && __ste_email_isEncrypted0 == 0) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && __GUIDSL_ROOT_PRODUCTION == 0) && 3 <= \old(chuck___0)) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && bob <= 1) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && 1 <= bob) && __ste_ClientKeyring_size2 == 0) && __ste_client_autoResponse2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 - InvariantResult [Line: 138]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(1 <= \old(client)) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(\old(queued_message) == 0)) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(rjh == \old(__ste_email_to0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(\old(client) <= 1)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(queued_message) == 0)) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(rjh == \old(__ste_email_to0))) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0))) || ((((((((((((((((((((((((((((((((((((((msg == \old(msg) && msg <= 1) && queued_message <= 0) && tmp == size) && __ste_email_to1 == \old(__ste_email_to1)) && client == \old(handle)) && retValue_acc == \result) && handle <= 1) && \old(__ste_email_from0) == __ste_email_from0) && \old(client) == client) && \old(client) == client) && __ste_email_isSignatureVerified0 == \old(__ste_email_isSignatureVerified0)) && 0 <= tmp) && tmp == \result) && 0 <= queued_message) && \old(__ste_email_from1) == __ste_email_from1) && 1 <= msg) && 1 <= client) && 1 <= msg) && \old(queue_empty) == queue_empty) && tmp <= 0) && retValue_acc == __ste_client_privateKey0) && 1 <= \old(handle)) && queued_client == \old(queued_client)) && privkey == tmp) && client == \old(client)) && \old(msg) <= 1) && __ste_email_isSignatureVerified1 == \old(__ste_email_isSignatureVerified1)) && (((((__ste_email_signKey0 == \old(__ste_email_signKey0) && privkey == 0) && __ste_email_isSigned1 == \old(__ste_email_isSigned1)) && __ste_email_isSigned0 == \old(__ste_email_isSigned0)) && __ste_email_signKey1 == \old(__ste_email_signKey1)) || ((((((((((((__ste_email_signKey0 == value && __ste_email_isSigned0 == value) && \old(value) == value) && \old(value) == value) && \old(handle) == msg) && \old(value) == privkey) && \old(value) == 1) && !(privkey == 0)) && \old(handle) == handle) && handle == \old(handle)) && \old(handle) == msg) && __ste_email_isSigned1 == \old(__ste_email_isSigned1)) && __ste_email_signKey1 == \old(__ste_email_signKey1)))) && msg <= 1) && \result <= 2147483647) && msg == \old(msg)) && 1 <= \old(msg)) && 0 <= \result + 2147483648) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2) && client <= 1) && 1 <= handle) && \old(handle) <= 1) - InvariantResult [Line: 957]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(1 <= \old(client)) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(\old(queued_message) == 0)) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(rjh == \old(__ste_email_to0))) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(\old(client) <= 1)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(__ste_Client_AddressBook1_Address2 == 0) || !(\old(queued_message) == 0)) || !(\old(__ste_email_signKey0) == 0)) || !(\old(__ste_email_from0) == 0)) || !(rjh == \old(__ste_email_to0))) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__SELECTED_FEATURE_Forward == 0)) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(\old(msg) == 1)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(0 == \old(__ste_email_isSignatureVerified0))) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 == \old(__ste_email_isSignatureVerified1))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(__ste_client_outbuffer3 == 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(__ste_email_encryptionKey1 == 0)) || !(bob == \old(client))) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(\old(queued_client) == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(\old(queue_empty) == 1)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(\old(__ste_email_isSigned1) == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(\old(__ste_email_isSigned0) == 0)) || !(__ste_client_autoResponse0 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(3 <= __ste_client_idCounter2)) || !(\old(__ste_email_signKey1) == 0)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0))) || ((((((((((((queued_message == \old(queued_message) && __ste_email_to0 == \old(__ste_email_to0)) && __ste_email_signKey0 == \old(__ste_email_signKey0)) && __ste_email_to1 == \old(__ste_email_to1)) && \old(__ste_email_from0) == __ste_email_from0) && __ste_email_isSignatureVerified0 == \old(__ste_email_isSignatureVerified0)) && \old(__ste_email_from1) == __ste_email_from1) && \old(queue_empty) == queue_empty) && queued_client == \old(queued_client)) && __ste_email_isSigned1 == \old(__ste_email_isSigned1)) && __ste_email_isSignatureVerified1 == \old(__ste_email_isSignatureVerified1)) && __ste_email_isSigned0 == \old(__ste_email_isSigned0)) && __ste_email_signKey1 == \old(__ste_email_signKey1)) - InvariantResult [Line: 330]: Loop Invariant Derived loop invariant: !(tmp == 0) - InvariantResult [Line: 2491]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((queued_client == 0 && __ste_Client_Keyring1_User2 == 0) && __GUIDSL_NON_TERMINAL_main == 0) && __ste_email_isEncrypted1 == 0) && __ste_email_subject0 == 0) && __SELECTED_FEATURE_Sign == 0) && 0 == __ste_Client_AddressBook0_Address2) && __ste_client_outbuffer3 == 0) && 1 <= \result) && \old(rjh___0) <= 2) && 1 <= \old(bob___0)) && 0 <= 2147483648 + retValue_acc) && __ste_Client_counter == 0) && __ste_Client_Keyring1_PublicKey2 == 0) && \old(bob___0) <= 1) && __ste_client_autoResponse1 == 0) && 2 <= rjh___0) && __ste_Client_AddressBook2_Alias0 == 0) && __cil_tmp1 == 0) && 1 <= \old(bob___0)) && 0 == __ste_email_subject0) && __ste_client_idCounter1 <= 2) && __ste_Client_AddressBook2_Alias1 == 0) && tmp == 1) && __ste_Client_Keyring2_PublicKey2 == 0) && __ste_client_forwardReceiver3 == 0) && retValue_acc <= 2147483647) && \old(bob___0) <= 1) && __ste_client_name2 == 0) && __ste_client_name1 == 0) && __SELECTED_FEATURE_Verify == 0) && __ste_Client_Keyring1_User0 == 0) && __ste_email_body1 == 0) && __SELECTED_FEATURE_Encrypt == 0) && __ste_Client_AddressBook1_Address2 == 0) && 1 <= bob___0) && __ste_ClientAddressBook_size1 == 0) && __ste_Client_Keyring0_PublicKey0 == 0) && __ste_Email_counter == 0) && __ste_ClientKeyring_size1 == 0) && __ste_email_body0 == 0) && __ste_email_isSignatureVerified0 == 0) && __ste_Client_Keyring0_User2 == 0) && __ste_ClientAddressBook_size0 == 0) && __ste_Client_Keyring0_User1 == 0) && __ste_Client_AddressBook1_Alias1 == 0) && __ste_email_to1 == 0) && 1 == retValue_acc) && __ste_client_name1 == 0) && head == 0) && __ste_client_name0 == 0) && __ste_Client_Keyring0_PublicKey2 == 0) && __ste_Client_Keyring1_PublicKey0 == 0) && __ste_email_to0 == 0) && __ste_email_signKey0 == 0) && __SELECTED_FEATURE_Decrypt == 0) && __ste_email_encryptionKey0 == 0) && __SELECTED_FEATURE_Keys == 0) && __SELECTED_FEATURE_AddressBook == 0) && __ste_client_forwardReceiver2 == 0) && __ste_Client_Keyring0_PublicKey1 == 0) && __SELECTED_FEATURE_Forward == 0) && rjh___0 <= 2) && __ste_Client_Keyring0_User0 == 0) && __ste_Client_Keyring2_PublicKey1 == 0) && __ste_email_isSigned1 == 0) && __ste_email_body0 == 0) && __ste_Client_AddressBook0_Alias0 == 0) && __ste_email_id0 == 0) && \old(rjh___0) <= 2) && __ste_email_from0 == 0) && bob___0 <= 1) && __ste_Client_AddressBook2_Address2 == 0) && \result <= 1) && __ste_Client_AddressBook2_Address1 == 0) && 1 <= bob___0) && __ste_Client_AddressBook1_Alias2 == 0) && 2 <= __ste_client_idCounter1) && __ste_client_outbuffer0 == 0) && 2 <= rjh___0) && queue_empty == 1) && rjh___0 <= 2) && __SELECTED_FEATURE_Base == 0) && __ste_client_privateKey1 == 456) && __ste_client_forwardReceiver0 == 0) && __cil_tmp1 == 32) && __ste_Client_Keyring2_User0 == 0) && rjh == 2) && 0 == __ste_Client_AddressBook0_Address1) && __ste_Client_AddressBook2_Address0 == 0) && __ste_email_isSignatureVerified1 == 0) && __ste_Client_Keyring1_PublicKey1 == 0) && __ste_Client_Keyring2_PublicKey0 == 0) && __ste_Client_AddressBook1_Address0 == 0) && __ste_client_name2 == 0) && __ste_email_from1 == 0) && 2 <= \old(rjh___0)) && __ste_email_subject1 == 0) && __ste_ClientKeyring_size0 <= 0) && __ste_Client_AddressBook1_Alias0 == 0) && __ste_Client_Keyring2_User2 == 0) && bob___0 <= 1) && head == 0) && __ste_client_forwardReceiver1 <= 0) && 2 <= \old(rjh___0)) && __ste_Client_Keyring1_User1 == 0) && #NULL == 0) && __ste_Client_AddressBook2_Alias2 == 0) && __ste_Client_Keyring2_User1 <= 0) && 0 <= __ste_email_isSigned0) && 0 <= __ste_client_autoResponse2) && __ste_email_subject1 == 0) && __ste_Client_AddressBook0_Alias2 == 0) && __ste_email_isEncrypted0 == 0) && 0 <= __ste_Client_Keyring2_User1) && queued_message == 0) && __ste_Client_AddressBook1_Address1 == 0) && 0 == __ste_Client_AddressBook0_Address0) && __ste_client_outbuffer1 == 0) && __ste_Client_AddressBook0_Alias1 == 0) && 0 <= __ste_ClientKeyring_size0) && __GUIDSL_ROOT_PRODUCTION == 0) && chuck == 0) && 0 <= __ste_client_forwardReceiver1) && __ste_client_name0 == 0) && __ste_email_id1 == 0) && __ste_client_outbuffer2 == 0) && bob <= 1) && 0 <= unknown-#StackHeapBarrier-unknown) && __ste_ClientAddressBook_size2 == 0) && __SELECTED_FEATURE_AutoResponder == 0) && __ste_client_autoResponse2 <= 0) && __ste_email_encryptionKey1 == 0) && __ste_client_autoResponse0 == 0) && __ste_email_body1 == 0) && __ste_email_isSigned0 <= 0) && 1 <= bob) && __ste_ClientKeyring_size2 == 0) && #NULL == 0) && __ste_email_signKey1 == 0 - InvariantResult [Line: 2611]: Loop Invariant Derived loop invariant: tmp == 1 && op1 == 0 - InvariantResult [Line: 2776]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2812]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2703]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 394]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\old(__ste_email_isSignatureVerified0) <= 0) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_email_signKey1 <= 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_client_privateKey0 <= 2147483647)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__ste_email_isSigned0 <= 1)) || !(__SELECTED_FEATURE_Forward == 0)) || !(0 <= \old(__ste_email_isSignatureVerified1))) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(0 <= \old(__ste_email_isSignatureVerified0))) || !(__ste_client_outbuffer3 == 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(\old(__ste_email_isSignatureVerified1) <= 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(0 <= __ste_email_signKey0 + 2147483648)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned1)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_email_isSigned1 <= 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_privateKey0 + 2147483648)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_autoResponse0 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_signKey0 <= 2147483647)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\old(__ste_email_isSignatureVerified0) <= 0) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_email_signKey1 <= 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_client_privateKey0 <= 2147483647)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__ste_email_isSigned0 <= 1)) || !(__SELECTED_FEATURE_Forward == 0)) || !(0 <= \old(__ste_email_isSignatureVerified1))) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(0 <= \old(__ste_email_isSignatureVerified0))) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(\old(__ste_email_isSignatureVerified1) <= 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(0 <= __ste_email_signKey0 + 2147483648)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned1)) || !(__ste_email_subject1 == 0)) || !(__ste_email_isSigned1 <= 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(0 <= __ste_client_privateKey0 + 2147483648)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_signKey0 <= 2147483647)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0))) || (((((((((((((((((((((((((((((((((((((((((((((((((((((((handle <= 1 && __ste_email_isSignatureVerified1 <= 0) && client <= 1) && queued_message <= 0) && __ste_email_isSignatureVerified0 <= 0) && __ste_email_from0 <= 2147483647) && tmp == 1) && 0 <= __ste_email_from0 + 2147483648) && tmp == \old(client)) && 1 <= client) && \result <= 2147483647) && queue_empty <= 1) && \old(client) <= 1) && msg <= 1) && 1 <= msg) && 1 <= msg) && \old(handle) <= 1) && client == \old(client)) && 1 <= \old(handle)) && \old(client) <= 2) && __ste_client_idCounter0 <= 2147483647) && client <= 1) && \old(msg) == msg) && \old(msg) == msg) && 2 <= \old(client)) && \old(msg) <= 1) && 1 <= \old(client)) && 1 <= queue_empty) && 2 <= client) && 0 <= retValue_acc + 2147483648) && 0 <= queued_message) && 0 <= __ste_email_isSignatureVerified1) && 0 <= tmp + 2147483648) && msg == __utac__ad__arg1) && 1 <= \old(msg)) && 1 <= msg) && 0 <= \result + 2147483648) && 0 <= queued_client) && 0 <= __ste_email_isSignatureVerified0) && client == \old(client)) && msg <= 1) && tmp <= 2147483647) && 1 <= \old(msg)) && \old(msg) <= 1) && retValue_acc <= 2147483647) && msg <= 1) && 1 <= \old(msg)) && \old(msg) <= 1) && \old(client) <= 2) && 1 <= handle) && 0 <= __ste_client_idCounter0 + 2147483648) && 2 <= __ste_email_to0) && __ste_email_to0 <= 2) && 1 <= client) && msg == \old(msg)) && queued_client <= 0)) && !(tmp == 0) - InvariantResult [Line: 2590]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2907]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2879]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2840]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2623]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2893]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 112]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\old(__ste_email_isSignatureVerified0) <= 0) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_email_signKey1 <= 0)) || !(__ste_client_autoResponse2 == 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_client_privateKey1 <= 0)) || !(0 <= __ste_client_privateKey1)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_client_privateKey0 <= 2147483647)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__ste_email_isSigned0 <= 1)) || !(__SELECTED_FEATURE_Forward == 0)) || !(0 <= \old(__ste_email_isSignatureVerified1))) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned0)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(0 <= \old(__ste_email_isSignatureVerified0))) || !(__ste_client_outbuffer3 == 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(\old(__ste_email_isSignatureVerified1) <= 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(0 <= __ste_email_signKey0 + 2147483648)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned1)) || !(__ste_email_subject1 == 0)) || !(__ste_client_autoResponse1 == 0)) || !(__ste_email_isSigned1 <= 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_forwardReceiver3 == 0)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_privateKey0 + 2147483648)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_autoResponse0 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_signKey0 <= 2147483647)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0)) && ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((!(\old(__ste_email_isSignatureVerified0) <= 0) || !(__ste_Client_AddressBook1_Address2 == 0)) || !(0 <= \old(queued_message))) || !(0 <= \old(__ste_email_from0))) || !(__ste_email_signKey1 <= 0)) || !(__ste_client_name2 == 0)) || !(__ste_Client_AddressBook1_Alias1 == 0)) || !(rjh == 2)) || !(__ste_client_privateKey2 <= 789)) || !(__ste_ClientAddressBook_size1 == 0)) || !(0 == __ste_Client_AddressBook0_Address0)) || !(#NULL == 0)) || !(__ste_Client_counter == 0)) || !(0 == __ste_Client_AddressBook0_Address1)) || !(bob == 1)) || !(\old(queued_message) <= 0)) || !(__ste_Client_Keyring1_PublicKey1 == 0)) || !(__ste_client_name2 == 0)) || !(\old(queued_client) <= 0)) || !(__ste_ClientAddressBook_size2 == 0)) || !(__SELECTED_FEATURE_AddressBook == 0)) || !(__ste_Client_AddressBook0_Alias2 == 0)) || !(__ste_email_id0 == 0)) || !(__SELECTED_FEATURE_Keys == 0)) || !(__ste_Client_AddressBook2_Address0 == 0)) || !(__ste_Client_Keyring0_User2 == 0)) || !(__ste_Client_AddressBook2_Alias2 == 0)) || !(__ste_client_privateKey0 <= 2147483647)) || !(__ste_email_encryptionKey0 == 0)) || !(__ste_Client_Keyring0_User0 == 0)) || !(__ste_client_name0 == 0)) || !(__ste_Client_AddressBook2_Address1 == 0)) || !(__GUIDSL_ROOT_PRODUCTION == 0)) || !(__ste_email_isSigned0 <= 1)) || !(__SELECTED_FEATURE_Forward == 0)) || !(0 <= \old(__ste_email_isSignatureVerified1))) || !(__ste_email_body1 == 0)) || !(__GUIDSL_NON_TERMINAL_main == 0)) || !(\old(client) <= 1)) || !(__ste_Client_Keyring1_PublicKey2 == 0)) || !(__ste_client_outbuffer0 == 0)) || !(0 == __ste_Client_AddressBook0_Address2)) || !(__ste_client_forwardReceiver0 == 0)) || !(__ste_email_body1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_Client_Keyring1_User0 == 0)) || !(__ste_email_isEncrypted1 == 0)) || !(__ste_Client_AddressBook1_Alias0 == 0)) || !(head == 0)) || !(__ste_email_id1 == 0)) || !(__ste_client_forwardReceiver2 == 0)) || !(789 <= __ste_client_privateKey2)) || !(__ste_client_outbuffer1 == 0)) || !(__ste_ClientKeyring_size0 == 0)) || !(\old(__ste_email_to0) <= 2)) || !(__SELECTED_FEATURE_Sign == 0)) || !(0 <= __ste_email_signKey1)) || !(0 <= \old(queued_client))) || !(__ste_Client_AddressBook2_Alias1 == 0)) || !(__ste_Client_Keyring1_User1 == 0)) || !(__ste_Client_Keyring2_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned0)) || !(0 <= __ste_client_autoResponse2)) || !(__ste_Client_AddressBook0_Alias0 == 0)) || !(0 <= \old(__ste_email_isSignatureVerified0))) || !(__ste_client_outbuffer3 == 0)) || !(__ste_client_autoResponse0 <= 0)) || !(__ste_Client_Keyring2_PublicKey1 == 0)) || !(__SELECTED_FEATURE_Base == 0)) || !(1 <= \old(client))) || !(__ste_email_encryptionKey1 == 0)) || !(__ste_email_subject0 == 0)) || !(__ste_Client_AddressBook1_Alias2 == 0)) || !(__ste_Client_Keyring1_PublicKey0 == 0)) || !(#NULL == 0)) || !(__ste_Client_Keyring0_PublicKey1 == 0)) || !(\old(__ste_email_isSignatureVerified1) <= 0)) || !(__ste_Client_Keyring0_User1 == 0)) || !(__ste_Client_Keyring2_User1 == 0)) || !(0 <= __ste_email_signKey0 + 2147483648)) || !(__ste_Client_Keyring0_PublicKey0 == 0)) || !(0 <= __ste_email_isSigned1)) || !(__ste_email_subject1 == 0)) || !(__ste_email_isSigned1 <= 0)) || !(__ste_Client_AddressBook2_Address2 == 0)) || !(__ste_client_name1 == 0)) || !(__ste_email_body0 == 0)) || !(__ste_ClientKeyring_size2 == 0)) || !(__ste_Client_AddressBook1_Address1 == 0)) || !(__SELECTED_FEATURE_Decrypt == 0)) || !(\old(queue_empty) <= 1)) || !(__ste_client_name0 == 0)) || !(3 == chuck)) || !(__ste_client_idCounter2 <= 3)) || !(__ste_Client_AddressBook1_Address0 == 0)) || !(2 <= \old(__ste_email_to0))) || !(__SELECTED_FEATURE_Verify == 0)) || !(0 <= unknown-#StackHeapBarrier-unknown)) || !(__ste_Client_Keyring2_User2 == 0)) || !(__SELECTED_FEATURE_AutoResponder == 0)) || !(\old(msg) <= 1)) || !(1 <= \old(queue_empty))) || !(\old(__ste_email_from0) <= 0)) || !(__ste_client_autoResponse2 <= 0)) || !(__ste_ClientAddressBook_size0 == 0)) || !(__ste_client_autoResponse1 <= 1)) || !(__ste_client_forwardReceiver3 == 0)) || !(0 <= __ste_client_autoResponse1)) || !(__ste_client_forwardReceiver1 == 0)) || !(__ste_Client_Keyring1_User2 == 0)) || !(0 <= __ste_client_autoResponse0)) || !(0 <= __ste_client_privateKey0 + 2147483648)) || !(__ste_client_outbuffer2 == 0)) || !(__ste_email_isEncrypted0 == 0)) || !(__ste_Client_Keyring2_User0 == 0)) || !(__ste_Client_Keyring2_PublicKey2 == 0)) || !(__SELECTED_FEATURE_Encrypt == 0)) || !(__ste_client_name1 == 0)) || !(__ste_Client_AddressBook2_Alias0 == 0)) || !(head == 0)) || !(__ste_Client_AddressBook0_Alias1 == 0)) || !(__ste_Email_counter == 0)) || !(1 <= \old(msg))) || !(3 <= __ste_client_idCounter2)) || !(__ste_email_signKey0 <= 2147483647)) || !(__ste_email_subject1 == 0)) || !(0 == __ste_email_subject0)) || !(__ste_Client_Keyring0_PublicKey2 == 0)) || !(__ste_ClientKeyring_size1 == 0))) || ((((((((queued_message == \old(queued_message) && __ste_email_to0 == \old(__ste_email_to0)) && __ste_email_to1 == \old(__ste_email_to1)) && \old(__ste_email_from0) == __ste_email_from0) && __ste_email_isSignatureVerified0 == \old(__ste_email_isSignatureVerified0)) && \old(__ste_email_from1) == __ste_email_from1) && \old(queue_empty) == queue_empty) && queued_client == \old(queued_client)) && __ste_email_isSignatureVerified1 == \old(__ste_email_isSignatureVerified1)) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2723]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2802]: Loop Invariant Derived loop invariant: tmp == 1 && op2 == 0 - InvariantResult [Line: 124]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2865]: Loop Invariant Derived loop invariant: tmp == 1 - InvariantResult [Line: 2775]: Loop Invariant Derived loop invariant: tmp == 1 RESULT: Ultimate proved your program to be correct! [2022-12-14 06:20:25,664 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87d9f242-d09e-4422-b6fc-61db52fc4ce5/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE