./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/openbsd_cstrcpy-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/openbsd_cstrcpy-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4b6873ae1a0d665798beb3dd9c0c48e89806da7dd46f1d2066800a52e0a2aa51 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 15:50:52,761 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 15:50:52,763 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 15:50:52,779 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 15:50:52,780 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 15:50:52,781 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 15:50:52,782 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 15:50:52,783 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 15:50:52,785 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 15:50:52,785 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 15:50:52,786 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 15:50:52,787 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 15:50:52,787 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 15:50:52,788 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 15:50:52,789 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 15:50:52,790 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 15:50:52,791 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 15:50:52,792 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 15:50:52,793 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 15:50:52,795 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 15:50:52,796 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 15:50:52,797 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 15:50:52,798 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 15:50:52,799 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 15:50:52,802 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 15:50:52,802 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 15:50:52,803 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 15:50:52,803 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 15:50:52,804 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 15:50:52,805 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 15:50:52,805 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 15:50:52,805 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 15:50:52,806 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 15:50:52,807 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 15:50:52,808 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 15:50:52,808 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 15:50:52,809 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 15:50:52,809 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 15:50:52,809 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 15:50:52,810 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 15:50:52,810 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 15:50:52,811 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-12-14 15:50:52,831 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 15:50:52,831 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 15:50:52,831 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 15:50:52,832 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 15:50:52,832 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 15:50:52,832 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 15:50:52,833 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 15:50:52,833 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 15:50:52,833 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 15:50:52,833 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 15:50:52,833 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 15:50:52,833 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 15:50:52,834 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 15:50:52,834 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 15:50:52,834 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 15:50:52,834 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 15:50:52,834 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 15:50:52,834 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 15:50:52,835 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-14 15:50:52,835 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-14 15:50:52,835 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 15:50:52,836 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 15:50:52,836 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-12-14 15:50:52,836 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 15:50:52,836 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 15:50:52,836 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 15:50:52,836 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-12-14 15:50:52,836 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-12-14 15:50:52,837 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-12-14 15:50:52,837 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 15:50:52,837 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-12-14 15:50:52,837 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 15:50:52,837 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 15:50:52,837 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 15:50:52,837 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 15:50:52,838 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 15:50:52,838 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 15:50:52,838 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 15:50:52,838 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 15:50:52,838 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 15:50:52,838 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 15:50:52,839 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 15:50:52,839 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4b6873ae1a0d665798beb3dd9c0c48e89806da7dd46f1d2066800a52e0a2aa51 [2022-12-14 15:50:53,023 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 15:50:53,039 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 15:50:53,041 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 15:50:53,042 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 15:50:53,042 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 15:50:53,043 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/array-memsafety/openbsd_cstrcpy-alloca-2.i [2022-12-14 15:50:55,675 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 15:50:55,852 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 15:50:55,852 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/sv-benchmarks/c/array-memsafety/openbsd_cstrcpy-alloca-2.i [2022-12-14 15:50:55,861 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/data/084ce896a/054932a5d25c4711ae746af9a8234234/FLAG7660d6f89 [2022-12-14 15:50:55,871 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/data/084ce896a/054932a5d25c4711ae746af9a8234234 [2022-12-14 15:50:55,873 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 15:50:55,874 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 15:50:55,875 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 15:50:55,875 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 15:50:55,878 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 15:50:55,879 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 03:50:55" (1/1) ... [2022-12-14 15:50:55,880 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@67d4335f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:50:55, skipping insertion in model container [2022-12-14 15:50:55,880 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 03:50:55" (1/1) ... [2022-12-14 15:50:55,886 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 15:50:55,907 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 15:50:56,078 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 15:50:56,087 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 15:50:56,113 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 15:50:56,129 INFO L208 MainTranslator]: Completed translation [2022-12-14 15:50:56,130 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:50:56 WrapperNode [2022-12-14 15:50:56,130 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 15:50:56,130 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 15:50:56,131 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 15:50:56,131 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 15:50:56,136 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:50:56" (1/1) ... [2022-12-14 15:50:56,144 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:50:56" (1/1) ... [2022-12-14 15:50:56,158 INFO L138 Inliner]: procedures = 117, calls = 13, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 65 [2022-12-14 15:50:56,158 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 15:50:56,159 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 15:50:56,159 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 15:50:56,159 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 15:50:56,165 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:50:56" (1/1) ... [2022-12-14 15:50:56,165 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:50:56" (1/1) ... [2022-12-14 15:50:56,167 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:50:56" (1/1) ... [2022-12-14 15:50:56,168 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:50:56" (1/1) ... [2022-12-14 15:50:56,171 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:50:56" (1/1) ... [2022-12-14 15:50:56,174 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:50:56" (1/1) ... [2022-12-14 15:50:56,175 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:50:56" (1/1) ... [2022-12-14 15:50:56,175 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:50:56" (1/1) ... [2022-12-14 15:50:56,177 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 15:50:56,177 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 15:50:56,177 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 15:50:56,177 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 15:50:56,178 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:50:56" (1/1) ... [2022-12-14 15:50:56,183 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 15:50:56,191 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:50:56,202 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 15:50:56,204 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 15:50:56,236 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-12-14 15:50:56,236 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-12-14 15:50:56,237 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-12-14 15:50:56,237 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-12-14 15:50:56,237 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 15:50:56,237 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 15:50:56,317 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 15:50:56,319 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 15:50:56,465 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 15:50:56,527 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 15:50:56,527 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-12-14 15:50:56,529 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 03:50:56 BoogieIcfgContainer [2022-12-14 15:50:56,529 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 15:50:56,532 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 15:50:56,532 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 15:50:56,535 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 15:50:56,535 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 03:50:55" (1/3) ... [2022-12-14 15:50:56,536 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@59d8eacb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 03:50:56, skipping insertion in model container [2022-12-14 15:50:56,536 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:50:56" (2/3) ... [2022-12-14 15:50:56,537 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@59d8eacb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 03:50:56, skipping insertion in model container [2022-12-14 15:50:56,537 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 03:50:56" (3/3) ... [2022-12-14 15:50:56,538 INFO L112 eAbstractionObserver]: Analyzing ICFG openbsd_cstrcpy-alloca-2.i [2022-12-14 15:50:56,557 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 15:50:56,557 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 9 error locations. [2022-12-14 15:50:56,591 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 15:50:56,596 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6e975faa, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 15:50:56,596 INFO L358 AbstractCegarLoop]: Starting to check reachability of 9 error locations. [2022-12-14 15:50:56,599 INFO L276 IsEmpty]: Start isEmpty. Operand has 20 states, 10 states have (on average 2.3) internal successors, (23), 19 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:56,603 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-12-14 15:50:56,603 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:50:56,604 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-12-14 15:50:56,604 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr8ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:50:56,608 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:50:56,608 INFO L85 PathProgramCache]: Analyzing trace with hash 105340, now seen corresponding path program 1 times [2022-12-14 15:50:56,615 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:50:56,615 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1200461346] [2022-12-14 15:50:56,615 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:50:56,616 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:50:56,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:50:56,726 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:50:56,727 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:50:56,727 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1200461346] [2022-12-14 15:50:56,727 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1200461346] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:50:56,728 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:50:56,728 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-12-14 15:50:56,729 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [499366726] [2022-12-14 15:50:56,729 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:50:56,733 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 15:50:56,733 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:50:56,755 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 15:50:56,755 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 15:50:56,757 INFO L87 Difference]: Start difference. First operand has 20 states, 10 states have (on average 2.3) internal successors, (23), 19 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:56,797 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:50:56,797 INFO L93 Difference]: Finished difference Result 21 states and 23 transitions. [2022-12-14 15:50:56,798 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 15:50:56,799 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-12-14 15:50:56,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:50:56,804 INFO L225 Difference]: With dead ends: 21 [2022-12-14 15:50:56,805 INFO L226 Difference]: Without dead ends: 19 [2022-12-14 15:50:56,806 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 15:50:56,808 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 1 mSDsluCounter, 6 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 20 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:50:56,809 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 20 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:50:56,821 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2022-12-14 15:50:56,828 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 19. [2022-12-14 15:50:56,829 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 10 states have (on average 2.0) internal successors, (20), 18 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:56,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 20 transitions. [2022-12-14 15:50:56,830 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 20 transitions. Word has length 3 [2022-12-14 15:50:56,830 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:50:56,830 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 20 transitions. [2022-12-14 15:50:56,831 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:56,831 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 20 transitions. [2022-12-14 15:50:56,831 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-12-14 15:50:56,831 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:50:56,831 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-12-14 15:50:56,831 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 15:50:56,832 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:50:56,832 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:50:56,832 INFO L85 PathProgramCache]: Analyzing trace with hash 3267810, now seen corresponding path program 1 times [2022-12-14 15:50:56,833 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:50:56,833 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [432516106] [2022-12-14 15:50:56,833 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:50:56,833 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:50:56,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:50:56,916 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:50:56,916 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:50:56,917 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [432516106] [2022-12-14 15:50:56,917 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [432516106] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:50:56,917 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:50:56,917 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 15:50:56,917 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2028477995] [2022-12-14 15:50:56,917 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:50:56,918 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 15:50:56,918 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:50:56,919 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 15:50:56,919 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 15:50:56,919 INFO L87 Difference]: Start difference. First operand 19 states and 20 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:56,941 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:50:56,941 INFO L93 Difference]: Finished difference Result 17 states and 18 transitions. [2022-12-14 15:50:56,941 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 15:50:56,941 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-12-14 15:50:56,941 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:50:56,942 INFO L225 Difference]: With dead ends: 17 [2022-12-14 15:50:56,942 INFO L226 Difference]: Without dead ends: 17 [2022-12-14 15:50:56,942 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 15:50:56,943 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 13 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 6 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:50:56,943 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [13 Valid, 6 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:50:56,944 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17 states. [2022-12-14 15:50:56,945 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17 to 17. [2022-12-14 15:50:56,945 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17 states, 10 states have (on average 1.8) internal successors, (18), 16 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:56,945 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 18 transitions. [2022-12-14 15:50:56,945 INFO L78 Accepts]: Start accepts. Automaton has 17 states and 18 transitions. Word has length 4 [2022-12-14 15:50:56,946 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:50:56,946 INFO L495 AbstractCegarLoop]: Abstraction has 17 states and 18 transitions. [2022-12-14 15:50:56,946 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:56,946 INFO L276 IsEmpty]: Start isEmpty. Operand 17 states and 18 transitions. [2022-12-14 15:50:56,946 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-12-14 15:50:56,946 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:50:56,947 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-12-14 15:50:56,947 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-14 15:50:56,947 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:50:56,947 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:50:56,947 INFO L85 PathProgramCache]: Analyzing trace with hash 3267811, now seen corresponding path program 1 times [2022-12-14 15:50:56,948 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:50:56,948 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1416023335] [2022-12-14 15:50:56,948 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:50:56,948 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:50:56,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:50:57,168 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:50:57,169 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:50:57,169 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1416023335] [2022-12-14 15:50:57,169 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1416023335] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:50:57,169 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:50:57,169 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 15:50:57,170 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1283150970] [2022-12-14 15:50:57,170 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:50:57,170 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 15:50:57,170 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:50:57,171 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 15:50:57,171 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-12-14 15:50:57,171 INFO L87 Difference]: Start difference. First operand 17 states and 18 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:57,223 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:50:57,223 INFO L93 Difference]: Finished difference Result 31 states and 33 transitions. [2022-12-14 15:50:57,224 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 15:50:57,224 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-12-14 15:50:57,224 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:50:57,225 INFO L225 Difference]: With dead ends: 31 [2022-12-14 15:50:57,225 INFO L226 Difference]: Without dead ends: 31 [2022-12-14 15:50:57,226 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-12-14 15:50:57,227 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 41 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 8 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:50:57,227 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 8 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:50:57,228 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31 states. [2022-12-14 15:50:57,230 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31 to 19. [2022-12-14 15:50:57,230 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 12 states have (on average 1.75) internal successors, (21), 18 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:57,230 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 21 transitions. [2022-12-14 15:50:57,230 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 21 transitions. Word has length 4 [2022-12-14 15:50:57,230 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:50:57,231 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 21 transitions. [2022-12-14 15:50:57,231 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:57,231 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 21 transitions. [2022-12-14 15:50:57,231 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-12-14 15:50:57,231 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:50:57,231 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-12-14 15:50:57,232 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-14 15:50:57,232 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:50:57,232 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:50:57,232 INFO L85 PathProgramCache]: Analyzing trace with hash 3266345, now seen corresponding path program 1 times [2022-12-14 15:50:57,233 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:50:57,233 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1413743880] [2022-12-14 15:50:57,233 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:50:57,233 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:50:57,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:50:57,375 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:50:57,376 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:50:57,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1413743880] [2022-12-14 15:50:57,376 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1413743880] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:50:57,376 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:50:57,376 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 15:50:57,376 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [39093617] [2022-12-14 15:50:57,376 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:50:57,377 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 15:50:57,377 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:50:57,377 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 15:50:57,378 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-12-14 15:50:57,378 INFO L87 Difference]: Start difference. First operand 19 states and 21 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:57,440 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:50:57,440 INFO L93 Difference]: Finished difference Result 30 states and 32 transitions. [2022-12-14 15:50:57,440 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 15:50:57,440 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-12-14 15:50:57,440 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:50:57,441 INFO L225 Difference]: With dead ends: 30 [2022-12-14 15:50:57,441 INFO L226 Difference]: Without dead ends: 30 [2022-12-14 15:50:57,442 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-12-14 15:50:57,442 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 30 mSDsluCounter, 8 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 40 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:50:57,443 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [30 Valid, 13 Invalid, 40 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:50:57,443 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30 states. [2022-12-14 15:50:57,444 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30 to 20. [2022-12-14 15:50:57,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 13 states have (on average 1.6923076923076923) internal successors, (22), 19 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:57,445 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 22 transitions. [2022-12-14 15:50:57,445 INFO L78 Accepts]: Start accepts. Automaton has 20 states and 22 transitions. Word has length 4 [2022-12-14 15:50:57,445 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:50:57,445 INFO L495 AbstractCegarLoop]: Abstraction has 20 states and 22 transitions. [2022-12-14 15:50:57,445 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:57,445 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 22 transitions. [2022-12-14 15:50:57,446 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-12-14 15:50:57,446 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:50:57,446 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-12-14 15:50:57,446 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-14 15:50:57,446 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr4REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:50:57,447 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:50:57,447 INFO L85 PathProgramCache]: Analyzing trace with hash 101303240, now seen corresponding path program 1 times [2022-12-14 15:50:57,447 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:50:57,447 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1028816987] [2022-12-14 15:50:57,447 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:50:57,447 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:50:57,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:50:57,477 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:50:57,478 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:50:57,478 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1028816987] [2022-12-14 15:50:57,478 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1028816987] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:50:57,478 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:50:57,478 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 15:50:57,478 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [5014921] [2022-12-14 15:50:57,478 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:50:57,479 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 15:50:57,479 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:50:57,479 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 15:50:57,480 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 15:50:57,480 INFO L87 Difference]: Start difference. First operand 20 states and 22 transitions. Second operand has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:57,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:50:57,496 INFO L93 Difference]: Finished difference Result 19 states and 21 transitions. [2022-12-14 15:50:57,497 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 15:50:57,497 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-12-14 15:50:57,497 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:50:57,497 INFO L225 Difference]: With dead ends: 19 [2022-12-14 15:50:57,498 INFO L226 Difference]: Without dead ends: 19 [2022-12-14 15:50:57,498 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 15:50:57,499 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 6 mSDsluCounter, 3 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6 SdHoareTripleChecker+Valid, 10 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:50:57,500 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [6 Valid, 10 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:50:57,500 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2022-12-14 15:50:57,501 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 19. [2022-12-14 15:50:57,501 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 13 states have (on average 1.6153846153846154) internal successors, (21), 18 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:57,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 21 transitions. [2022-12-14 15:50:57,501 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 21 transitions. Word has length 5 [2022-12-14 15:50:57,502 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:50:57,502 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 21 transitions. [2022-12-14 15:50:57,502 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:57,502 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 21 transitions. [2022-12-14 15:50:57,502 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-12-14 15:50:57,502 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:50:57,502 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-12-14 15:50:57,502 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-14 15:50:57,503 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:50:57,503 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:50:57,503 INFO L85 PathProgramCache]: Analyzing trace with hash 101303241, now seen corresponding path program 1 times [2022-12-14 15:50:57,503 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:50:57,503 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2018849078] [2022-12-14 15:50:57,504 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:50:57,504 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:50:57,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:50:57,579 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:50:57,579 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:50:57,580 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2018849078] [2022-12-14 15:50:57,580 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2018849078] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:50:57,580 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:50:57,580 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 15:50:57,580 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1153059162] [2022-12-14 15:50:57,580 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:50:57,580 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 15:50:57,581 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:50:57,581 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 15:50:57,581 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 15:50:57,581 INFO L87 Difference]: Start difference. First operand 19 states and 21 transitions. Second operand has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:57,613 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:50:57,614 INFO L93 Difference]: Finished difference Result 27 states and 29 transitions. [2022-12-14 15:50:57,614 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 15:50:57,614 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-12-14 15:50:57,614 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:50:57,615 INFO L225 Difference]: With dead ends: 27 [2022-12-14 15:50:57,615 INFO L226 Difference]: Without dead ends: 27 [2022-12-14 15:50:57,615 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 15:50:57,616 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 29 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 10 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:50:57,616 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [29 Valid, 10 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:50:57,617 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27 states. [2022-12-14 15:50:57,618 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27 to 20. [2022-12-14 15:50:57,619 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 14 states have (on average 1.5714285714285714) internal successors, (22), 19 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:57,619 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 22 transitions. [2022-12-14 15:50:57,619 INFO L78 Accepts]: Start accepts. Automaton has 20 states and 22 transitions. Word has length 5 [2022-12-14 15:50:57,619 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:50:57,619 INFO L495 AbstractCegarLoop]: Abstraction has 20 states and 22 transitions. [2022-12-14 15:50:57,620 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:57,620 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 22 transitions. [2022-12-14 15:50:57,620 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-12-14 15:50:57,620 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:50:57,620 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-12-14 15:50:57,620 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-14 15:50:57,621 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr6REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:50:57,621 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:50:57,621 INFO L85 PathProgramCache]: Analyzing trace with hash -1154566839, now seen corresponding path program 1 times [2022-12-14 15:50:57,621 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:50:57,621 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [557096351] [2022-12-14 15:50:57,622 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:50:57,622 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:50:57,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:50:57,742 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:50:57,742 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:50:57,742 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [557096351] [2022-12-14 15:50:57,743 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [557096351] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:50:57,743 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:50:57,743 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 15:50:57,743 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [757827415] [2022-12-14 15:50:57,743 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:50:57,743 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 15:50:57,744 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:50:57,744 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 15:50:57,744 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 15:50:57,749 INFO L87 Difference]: Start difference. First operand 20 states and 22 transitions. Second operand has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:57,778 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:50:57,779 INFO L93 Difference]: Finished difference Result 19 states and 21 transitions. [2022-12-14 15:50:57,779 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 15:50:57,779 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-12-14 15:50:57,779 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:50:57,780 INFO L225 Difference]: With dead ends: 19 [2022-12-14 15:50:57,780 INFO L226 Difference]: Without dead ends: 19 [2022-12-14 15:50:57,780 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 15:50:57,781 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 15 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 6 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:50:57,781 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 6 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:50:57,782 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2022-12-14 15:50:57,783 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 19. [2022-12-14 15:50:57,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 14 states have (on average 1.5) internal successors, (21), 18 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:57,784 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 21 transitions. [2022-12-14 15:50:57,784 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 21 transitions. Word has length 6 [2022-12-14 15:50:57,784 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:50:57,784 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 21 transitions. [2022-12-14 15:50:57,785 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:57,785 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 21 transitions. [2022-12-14 15:50:57,785 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-12-14 15:50:57,785 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:50:57,785 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-12-14 15:50:57,785 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-12-14 15:50:57,786 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:50:57,786 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:50:57,786 INFO L85 PathProgramCache]: Analyzing trace with hash -1154566838, now seen corresponding path program 1 times [2022-12-14 15:50:57,786 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:50:57,786 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [56307444] [2022-12-14 15:50:57,787 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:50:57,787 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:50:57,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:50:57,945 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:50:57,945 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:50:57,945 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [56307444] [2022-12-14 15:50:57,946 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [56307444] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:50:57,946 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:50:57,946 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 15:50:57,946 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1279306438] [2022-12-14 15:50:57,946 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:50:57,946 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 15:50:57,946 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:50:57,947 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 15:50:57,947 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 15:50:57,947 INFO L87 Difference]: Start difference. First operand 19 states and 21 transitions. Second operand has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:57,996 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:50:57,996 INFO L93 Difference]: Finished difference Result 24 states and 26 transitions. [2022-12-14 15:50:57,997 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 15:50:57,997 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-12-14 15:50:57,997 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:50:57,997 INFO L225 Difference]: With dead ends: 24 [2022-12-14 15:50:57,998 INFO L226 Difference]: Without dead ends: 24 [2022-12-14 15:50:57,998 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-14 15:50:57,999 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 44 mSDsluCounter, 3 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 6 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:50:57,999 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 6 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:50:58,000 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24 states. [2022-12-14 15:50:58,001 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24 to 20. [2022-12-14 15:50:58,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 15 states have (on average 1.4666666666666666) internal successors, (22), 19 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:58,001 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 22 transitions. [2022-12-14 15:50:58,002 INFO L78 Accepts]: Start accepts. Automaton has 20 states and 22 transitions. Word has length 6 [2022-12-14 15:50:58,002 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:50:58,002 INFO L495 AbstractCegarLoop]: Abstraction has 20 states and 22 transitions. [2022-12-14 15:50:58,002 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:58,002 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 22 transitions. [2022-12-14 15:50:58,002 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-12-14 15:50:58,003 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:50:58,003 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-12-14 15:50:58,003 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-12-14 15:50:58,003 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:50:58,003 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:50:58,004 INFO L85 PathProgramCache]: Analyzing trace with hash -1155969939, now seen corresponding path program 1 times [2022-12-14 15:50:58,004 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:50:58,004 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1158922976] [2022-12-14 15:50:58,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:50:58,004 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:50:58,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:50:58,200 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:50:58,200 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:50:58,201 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1158922976] [2022-12-14 15:50:58,201 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1158922976] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:50:58,201 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [217623581] [2022-12-14 15:50:58,201 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:50:58,201 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:50:58,201 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:50:58,202 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:50:58,203 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 15:50:58,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:50:58,251 INFO L263 TraceCheckSpWp]: Trace formula consists of 66 conjuncts, 15 conjunts are in the unsatisfiable core [2022-12-14 15:50:58,255 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:50:58,315 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-12-14 15:50:58,316 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 15:50:58,438 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:50:58,438 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:50:58,598 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:50:58,598 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [217623581] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:50:58,598 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [961891571] [2022-12-14 15:50:58,613 INFO L159 IcfgInterpreter]: Started Sifa with 6 locations of interest [2022-12-14 15:50:58,613 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:50:58,617 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:50:58,621 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:50:58,622 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:50:58,681 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:50:58,685 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:50:58,717 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:50:58,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:50:58,828 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:50:58,859 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:50:59,228 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '450#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (not (< (+ |ULTIMATE.start_main_~i~0#1| 1) |ULTIMATE.start_main_~length2~0#1|)) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (not (<= (+ |ULTIMATE.start_main_~length2~0#1| |ULTIMATE.start_main_~nondetString~0#1.offset|) (select |#length| |ULTIMATE.start_main_~nondetString~0#1.base|))) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:50:59,228 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:50:59,229 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:50:59,229 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 13 [2022-12-14 15:50:59,229 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [412686916] [2022-12-14 15:50:59,229 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:50:59,229 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-12-14 15:50:59,229 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:50:59,230 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-12-14 15:50:59,230 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=74, Invalid=268, Unknown=0, NotChecked=0, Total=342 [2022-12-14 15:50:59,230 INFO L87 Difference]: Start difference. First operand 20 states and 22 transitions. Second operand has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:59,547 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:50:59,547 INFO L93 Difference]: Finished difference Result 29 states and 31 transitions. [2022-12-14 15:50:59,547 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-14 15:50:59,547 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-12-14 15:50:59,547 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:50:59,548 INFO L225 Difference]: With dead ends: 29 [2022-12-14 15:50:59,548 INFO L226 Difference]: Without dead ends: 29 [2022-12-14 15:50:59,548 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 136 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=143, Invalid=507, Unknown=0, NotChecked=0, Total=650 [2022-12-14 15:50:59,549 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 97 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 99 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 97 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 106 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 99 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:50:59,549 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [97 Valid, 19 Invalid, 106 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 99 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:50:59,550 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-12-14 15:50:59,551 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 18. [2022-12-14 15:50:59,551 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18 states, 14 states have (on average 1.4285714285714286) internal successors, (20), 17 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:59,551 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 20 transitions. [2022-12-14 15:50:59,551 INFO L78 Accepts]: Start accepts. Automaton has 18 states and 20 transitions. Word has length 6 [2022-12-14 15:50:59,551 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:50:59,552 INFO L495 AbstractCegarLoop]: Abstraction has 18 states and 20 transitions. [2022-12-14 15:50:59,552 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:50:59,552 INFO L276 IsEmpty]: Start isEmpty. Operand 18 states and 20 transitions. [2022-12-14 15:50:59,552 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-12-14 15:50:59,552 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:50:59,552 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-12-14 15:50:59,558 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 15:50:59,753 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2022-12-14 15:50:59,753 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:50:59,754 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:50:59,754 INFO L85 PathProgramCache]: Analyzing trace with hash -1155971405, now seen corresponding path program 1 times [2022-12-14 15:50:59,755 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:50:59,755 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [366032892] [2022-12-14 15:50:59,755 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:50:59,756 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:50:59,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:50:59,983 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:50:59,984 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:50:59,984 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [366032892] [2022-12-14 15:50:59,984 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [366032892] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:50:59,984 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [154658311] [2022-12-14 15:50:59,984 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:50:59,984 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:50:59,984 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:50:59,985 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:50:59,986 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 15:51:00,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:00,029 INFO L263 TraceCheckSpWp]: Trace formula consists of 68 conjuncts, 17 conjunts are in the unsatisfiable core [2022-12-14 15:51:00,030 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:00,067 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-12-14 15:51:00,067 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 15:51:00,182 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:00,183 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:00,279 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:00,279 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [154658311] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:00,279 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1910598367] [2022-12-14 15:51:00,281 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-12-14 15:51:00,281 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:00,281 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:00,282 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:00,282 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:00,313 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:00,316 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:00,359 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:00,399 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:00,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:00,436 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:00,675 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '560#(and (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet10#1| 127) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet10#1|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (not (<= (+ |ULTIMATE.start_main_~i~0#1| |ULTIMATE.start_main_~nondetString~0#1.offset| 1) (select |#length| |ULTIMATE.start_main_~nondetString~0#1.base|))) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:00,675 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:00,675 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:00,675 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 12 [2022-12-14 15:51:00,675 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1809613093] [2022-12-14 15:51:00,675 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:00,676 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-12-14 15:51:00,676 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:00,676 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-12-14 15:51:00,676 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=75, Invalid=231, Unknown=0, NotChecked=0, Total=306 [2022-12-14 15:51:00,676 INFO L87 Difference]: Start difference. First operand 18 states and 20 transitions. Second operand has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:00,870 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:00,870 INFO L93 Difference]: Finished difference Result 40 states and 43 transitions. [2022-12-14 15:51:00,870 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-14 15:51:00,870 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-12-14 15:51:00,870 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:00,871 INFO L225 Difference]: With dead ends: 40 [2022-12-14 15:51:00,871 INFO L226 Difference]: Without dead ends: 40 [2022-12-14 15:51:00,871 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 71 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=110, Invalid=310, Unknown=0, NotChecked=0, Total=420 [2022-12-14 15:51:00,871 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 51 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 134 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 26 SdHoareTripleChecker+Invalid, 136 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 134 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:00,872 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 26 Invalid, 136 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 134 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:51:00,872 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40 states. [2022-12-14 15:51:00,873 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40 to 15. [2022-12-14 15:51:00,873 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 12 states have (on average 1.3333333333333333) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:00,873 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 16 transitions. [2022-12-14 15:51:00,873 INFO L78 Accepts]: Start accepts. Automaton has 15 states and 16 transitions. Word has length 6 [2022-12-14 15:51:00,873 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:00,874 INFO L495 AbstractCegarLoop]: Abstraction has 15 states and 16 transitions. [2022-12-14 15:51:00,874 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:00,874 INFO L276 IsEmpty]: Start isEmpty. Operand 15 states and 16 transitions. [2022-12-14 15:51:00,874 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-12-14 15:51:00,874 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:00,874 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:51:00,878 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-14 15:51:01,075 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-12-14 15:51:01,076 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:01,077 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:01,077 INFO L85 PathProgramCache]: Analyzing trace with hash -1437168656, now seen corresponding path program 1 times [2022-12-14 15:51:01,078 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:01,078 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1004584824] [2022-12-14 15:51:01,078 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:01,078 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:01,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:01,195 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:01,195 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:01,195 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1004584824] [2022-12-14 15:51:01,195 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1004584824] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:51:01,195 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:51:01,195 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-14 15:51:01,195 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1273397450] [2022-12-14 15:51:01,195 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:51:01,195 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 15:51:01,195 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:01,196 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 15:51:01,196 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-14 15:51:01,196 INFO L87 Difference]: Start difference. First operand 15 states and 16 transitions. Second operand has 6 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:01,240 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:01,241 INFO L93 Difference]: Finished difference Result 24 states and 25 transitions. [2022-12-14 15:51:01,241 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 15:51:01,241 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-12-14 15:51:01,241 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:01,241 INFO L225 Difference]: With dead ends: 24 [2022-12-14 15:51:01,241 INFO L226 Difference]: Without dead ends: 24 [2022-12-14 15:51:01,242 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-12-14 15:51:01,242 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 18 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 24 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:01,243 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 24 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:51:01,243 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24 states. [2022-12-14 15:51:01,244 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24 to 20. [2022-12-14 15:51:01,244 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 17 states have (on average 1.2941176470588236) internal successors, (22), 19 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:01,244 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 22 transitions. [2022-12-14 15:51:01,245 INFO L78 Accepts]: Start accepts. Automaton has 20 states and 22 transitions. Word has length 8 [2022-12-14 15:51:01,245 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:01,245 INFO L495 AbstractCegarLoop]: Abstraction has 20 states and 22 transitions. [2022-12-14 15:51:01,245 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:01,245 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 22 transitions. [2022-12-14 15:51:01,245 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-12-14 15:51:01,245 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:01,245 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:51:01,246 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-12-14 15:51:01,246 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr8ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:01,246 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:01,246 INFO L85 PathProgramCache]: Analyzing trace with hash -1602571928, now seen corresponding path program 1 times [2022-12-14 15:51:01,246 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:01,246 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [599036560] [2022-12-14 15:51:01,246 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:01,247 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:01,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:01,349 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:01,350 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:01,350 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [599036560] [2022-12-14 15:51:01,350 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [599036560] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:51:01,350 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:51:01,350 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 15:51:01,350 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [508627013] [2022-12-14 15:51:01,350 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:51:01,350 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 15:51:01,350 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:01,350 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 15:51:01,351 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 15:51:01,351 INFO L87 Difference]: Start difference. First operand 20 states and 22 transitions. Second operand has 4 states, 3 states have (on average 3.0) internal successors, (9), 3 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:01,366 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:01,366 INFO L93 Difference]: Finished difference Result 19 states and 21 transitions. [2022-12-14 15:51:01,367 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 15:51:01,367 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 3 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-12-14 15:51:01,367 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:01,367 INFO L225 Difference]: With dead ends: 19 [2022-12-14 15:51:01,367 INFO L226 Difference]: Without dead ends: 13 [2022-12-14 15:51:01,367 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 1 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 15:51:01,368 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 5 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5 SdHoareTripleChecker+Valid, 8 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:01,368 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5 Valid, 8 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:51:01,368 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13 states. [2022-12-14 15:51:01,369 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13 to 13. [2022-12-14 15:51:01,369 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13 states, 11 states have (on average 1.2727272727272727) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:01,369 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 14 transitions. [2022-12-14 15:51:01,369 INFO L78 Accepts]: Start accepts. Automaton has 13 states and 14 transitions. Word has length 9 [2022-12-14 15:51:01,369 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:01,369 INFO L495 AbstractCegarLoop]: Abstraction has 13 states and 14 transitions. [2022-12-14 15:51:01,369 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 3 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:01,370 INFO L276 IsEmpty]: Start isEmpty. Operand 13 states and 14 transitions. [2022-12-14 15:51:01,370 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-12-14 15:51:01,370 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:01,370 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:51:01,370 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-12-14 15:51:01,370 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:01,370 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:01,370 INFO L85 PathProgramCache]: Analyzing trace with hash -1115216262, now seen corresponding path program 1 times [2022-12-14 15:51:01,370 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:01,370 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [273233487] [2022-12-14 15:51:01,370 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:01,371 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:01,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:01,501 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:01,501 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:01,501 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [273233487] [2022-12-14 15:51:01,501 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [273233487] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:01,501 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1470226702] [2022-12-14 15:51:01,501 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:01,501 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:01,501 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:01,502 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:01,503 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-14 15:51:01,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:01,554 INFO L263 TraceCheckSpWp]: Trace formula consists of 117 conjuncts, 17 conjunts are in the unsatisfiable core [2022-12-14 15:51:01,556 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:01,602 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:01,602 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:01,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 15:51:01,665 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:01,665 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1470226702] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:01,666 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1099828490] [2022-12-14 15:51:01,667 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:01,668 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:01,668 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:01,668 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:01,668 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:01,698 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:01,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:01,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:51:01,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:01,819 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:01,874 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:01,908 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:01,925 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:01,925 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:02,061 INFO L321 Elim1Store]: treesize reduction 169, result has 12.9 percent of original size [2022-12-14 15:51:02,062 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 214 treesize of output 209 [2022-12-14 15:51:02,163 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:02,163 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:02,200 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:02,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:02,208 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:02,717 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '785#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:02,717 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:02,717 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:02,717 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 13 [2022-12-14 15:51:02,717 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1343721662] [2022-12-14 15:51:02,718 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:02,718 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-12-14 15:51:02,718 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:02,718 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-12-14 15:51:02,719 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=79, Invalid=383, Unknown=0, NotChecked=0, Total=462 [2022-12-14 15:51:02,719 INFO L87 Difference]: Start difference. First operand 13 states and 14 transitions. Second operand has 14 states, 13 states have (on average 1.7692307692307692) internal successors, (23), 14 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:02,810 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:02,810 INFO L93 Difference]: Finished difference Result 19 states and 20 transitions. [2022-12-14 15:51:02,810 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-14 15:51:02,810 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.7692307692307692) internal successors, (23), 14 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-12-14 15:51:02,810 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:02,810 INFO L225 Difference]: With dead ends: 19 [2022-12-14 15:51:02,810 INFO L226 Difference]: Without dead ends: 19 [2022-12-14 15:51:02,811 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 12 SyntacticMatches, 2 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 179 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=114, Invalid=536, Unknown=0, NotChecked=0, Total=650 [2022-12-14 15:51:02,811 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 48 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 74 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 77 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 74 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:02,811 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 1 Invalid, 77 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 74 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:51:02,812 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2022-12-14 15:51:02,813 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 15. [2022-12-14 15:51:02,813 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 14 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:02,813 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 16 transitions. [2022-12-14 15:51:02,813 INFO L78 Accepts]: Start accepts. Automaton has 15 states and 16 transitions. Word has length 10 [2022-12-14 15:51:02,813 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:02,813 INFO L495 AbstractCegarLoop]: Abstraction has 15 states and 16 transitions. [2022-12-14 15:51:02,814 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.7692307692307692) internal successors, (23), 14 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:02,814 INFO L276 IsEmpty]: Start isEmpty. Operand 15 states and 16 transitions. [2022-12-14 15:51:02,814 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-12-14 15:51:02,814 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:02,814 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:51:02,819 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-14 15:51:03,015 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-12-14 15:51:03,016 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:03,017 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:03,017 INFO L85 PathProgramCache]: Analyzing trace with hash -211965767, now seen corresponding path program 1 times [2022-12-14 15:51:03,017 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:03,018 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1774449560] [2022-12-14 15:51:03,018 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:03,018 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:03,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:03,230 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:03,230 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:03,230 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1774449560] [2022-12-14 15:51:03,230 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1774449560] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:03,230 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1992800726] [2022-12-14 15:51:03,230 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:03,230 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:03,230 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:03,231 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:03,232 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-12-14 15:51:03,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:03,279 INFO L263 TraceCheckSpWp]: Trace formula consists of 123 conjuncts, 43 conjunts are in the unsatisfiable core [2022-12-14 15:51:03,281 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:03,308 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:03,309 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-12-14 15:51:03,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:51:03,466 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:03,466 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:03,568 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:03,590 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 1 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:03,590 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1992800726] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:03,591 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1084269115] [2022-12-14 15:51:03,592 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:03,592 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:03,592 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:03,592 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:03,592 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:03,616 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:03,618 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:03,647 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:51:03,676 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:03,705 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:03,743 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:03,776 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:03,796 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:03,796 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:03,890 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:03,952 INFO L321 Elim1Store]: treesize reduction 175, result has 20.1 percent of original size [2022-12-14 15:51:03,952 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 217 treesize of output 226 [2022-12-14 15:51:04,121 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:04,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:04,170 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:04,171 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:04,180 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:04,716 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '915#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:04,716 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:04,716 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:04,716 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5, 6] total 18 [2022-12-14 15:51:04,716 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [7951653] [2022-12-14 15:51:04,716 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:04,717 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-12-14 15:51:04,717 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:04,717 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-12-14 15:51:04,717 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=119, Invalid=637, Unknown=0, NotChecked=0, Total=756 [2022-12-14 15:51:04,718 INFO L87 Difference]: Start difference. First operand 15 states and 16 transitions. Second operand has 20 states, 19 states have (on average 1.736842105263158) internal successors, (33), 19 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:05,075 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:05,075 INFO L93 Difference]: Finished difference Result 18 states and 19 transitions. [2022-12-14 15:51:05,075 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-12-14 15:51:05,075 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 1.736842105263158) internal successors, (33), 19 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-12-14 15:51:05,075 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:05,075 INFO L225 Difference]: With dead ends: 18 [2022-12-14 15:51:05,075 INFO L226 Difference]: Without dead ends: 18 [2022-12-14 15:51:05,076 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 261 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=209, Invalid=981, Unknown=0, NotChecked=0, Total=1190 [2022-12-14 15:51:05,076 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 60 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 100 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:05,076 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 0 Invalid, 104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 100 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:51:05,076 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18 states. [2022-12-14 15:51:05,077 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18 to 16. [2022-12-14 15:51:05,077 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 15 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:05,077 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 17 transitions. [2022-12-14 15:51:05,077 INFO L78 Accepts]: Start accepts. Automaton has 16 states and 17 transitions. Word has length 11 [2022-12-14 15:51:05,077 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:05,077 INFO L495 AbstractCegarLoop]: Abstraction has 16 states and 17 transitions. [2022-12-14 15:51:05,077 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 1.736842105263158) internal successors, (33), 19 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:05,078 INFO L276 IsEmpty]: Start isEmpty. Operand 16 states and 17 transitions. [2022-12-14 15:51:05,078 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-12-14 15:51:05,078 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:05,078 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:51:05,082 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-12-14 15:51:05,278 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-12-14 15:51:05,280 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:05,280 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:05,281 INFO L85 PathProgramCache]: Analyzing trace with hash -1835638881, now seen corresponding path program 2 times [2022-12-14 15:51:05,281 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:05,281 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [668040624] [2022-12-14 15:51:05,281 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:05,282 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:05,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:05,501 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:05,502 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:05,502 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [668040624] [2022-12-14 15:51:05,502 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [668040624] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:05,502 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1844986940] [2022-12-14 15:51:05,502 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:51:05,502 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:05,502 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:05,503 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:05,504 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-12-14 15:51:05,570 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-12-14 15:51:05,570 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:51:05,572 INFO L263 TraceCheckSpWp]: Trace formula consists of 140 conjuncts, 37 conjunts are in the unsatisfiable core [2022-12-14 15:51:05,573 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:05,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:51:05,636 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:05,679 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 15:51:05,738 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 15:51:05,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 15:51:05,752 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:05,752 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:05,790 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_173 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_173) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 1)))) is different from false [2022-12-14 15:51:05,800 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:51:05,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 15:51:05,805 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:51:05,805 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 15:51:05,887 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 2 not checked. [2022-12-14 15:51:05,888 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1844986940] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:05,888 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [482172352] [2022-12-14 15:51:05,889 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:05,889 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:05,889 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:05,889 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:05,889 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:05,909 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:05,912 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:05,939 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:51:05,975 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:06,002 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:06,038 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:06,067 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:06,090 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:06,091 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:06,246 INFO L321 Elim1Store]: treesize reduction 169, result has 22.8 percent of original size [2022-12-14 15:51:06,246 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 222 treesize of output 233 [2022-12-14 15:51:06,443 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:06,443 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:06,485 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:06,485 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:06,494 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:07,079 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1066#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:07,080 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:07,080 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:07,080 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 23 [2022-12-14 15:51:07,080 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1558859120] [2022-12-14 15:51:07,080 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:07,080 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-12-14 15:51:07,081 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:07,081 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-12-14 15:51:07,081 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=101, Invalid=772, Unknown=1, NotChecked=56, Total=930 [2022-12-14 15:51:07,081 INFO L87 Difference]: Start difference. First operand 16 states and 17 transitions. Second operand has 23 states, 23 states have (on average 1.391304347826087) internal successors, (32), 23 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:07,335 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:07,335 INFO L93 Difference]: Finished difference Result 26 states and 27 transitions. [2022-12-14 15:51:07,336 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-12-14 15:51:07,336 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 1.391304347826087) internal successors, (32), 23 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-12-14 15:51:07,336 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:07,336 INFO L225 Difference]: With dead ends: 26 [2022-12-14 15:51:07,336 INFO L226 Difference]: Without dead ends: 19 [2022-12-14 15:51:07,337 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 16 SyntacticMatches, 3 SemanticMatches, 36 ConstructedPredicates, 1 IntricatePredicates, 2 DeprecatedPredicates, 369 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=175, Invalid=1160, Unknown=1, NotChecked=70, Total=1406 [2022-12-14 15:51:07,338 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 28 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 136 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 39 SdHoareTripleChecker+Invalid, 156 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 136 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 17 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:07,338 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 39 Invalid, 156 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 136 Invalid, 0 Unknown, 17 Unchecked, 0.1s Time] [2022-12-14 15:51:07,338 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2022-12-14 15:51:07,339 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 18. [2022-12-14 15:51:07,339 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18 states, 16 states have (on average 1.1875) internal successors, (19), 17 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:07,339 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 19 transitions. [2022-12-14 15:51:07,339 INFO L78 Accepts]: Start accepts. Automaton has 18 states and 19 transitions. Word has length 13 [2022-12-14 15:51:07,339 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:07,339 INFO L495 AbstractCegarLoop]: Abstraction has 18 states and 19 transitions. [2022-12-14 15:51:07,340 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 1.391304347826087) internal successors, (32), 23 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:07,340 INFO L276 IsEmpty]: Start isEmpty. Operand 18 states and 19 transitions. [2022-12-14 15:51:07,340 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-12-14 15:51:07,340 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:07,340 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1] [2022-12-14 15:51:07,346 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2022-12-14 15:51:07,541 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-12-14 15:51:07,542 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:07,543 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:07,543 INFO L85 PathProgramCache]: Analyzing trace with hash -1288516779, now seen corresponding path program 3 times [2022-12-14 15:51:07,544 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:07,544 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1066573418] [2022-12-14 15:51:07,544 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:07,545 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:07,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:07,705 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:07,705 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:07,706 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1066573418] [2022-12-14 15:51:07,706 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1066573418] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:07,706 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [369268419] [2022-12-14 15:51:07,706 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:51:07,706 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:07,706 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:07,707 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:07,708 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-12-14 15:51:07,769 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:51:07,769 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:51:07,770 INFO L263 TraceCheckSpWp]: Trace formula consists of 153 conjuncts, 23 conjunts are in the unsatisfiable core [2022-12-14 15:51:07,772 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:07,780 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:51:07,780 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:51:07,826 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:07,827 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:07,952 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:07,952 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [369268419] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:07,952 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1374830005] [2022-12-14 15:51:07,954 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:07,954 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:07,954 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:07,954 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:07,954 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:07,979 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:07,980 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:08,010 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:51:08,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:08,064 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:08,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:08,127 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:08,152 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:08,152 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:08,301 INFO L321 Elim1Store]: treesize reduction 161, result has 23.7 percent of original size [2022-12-14 15:51:08,302 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 217 treesize of output 228 [2022-12-14 15:51:08,418 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:08,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:08,455 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:08,455 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:08,460 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:08,897 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1237#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:08,897 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:08,897 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:08,897 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 8, 8] total 19 [2022-12-14 15:51:08,897 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1213148460] [2022-12-14 15:51:08,897 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:08,898 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-12-14 15:51:08,898 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:08,898 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-12-14 15:51:08,899 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=110, Invalid=646, Unknown=0, NotChecked=0, Total=756 [2022-12-14 15:51:08,899 INFO L87 Difference]: Start difference. First operand 18 states and 19 transitions. Second operand has 20 states, 19 states have (on average 2.0526315789473686) internal successors, (39), 20 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:09,040 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:09,041 INFO L93 Difference]: Finished difference Result 23 states and 24 transitions. [2022-12-14 15:51:09,041 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-14 15:51:09,041 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 2.0526315789473686) internal successors, (39), 20 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-12-14 15:51:09,041 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:09,041 INFO L225 Difference]: With dead ends: 23 [2022-12-14 15:51:09,041 INFO L226 Difference]: Without dead ends: 23 [2022-12-14 15:51:09,042 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 240 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=180, Invalid=876, Unknown=0, NotChecked=0, Total=1056 [2022-12-14 15:51:09,042 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 57 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 134 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 136 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 134 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:09,042 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 1 Invalid, 136 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 134 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:51:09,042 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23 states. [2022-12-14 15:51:09,043 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23 to 20. [2022-12-14 15:51:09,043 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 18 states have (on average 1.1666666666666667) internal successors, (21), 19 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:09,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 21 transitions. [2022-12-14 15:51:09,043 INFO L78 Accepts]: Start accepts. Automaton has 20 states and 21 transitions. Word has length 15 [2022-12-14 15:51:09,043 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:09,043 INFO L495 AbstractCegarLoop]: Abstraction has 20 states and 21 transitions. [2022-12-14 15:51:09,043 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 2.0526315789473686) internal successors, (39), 20 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:09,044 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 21 transitions. [2022-12-14 15:51:09,044 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-12-14 15:51:09,044 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:09,044 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 1, 1, 1, 1, 1] [2022-12-14 15:51:09,048 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-12-14 15:51:09,244 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2022-12-14 15:51:09,245 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:09,245 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:09,245 INFO L85 PathProgramCache]: Analyzing trace with hash -1289314498, now seen corresponding path program 2 times [2022-12-14 15:51:09,245 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:09,245 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2119475024] [2022-12-14 15:51:09,246 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:09,246 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:09,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:09,508 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:09,508 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:09,508 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2119475024] [2022-12-14 15:51:09,508 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2119475024] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:09,508 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1964685387] [2022-12-14 15:51:09,508 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:51:09,508 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:09,508 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:09,509 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:09,510 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-12-14 15:51:09,639 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-12-14 15:51:09,639 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:51:09,640 INFO L263 TraceCheckSpWp]: Trace formula consists of 159 conjuncts, 34 conjunts are in the unsatisfiable core [2022-12-14 15:51:09,642 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:09,674 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:09,675 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 15:51:09,678 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:51:09,852 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 1 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:09,853 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:10,023 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:10,048 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 4 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:10,048 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1964685387] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:10,048 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [576464235] [2022-12-14 15:51:10,049 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:10,049 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:10,049 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:10,049 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:10,050 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:10,070 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:10,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:10,098 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:51:10,129 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:10,152 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:10,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:10,205 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:10,229 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:10,229 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:10,374 INFO L321 Elim1Store]: treesize reduction 161, result has 23.7 percent of original size [2022-12-14 15:51:10,375 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 215 treesize of output 228 [2022-12-14 15:51:10,568 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:10,569 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:10,603 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:10,603 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:10,615 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:11,219 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1415#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:11,219 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:11,219 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:11,219 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 8] total 25 [2022-12-14 15:51:11,220 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [434786514] [2022-12-14 15:51:11,220 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:11,220 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-12-14 15:51:11,220 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:11,221 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-12-14 15:51:11,221 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=136, Invalid=1054, Unknown=0, NotChecked=0, Total=1190 [2022-12-14 15:51:11,221 INFO L87 Difference]: Start difference. First operand 20 states and 21 transitions. Second operand has 27 states, 26 states have (on average 1.8461538461538463) internal successors, (48), 26 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:11,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:11,618 INFO L93 Difference]: Finished difference Result 22 states and 23 transitions. [2022-12-14 15:51:11,618 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-14 15:51:11,618 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 26 states have (on average 1.8461538461538463) internal successors, (48), 26 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-12-14 15:51:11,619 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:11,619 INFO L225 Difference]: With dead ends: 22 [2022-12-14 15:51:11,619 INFO L226 Difference]: Without dead ends: 22 [2022-12-14 15:51:11,620 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 330 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=277, Invalid=1615, Unknown=0, NotChecked=0, Total=1892 [2022-12-14 15:51:11,620 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 107 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 202 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 207 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 202 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:11,621 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 0 Invalid, 207 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 202 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:51:11,621 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22 states. [2022-12-14 15:51:11,622 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22 to 21. [2022-12-14 15:51:11,622 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21 states, 19 states have (on average 1.1578947368421053) internal successors, (22), 20 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:11,622 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 22 transitions. [2022-12-14 15:51:11,622 INFO L78 Accepts]: Start accepts. Automaton has 21 states and 22 transitions. Word has length 16 [2022-12-14 15:51:11,623 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:11,623 INFO L495 AbstractCegarLoop]: Abstraction has 21 states and 22 transitions. [2022-12-14 15:51:11,623 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 26 states have (on average 1.8461538461538463) internal successors, (48), 26 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:11,623 INFO L276 IsEmpty]: Start isEmpty. Operand 21 states and 22 transitions. [2022-12-14 15:51:11,623 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-12-14 15:51:11,623 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:11,623 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 1, 1, 1, 1, 1] [2022-12-14 15:51:11,627 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2022-12-14 15:51:11,824 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2022-12-14 15:51:11,825 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:11,826 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:11,826 INFO L85 PathProgramCache]: Analyzing trace with hash -2080651036, now seen corresponding path program 4 times [2022-12-14 15:51:11,827 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:11,827 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1036913787] [2022-12-14 15:51:11,827 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:11,827 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:11,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:12,053 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 3 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:12,053 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:12,053 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1036913787] [2022-12-14 15:51:12,053 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1036913787] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:12,053 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [616874141] [2022-12-14 15:51:12,053 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:51:12,054 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:12,054 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:12,054 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:12,055 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-12-14 15:51:12,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:12,115 INFO L263 TraceCheckSpWp]: Trace formula consists of 176 conjuncts, 46 conjunts are in the unsatisfiable core [2022-12-14 15:51:12,117 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:12,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:51:12,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:12,227 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 15:51:12,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:51:12,276 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 15:51:12,279 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 3 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:12,279 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:12,322 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_278 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_278) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-12-14 15:51:12,332 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:51:12,333 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 15:51:12,337 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:51:12,338 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 15:51:12,424 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 3 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 6 not checked. [2022-12-14 15:51:12,425 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [616874141] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:12,425 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1414817752] [2022-12-14 15:51:12,426 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:12,426 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:12,426 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:12,426 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:12,426 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:12,445 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:12,447 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:12,472 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:51:12,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:12,522 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:12,555 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:12,576 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:12,595 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:12,596 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:12,669 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:12,715 INFO L321 Elim1Store]: treesize reduction 163, result has 22.7 percent of original size [2022-12-14 15:51:12,715 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 225 [2022-12-14 15:51:12,808 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:12,808 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:12,845 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:12,845 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:12,851 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:13,393 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1608#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:13,393 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:13,393 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:13,393 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 12, 12] total 22 [2022-12-14 15:51:13,394 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1330308323] [2022-12-14 15:51:13,394 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:13,394 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-12-14 15:51:13,394 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:13,394 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-12-14 15:51:13,395 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=89, Invalid=716, Unknown=11, NotChecked=54, Total=870 [2022-12-14 15:51:13,395 INFO L87 Difference]: Start difference. First operand 21 states and 22 transitions. Second operand has 22 states, 22 states have (on average 1.7727272727272727) internal successors, (39), 22 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:13,582 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:13,582 INFO L93 Difference]: Finished difference Result 34 states and 35 transitions. [2022-12-14 15:51:13,583 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-14 15:51:13,583 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 1.7727272727272727) internal successors, (39), 22 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-12-14 15:51:13,583 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:13,583 INFO L225 Difference]: With dead ends: 34 [2022-12-14 15:51:13,583 INFO L226 Difference]: Without dead ends: 24 [2022-12-14 15:51:13,583 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 72 GetRequests, 34 SyntacticMatches, 3 SemanticMatches, 35 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 235 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=157, Invalid=1096, Unknown=11, NotChecked=68, Total=1332 [2022-12-14 15:51:13,584 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 42 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 233 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 35 SdHoareTripleChecker+Invalid, 256 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 233 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 20 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:13,584 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 35 Invalid, 256 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 233 Invalid, 0 Unknown, 20 Unchecked, 0.1s Time] [2022-12-14 15:51:13,584 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24 states. [2022-12-14 15:51:13,585 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24 to 23. [2022-12-14 15:51:13,585 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23 states, 21 states have (on average 1.1428571428571428) internal successors, (24), 22 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:13,585 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 24 transitions. [2022-12-14 15:51:13,585 INFO L78 Accepts]: Start accepts. Automaton has 23 states and 24 transitions. Word has length 18 [2022-12-14 15:51:13,586 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:13,586 INFO L495 AbstractCegarLoop]: Abstraction has 23 states and 24 transitions. [2022-12-14 15:51:13,586 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 1.7727272727272727) internal successors, (39), 22 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:13,586 INFO L276 IsEmpty]: Start isEmpty. Operand 23 states and 24 transitions. [2022-12-14 15:51:13,586 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-12-14 15:51:13,586 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:13,587 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 1, 1, 1, 1, 1] [2022-12-14 15:51:13,591 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Ended with exit code 0 [2022-12-14 15:51:13,787 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2022-12-14 15:51:13,789 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:13,790 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:13,790 INFO L85 PathProgramCache]: Analyzing trace with hash 838614766, now seen corresponding path program 5 times [2022-12-14 15:51:13,790 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:13,791 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1623856390] [2022-12-14 15:51:13,791 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:13,791 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:13,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:14,031 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 20 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:14,031 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:14,031 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1623856390] [2022-12-14 15:51:14,031 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1623856390] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:14,031 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [630485029] [2022-12-14 15:51:14,031 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:51:14,032 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:14,032 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:14,032 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:14,033 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-12-14 15:51:14,140 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-12-14 15:51:14,140 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:51:14,141 INFO L263 TraceCheckSpWp]: Trace formula consists of 189 conjuncts, 26 conjunts are in the unsatisfiable core [2022-12-14 15:51:14,143 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:14,151 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:51:14,152 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:51:14,247 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 4 proven. 17 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:14,248 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:14,414 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 4 proven. 17 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:14,414 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [630485029] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:14,414 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2055020611] [2022-12-14 15:51:14,415 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:14,415 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:14,415 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:14,415 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:14,415 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:14,433 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:14,436 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:14,460 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:14,487 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:14,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:14,538 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:14,569 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:14,582 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:14,582 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:14,624 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:14,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:14,657 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:14,658 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:14,665 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:15,248 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1829#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:15,248 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:15,248 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:15,248 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 10, 10] total 27 [2022-12-14 15:51:15,248 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [216769081] [2022-12-14 15:51:15,248 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:15,248 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-12-14 15:51:15,249 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:15,249 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-12-14 15:51:15,249 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=167, Invalid=1093, Unknown=0, NotChecked=0, Total=1260 [2022-12-14 15:51:15,249 INFO L87 Difference]: Start difference. First operand 23 states and 24 transitions. Second operand has 28 states, 27 states have (on average 2.1481481481481484) internal successors, (58), 28 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:15,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:15,417 INFO L93 Difference]: Finished difference Result 28 states and 29 transitions. [2022-12-14 15:51:15,417 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-12-14 15:51:15,417 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 27 states have (on average 2.1481481481481484) internal successors, (58), 28 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-12-14 15:51:15,417 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:15,418 INFO L225 Difference]: With dead ends: 28 [2022-12-14 15:51:15,418 INFO L226 Difference]: Without dead ends: 28 [2022-12-14 15:51:15,419 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 472 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=284, Invalid=1438, Unknown=0, NotChecked=0, Total=1722 [2022-12-14 15:51:15,419 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 126 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 185 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 186 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 185 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:15,419 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [126 Valid, 1 Invalid, 186 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 185 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:51:15,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28 states. [2022-12-14 15:51:15,420 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28 to 25. [2022-12-14 15:51:15,420 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25 states, 23 states have (on average 1.1304347826086956) internal successors, (26), 24 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:15,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25 states to 25 states and 26 transitions. [2022-12-14 15:51:15,421 INFO L78 Accepts]: Start accepts. Automaton has 25 states and 26 transitions. Word has length 20 [2022-12-14 15:51:15,421 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:15,421 INFO L495 AbstractCegarLoop]: Abstraction has 25 states and 26 transitions. [2022-12-14 15:51:15,421 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 27 states have (on average 2.1481481481481484) internal successors, (58), 28 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:15,421 INFO L276 IsEmpty]: Start isEmpty. Operand 25 states and 26 transitions. [2022-12-14 15:51:15,421 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-12-14 15:51:15,421 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:15,421 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 1, 1, 1, 1, 1] [2022-12-14 15:51:15,426 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-12-14 15:51:15,622 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:15,623 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:15,623 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:15,624 INFO L85 PathProgramCache]: Analyzing trace with hash 227253957, now seen corresponding path program 3 times [2022-12-14 15:51:15,624 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:15,624 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [406769982] [2022-12-14 15:51:15,625 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:15,625 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:15,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:15,897 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 1 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:15,897 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:15,897 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [406769982] [2022-12-14 15:51:15,897 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [406769982] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:15,897 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [165644763] [2022-12-14 15:51:15,897 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:51:15,897 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:15,898 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:15,898 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:15,899 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-12-14 15:51:15,992 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:51:15,992 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:51:15,994 INFO L263 TraceCheckSpWp]: Trace formula consists of 195 conjuncts, 68 conjunts are in the unsatisfiable core [2022-12-14 15:51:15,996 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:16,029 INFO L321 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-12-14 15:51:16,029 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 15:51:16,051 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:51:16,502 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 3 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:16,502 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:16,792 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:16,823 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 9 proven. 15 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:16,824 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [165644763] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:16,824 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [602275405] [2022-12-14 15:51:16,825 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:16,825 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:16,825 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:16,826 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:16,826 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:16,846 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:16,847 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:16,871 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:16,895 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:16,910 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:16,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:16,971 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:16,990 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:16,990 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:17,036 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:17,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:17,078 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:17,078 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:17,087 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:17,668 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2055#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:17,668 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:17,668 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:17,668 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 11] total 31 [2022-12-14 15:51:17,668 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [515887156] [2022-12-14 15:51:17,668 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:17,669 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2022-12-14 15:51:17,669 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:17,669 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2022-12-14 15:51:17,670 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=194, Invalid=1446, Unknown=0, NotChecked=0, Total=1640 [2022-12-14 15:51:17,670 INFO L87 Difference]: Start difference. First operand 25 states and 26 transitions. Second operand has 33 states, 32 states have (on average 1.96875) internal successors, (63), 32 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:18,176 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:18,176 INFO L93 Difference]: Finished difference Result 27 states and 28 transitions. [2022-12-14 15:51:18,177 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-12-14 15:51:18,177 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 32 states have (on average 1.96875) internal successors, (63), 32 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-12-14 15:51:18,177 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:18,177 INFO L225 Difference]: With dead ends: 27 [2022-12-14 15:51:18,177 INFO L226 Difference]: Without dead ends: 27 [2022-12-14 15:51:18,177 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 84 GetRequests, 31 SyntacticMatches, 1 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 668 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=431, Invalid=2431, Unknown=0, NotChecked=0, Total=2862 [2022-12-14 15:51:18,178 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 125 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 198 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 200 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 198 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:18,178 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 0 Invalid, 200 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 198 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:51:18,179 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27 states. [2022-12-14 15:51:18,180 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27 to 26. [2022-12-14 15:51:18,180 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26 states, 24 states have (on average 1.125) internal successors, (27), 25 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:18,180 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26 states to 26 states and 27 transitions. [2022-12-14 15:51:18,180 INFO L78 Accepts]: Start accepts. Automaton has 26 states and 27 transitions. Word has length 21 [2022-12-14 15:51:18,180 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:18,180 INFO L495 AbstractCegarLoop]: Abstraction has 26 states and 27 transitions. [2022-12-14 15:51:18,180 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 32 states have (on average 1.96875) internal successors, (63), 32 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:18,181 INFO L276 IsEmpty]: Start isEmpty. Operand 26 states and 27 transitions. [2022-12-14 15:51:18,181 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-12-14 15:51:18,181 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:18,181 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 1, 1, 1, 1, 1] [2022-12-14 15:51:18,185 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Ended with exit code 0 [2022-12-14 15:51:18,382 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:18,382 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:18,383 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:18,383 INFO L85 PathProgramCache]: Analyzing trace with hash -652279125, now seen corresponding path program 6 times [2022-12-14 15:51:18,384 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:18,384 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [7155861] [2022-12-14 15:51:18,384 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:18,384 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:18,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:18,716 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 4 proven. 27 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:18,716 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:18,717 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [7155861] [2022-12-14 15:51:18,717 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [7155861] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:18,717 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1427451300] [2022-12-14 15:51:18,717 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:51:18,717 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:18,717 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:18,718 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:18,718 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-12-14 15:51:18,816 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:51:18,817 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:51:18,819 INFO L263 TraceCheckSpWp]: Trace formula consists of 212 conjuncts, 67 conjunts are in the unsatisfiable core [2022-12-14 15:51:18,821 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:18,960 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 15:51:19,008 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:19,008 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-12-14 15:51:19,074 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:19,075 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-12-14 15:51:19,138 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:19,138 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-12-14 15:51:19,184 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:19,185 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:51:19,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-12-14 15:51:19,188 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 4 proven. 27 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:19,188 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:19,459 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 768 treesize of output 756 [2022-12-14 15:51:20,023 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 4 proven. 27 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:20,023 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1427451300] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:20,023 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [818719640] [2022-12-14 15:51:20,024 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:20,024 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:20,024 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:20,025 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:20,025 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:20,041 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:20,043 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:20,064 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:20,094 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:20,107 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:20,140 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:20,166 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:20,186 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:20,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:20,247 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:20,247 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:20,293 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:20,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:20,302 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:21,093 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2309#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:21,093 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:21,093 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:21,093 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 13, 16] total 35 [2022-12-14 15:51:21,093 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1283506989] [2022-12-14 15:51:21,093 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:21,094 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-12-14 15:51:21,094 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:21,094 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-12-14 15:51:21,094 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=124, Invalid=1682, Unknown=0, NotChecked=0, Total=1806 [2022-12-14 15:51:21,094 INFO L87 Difference]: Start difference. First operand 26 states and 27 transitions. Second operand has 35 states, 35 states have (on average 1.7142857142857142) internal successors, (60), 35 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:21,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:21,717 INFO L93 Difference]: Finished difference Result 42 states and 43 transitions. [2022-12-14 15:51:21,718 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-12-14 15:51:21,718 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 35 states have (on average 1.7142857142857142) internal successors, (60), 35 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-12-14 15:51:21,718 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:21,718 INFO L225 Difference]: With dead ends: 42 [2022-12-14 15:51:21,718 INFO L226 Difference]: Without dead ends: 29 [2022-12-14 15:51:21,720 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 42 SyntacticMatches, 0 SemanticMatches, 54 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 494 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=252, Invalid=2828, Unknown=0, NotChecked=0, Total=3080 [2022-12-14 15:51:21,720 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 67 mSDsluCounter, 41 mSDsCounter, 0 mSdLazyCounter, 420 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 44 SdHoareTripleChecker+Invalid, 424 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 420 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:21,720 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 44 Invalid, 424 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 420 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 15:51:21,721 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-12-14 15:51:21,721 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 28. [2022-12-14 15:51:21,721 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28 states, 26 states have (on average 1.1153846153846154) internal successors, (29), 27 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:21,722 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 29 transitions. [2022-12-14 15:51:21,722 INFO L78 Accepts]: Start accepts. Automaton has 28 states and 29 transitions. Word has length 23 [2022-12-14 15:51:21,722 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:21,722 INFO L495 AbstractCegarLoop]: Abstraction has 28 states and 29 transitions. [2022-12-14 15:51:21,722 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 35 states have (on average 1.7142857142857142) internal successors, (60), 35 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:21,722 INFO L276 IsEmpty]: Start isEmpty. Operand 28 states and 29 transitions. [2022-12-14 15:51:21,722 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-12-14 15:51:21,722 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:21,722 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 1, 1, 1, 1, 1] [2022-12-14 15:51:21,728 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2022-12-14 15:51:21,923 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable20 [2022-12-14 15:51:21,923 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:21,924 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:21,924 INFO L85 PathProgramCache]: Analyzing trace with hash 1476969185, now seen corresponding path program 7 times [2022-12-14 15:51:21,924 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:21,924 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1489174960] [2022-12-14 15:51:21,924 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:21,924 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:21,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:22,154 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 4 proven. 34 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:22,154 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:22,154 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1489174960] [2022-12-14 15:51:22,154 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1489174960] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:22,154 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [940273483] [2022-12-14 15:51:22,154 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:51:22,155 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:22,155 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:22,155 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:22,156 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-12-14 15:51:22,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:22,223 INFO L263 TraceCheckSpWp]: Trace formula consists of 225 conjuncts, 32 conjunts are in the unsatisfiable core [2022-12-14 15:51:22,225 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:22,316 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 9 proven. 29 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:22,316 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:22,411 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 15:51:22,455 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 9 proven. 29 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:22,455 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [940273483] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:22,455 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1113748060] [2022-12-14 15:51:22,456 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:22,456 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:22,456 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:22,456 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:22,456 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:22,477 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:22,479 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:22,508 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:22,538 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:22,556 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:22,600 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:22,636 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:22,656 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:22,656 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:22,719 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:22,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:22,758 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:22,758 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:22,769 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:23,384 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2582#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:23,385 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:23,385 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:23,385 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 12, 12] total 24 [2022-12-14 15:51:23,385 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [763522676] [2022-12-14 15:51:23,385 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:23,385 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-12-14 15:51:23,385 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:23,385 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-12-14 15:51:23,386 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=130, Invalid=926, Unknown=0, NotChecked=0, Total=1056 [2022-12-14 15:51:23,386 INFO L87 Difference]: Start difference. First operand 28 states and 29 transitions. Second operand has 25 states, 24 states have (on average 2.2083333333333335) internal successors, (53), 25 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:23,530 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:23,530 INFO L93 Difference]: Finished difference Result 33 states and 34 transitions. [2022-12-14 15:51:23,530 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-14 15:51:23,530 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 24 states have (on average 2.2083333333333335) internal successors, (53), 25 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-12-14 15:51:23,530 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:23,531 INFO L225 Difference]: With dead ends: 33 [2022-12-14 15:51:23,531 INFO L226 Difference]: Without dead ends: 33 [2022-12-14 15:51:23,531 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 48 SyntacticMatches, 5 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 442 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=242, Invalid=1318, Unknown=0, NotChecked=0, Total=1560 [2022-12-14 15:51:23,532 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 74 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 283 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 284 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 283 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:23,532 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 3 Invalid, 284 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 283 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:51:23,532 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33 states. [2022-12-14 15:51:23,533 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33 to 30. [2022-12-14 15:51:23,534 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30 states, 28 states have (on average 1.1071428571428572) internal successors, (31), 29 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:23,534 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 31 transitions. [2022-12-14 15:51:23,534 INFO L78 Accepts]: Start accepts. Automaton has 30 states and 31 transitions. Word has length 25 [2022-12-14 15:51:23,534 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:23,534 INFO L495 AbstractCegarLoop]: Abstraction has 30 states and 31 transitions. [2022-12-14 15:51:23,534 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 24 states have (on average 2.2083333333333335) internal successors, (53), 25 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:23,534 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 31 transitions. [2022-12-14 15:51:23,535 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-12-14 15:51:23,535 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:23,535 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 1, 1, 1, 1, 1] [2022-12-14 15:51:23,539 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-12-14 15:51:23,736 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable21 [2022-12-14 15:51:23,736 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:23,737 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:23,737 INFO L85 PathProgramCache]: Analyzing trace with hash -1458595534, now seen corresponding path program 4 times [2022-12-14 15:51:23,737 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:23,738 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1106097105] [2022-12-14 15:51:23,738 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:23,738 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:23,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:24,168 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 4 proven. 38 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:24,168 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:24,169 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1106097105] [2022-12-14 15:51:24,169 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1106097105] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:24,169 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1689164411] [2022-12-14 15:51:24,169 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:51:24,169 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:24,169 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:24,170 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:24,171 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-12-14 15:51:24,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:24,248 INFO L263 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 44 conjunts are in the unsatisfiable core [2022-12-14 15:51:24,251 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:24,280 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:24,281 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 15:51:24,286 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:51:24,516 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 9 proven. 33 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:24,516 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:24,754 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:24,781 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 16 proven. 26 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:24,781 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1689164411] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:24,781 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1691853372] [2022-12-14 15:51:24,782 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:24,782 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:24,782 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:24,782 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:24,782 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:24,799 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:24,801 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:24,822 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:24,851 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:24,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:24,903 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:24,937 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:24,952 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:24,952 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:24,993 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:24,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:25,036 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:25,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:25,046 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:25,684 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2855#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:25,684 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:25,684 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:25,684 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 36 [2022-12-14 15:51:25,684 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1604277270] [2022-12-14 15:51:25,684 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:25,685 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2022-12-14 15:51:25,685 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:25,685 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2022-12-14 15:51:25,685 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=195, Invalid=1875, Unknown=0, NotChecked=0, Total=2070 [2022-12-14 15:51:25,685 INFO L87 Difference]: Start difference. First operand 30 states and 31 transitions. Second operand has 38 states, 37 states have (on average 2.108108108108108) internal successors, (78), 37 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:26,412 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:26,412 INFO L93 Difference]: Finished difference Result 32 states and 33 transitions. [2022-12-14 15:51:26,412 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-12-14 15:51:26,412 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 37 states have (on average 2.108108108108108) internal successors, (78), 37 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-12-14 15:51:26,412 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:26,412 INFO L225 Difference]: With dead ends: 32 [2022-12-14 15:51:26,412 INFO L226 Difference]: Without dead ends: 32 [2022-12-14 15:51:26,413 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 99 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 651 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=439, Invalid=2753, Unknown=0, NotChecked=0, Total=3192 [2022-12-14 15:51:26,413 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 168 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 428 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 435 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 428 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:26,413 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [168 Valid, 0 Invalid, 435 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 428 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 15:51:26,414 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32 states. [2022-12-14 15:51:26,414 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32 to 31. [2022-12-14 15:51:26,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 29 states have (on average 1.103448275862069) internal successors, (32), 30 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:26,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 32 transitions. [2022-12-14 15:51:26,415 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 32 transitions. Word has length 26 [2022-12-14 15:51:26,415 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:26,415 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 32 transitions. [2022-12-14 15:51:26,415 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 37 states have (on average 2.108108108108108) internal successors, (78), 37 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:26,415 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 32 transitions. [2022-12-14 15:51:26,416 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-12-14 15:51:26,416 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:26,416 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 1, 1, 1, 1, 1] [2022-12-14 15:51:26,421 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2022-12-14 15:51:26,616 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2022-12-14 15:51:26,617 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:26,618 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:26,618 INFO L85 PathProgramCache]: Analyzing trace with hash -1550969384, now seen corresponding path program 8 times [2022-12-14 15:51:26,619 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:26,619 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1076616996] [2022-12-14 15:51:26,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:26,620 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:26,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:27,022 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 5 proven. 46 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:27,023 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:27,023 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1076616996] [2022-12-14 15:51:27,023 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1076616996] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:27,023 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [197333890] [2022-12-14 15:51:27,023 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:51:27,023 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:27,023 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:27,024 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:27,025 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-12-14 15:51:27,174 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-12-14 15:51:27,174 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:51:27,176 INFO L263 TraceCheckSpWp]: Trace formula consists of 248 conjuncts, 64 conjunts are in the unsatisfiable core [2022-12-14 15:51:27,179 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:27,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:51:27,319 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:27,354 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 15:51:27,375 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:51:27,382 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:51:27,390 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:51:27,404 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 15:51:27,407 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 5 proven. 46 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:27,407 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:27,483 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_563 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_563) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2022-12-14 15:51:27,489 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_563 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_563) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2022-12-14 15:51:27,496 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:51:27,496 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 15:51:27,500 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:51:27,500 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 15:51:27,597 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 5 proven. 25 refuted. 0 times theorem prover too weak. 0 trivial. 21 not checked. [2022-12-14 15:51:27,597 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [197333890] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:27,598 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [587452566] [2022-12-14 15:51:27,599 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:27,599 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:27,599 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:27,599 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:27,599 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:27,619 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:27,622 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:27,643 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:27,667 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:27,684 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:27,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:27,739 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:27,753 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:27,753 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:27,803 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:27,803 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:27,842 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:27,842 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:27,849 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:28,561 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3140#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:28,561 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:28,561 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:28,561 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 16, 16] total 30 [2022-12-14 15:51:28,561 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1410683535] [2022-12-14 15:51:28,561 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:28,561 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-12-14 15:51:28,561 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:28,562 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-12-14 15:51:28,562 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=108, Invalid=1141, Unknown=19, NotChecked=138, Total=1406 [2022-12-14 15:51:28,562 INFO L87 Difference]: Start difference. First operand 31 states and 32 transitions. Second operand has 30 states, 30 states have (on average 1.9666666666666666) internal successors, (59), 30 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:28,962 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:28,962 INFO L93 Difference]: Finished difference Result 50 states and 51 transitions. [2022-12-14 15:51:28,963 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-12-14 15:51:28,963 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 1.9666666666666666) internal successors, (59), 30 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-12-14 15:51:28,963 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:28,963 INFO L225 Difference]: With dead ends: 50 [2022-12-14 15:51:28,963 INFO L226 Difference]: Without dead ends: 34 [2022-12-14 15:51:28,964 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 110 GetRequests, 62 SyntacticMatches, 5 SemanticMatches, 43 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 326 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=156, Invalid=1639, Unknown=19, NotChecked=166, Total=1980 [2022-12-14 15:51:28,964 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 11 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 439 mSolverCounterSat, 5 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 42 SdHoareTripleChecker+Invalid, 501 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 439 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 56 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:28,964 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 42 Invalid, 501 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 439 Invalid, 1 Unknown, 56 Unchecked, 0.2s Time] [2022-12-14 15:51:28,965 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2022-12-14 15:51:28,965 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 33. [2022-12-14 15:51:28,966 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 31 states have (on average 1.096774193548387) internal successors, (34), 32 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:28,966 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 34 transitions. [2022-12-14 15:51:28,966 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 34 transitions. Word has length 28 [2022-12-14 15:51:28,966 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:28,966 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 34 transitions. [2022-12-14 15:51:28,966 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 30 states have (on average 1.9666666666666666) internal successors, (59), 30 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:28,966 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 34 transitions. [2022-12-14 15:51:28,967 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-12-14 15:51:28,967 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:28,967 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 1, 1, 1, 1, 1] [2022-12-14 15:51:28,973 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2022-12-14 15:51:29,167 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable23,15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:29,167 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:29,168 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:29,168 INFO L85 PathProgramCache]: Analyzing trace with hash 216139618, now seen corresponding path program 9 times [2022-12-14 15:51:29,168 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:29,168 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1614757048] [2022-12-14 15:51:29,168 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:29,168 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:29,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:29,389 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 9 proven. 51 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:29,389 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:29,389 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1614757048] [2022-12-14 15:51:29,389 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1614757048] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:29,389 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [92573393] [2022-12-14 15:51:29,389 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:51:29,389 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:29,389 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:29,390 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:29,391 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-12-14 15:51:29,545 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:51:29,546 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:51:29,547 INFO L263 TraceCheckSpWp]: Trace formula consists of 261 conjuncts, 38 conjunts are in the unsatisfiable core [2022-12-14 15:51:29,549 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:29,557 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:51:29,557 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:51:29,664 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 16 proven. 44 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:29,664 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:29,931 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 16 proven. 44 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:29,931 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [92573393] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:29,931 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1169044327] [2022-12-14 15:51:29,932 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:29,932 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:29,932 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:29,933 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:29,933 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:29,952 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:29,954 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:29,978 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:51:30,008 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:30,038 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:30,077 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:30,101 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:30,127 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:30,128 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:30,204 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:30,284 INFO L321 Elim1Store]: treesize reduction 171, result has 20.5 percent of original size [2022-12-14 15:51:30,285 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 221 [2022-12-14 15:51:30,364 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:30,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:30,406 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:30,406 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:30,412 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:30,996 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3456#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:30,996 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:30,996 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:30,996 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 14, 14] total 34 [2022-12-14 15:51:30,996 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [286835734] [2022-12-14 15:51:30,996 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:30,997 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-12-14 15:51:30,997 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:30,997 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-12-14 15:51:30,998 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=218, Invalid=1588, Unknown=0, NotChecked=0, Total=1806 [2022-12-14 15:51:30,998 INFO L87 Difference]: Start difference. First operand 33 states and 34 transitions. Second operand has 35 states, 34 states have (on average 2.2058823529411766) internal successors, (75), 35 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:31,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:31,210 INFO L93 Difference]: Finished difference Result 38 states and 39 transitions. [2022-12-14 15:51:31,211 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-12-14 15:51:31,211 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 34 states have (on average 2.2058823529411766) internal successors, (75), 35 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-12-14 15:51:31,211 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:31,211 INFO L225 Difference]: With dead ends: 38 [2022-12-14 15:51:31,211 INFO L226 Difference]: Without dead ends: 38 [2022-12-14 15:51:31,211 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 109 GetRequests, 60 SyntacticMatches, 0 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 687 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=414, Invalid=2136, Unknown=0, NotChecked=0, Total=2550 [2022-12-14 15:51:31,212 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 134 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 332 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 333 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 332 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:31,212 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [134 Valid, 3 Invalid, 333 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 332 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:51:31,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-12-14 15:51:31,213 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 35. [2022-12-14 15:51:31,213 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 33 states have (on average 1.0909090909090908) internal successors, (36), 34 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:31,213 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 36 transitions. [2022-12-14 15:51:31,213 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 36 transitions. Word has length 30 [2022-12-14 15:51:31,213 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:31,213 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 36 transitions. [2022-12-14 15:51:31,213 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 34 states have (on average 2.2058823529411766) internal successors, (75), 35 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:31,213 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 36 transitions. [2022-12-14 15:51:31,214 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-12-14 15:51:31,214 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:31,214 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 5, 1, 1, 1, 1, 1] [2022-12-14 15:51:31,218 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2022-12-14 15:51:31,414 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable24 [2022-12-14 15:51:31,415 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:31,416 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:31,416 INFO L85 PathProgramCache]: Analyzing trace with hash -1889606447, now seen corresponding path program 5 times [2022-12-14 15:51:31,416 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:31,417 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1715033896] [2022-12-14 15:51:31,417 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:31,417 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:31,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:31,852 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 9 proven. 56 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:31,852 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:31,852 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1715033896] [2022-12-14 15:51:31,852 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1715033896] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:31,852 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [522567487] [2022-12-14 15:51:31,853 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:51:31,853 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:31,853 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:31,854 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:31,854 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-12-14 15:51:32,038 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-12-14 15:51:32,039 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:51:32,041 INFO L263 TraceCheckSpWp]: Trace formula consists of 267 conjuncts, 44 conjunts are in the unsatisfiable core [2022-12-14 15:51:32,042 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:32,081 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:32,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 15:51:32,087 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:51:32,490 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 13 proven. 52 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:32,490 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:32,975 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:33,012 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 25 proven. 40 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:33,013 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [522567487] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:33,013 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [999027866] [2022-12-14 15:51:33,014 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:33,014 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:33,014 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:33,014 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:33,014 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:33,036 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:33,039 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:33,063 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:33,098 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:33,117 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:33,154 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:33,194 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:33,219 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:33,220 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:33,282 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:33,282 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:33,336 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:33,336 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:33,349 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:34,547 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3778#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= 0 |#NULL.offset|) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:34,547 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:34,547 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:34,547 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 14] total 43 [2022-12-14 15:51:34,547 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [839144020] [2022-12-14 15:51:34,547 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:34,548 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2022-12-14 15:51:34,548 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:34,548 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2022-12-14 15:51:34,548 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=247, Invalid=2509, Unknown=0, NotChecked=0, Total=2756 [2022-12-14 15:51:34,548 INFO L87 Difference]: Start difference. First operand 35 states and 36 transitions. Second operand has 45 states, 44 states have (on average 2.1136363636363638) internal successors, (93), 44 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:35,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:35,634 INFO L93 Difference]: Finished difference Result 37 states and 38 transitions. [2022-12-14 15:51:35,634 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-12-14 15:51:35,634 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 44 states have (on average 2.1136363636363638) internal successors, (93), 44 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-12-14 15:51:35,634 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:35,635 INFO L225 Difference]: With dead ends: 37 [2022-12-14 15:51:35,635 INFO L226 Difference]: Without dead ends: 37 [2022-12-14 15:51:35,637 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 123 GetRequests, 54 SyntacticMatches, 0 SemanticMatches, 69 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1029 ImplicationChecksByTransitivity, 2.9s TimeCoverageRelationStatistics Valid=691, Invalid=4279, Unknown=0, NotChecked=0, Total=4970 [2022-12-14 15:51:35,637 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 250 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 465 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 250 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 476 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 465 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:35,637 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [250 Valid, 0 Invalid, 476 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 465 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 15:51:35,638 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-12-14 15:51:35,639 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 36. [2022-12-14 15:51:35,639 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 34 states have (on average 1.088235294117647) internal successors, (37), 35 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:35,639 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 37 transitions. [2022-12-14 15:51:35,639 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 37 transitions. Word has length 31 [2022-12-14 15:51:35,639 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:35,639 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 37 transitions. [2022-12-14 15:51:35,640 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 44 states have (on average 2.1136363636363638) internal successors, (93), 44 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:35,640 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 37 transitions. [2022-12-14 15:51:35,640 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-12-14 15:51:35,640 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:35,641 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 1, 1, 1, 1, 1] [2022-12-14 15:51:35,645 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Ended with exit code 0 [2022-12-14 15:51:35,841 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2022-12-14 15:51:35,842 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:35,843 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:35,843 INFO L85 PathProgramCache]: Analyzing trace with hash 859370935, now seen corresponding path program 10 times [2022-12-14 15:51:35,843 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:35,844 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1757608875] [2022-12-14 15:51:35,844 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:35,844 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:35,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:36,211 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 6 proven. 70 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:36,211 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:36,211 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1757608875] [2022-12-14 15:51:36,211 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1757608875] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:36,211 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [724018185] [2022-12-14 15:51:36,211 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:51:36,211 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:36,212 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:36,212 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:36,213 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-12-14 15:51:36,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:36,286 INFO L263 TraceCheckSpWp]: Trace formula consists of 284 conjuncts, 74 conjunts are in the unsatisfiable core [2022-12-14 15:51:36,289 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:36,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:51:36,426 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:36,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 15:51:36,507 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 15:51:36,532 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 15:51:36,572 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 15:51:36,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 15:51:36,667 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 15:51:36,669 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 6 proven. 70 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:36,670 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:36,697 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_742 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_742) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 1)) 0)) is different from false [2022-12-14 15:51:36,751 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_742 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_742) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2022-12-14 15:51:36,758 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_742 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_742) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2022-12-14 15:51:36,765 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_742 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_742) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 5)) 0)) is different from false [2022-12-14 15:51:36,809 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:51:36,809 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 15:51:36,814 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:51:36,814 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 36 [2022-12-14 15:51:36,818 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:51:37,231 INFO L134 CoverageAnalysis]: Checked inductivity of 76 backedges. 6 proven. 32 refuted. 0 times theorem prover too weak. 0 trivial. 38 not checked. [2022-12-14 15:51:37,232 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [724018185] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:37,232 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1134758261] [2022-12-14 15:51:37,232 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:37,232 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:37,233 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:37,233 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:37,233 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:37,249 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:37,250 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:37,274 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:51:37,301 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:37,330 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:37,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:37,389 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:37,405 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:37,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:37,534 INFO L321 Elim1Store]: treesize reduction 169, result has 22.8 percent of original size [2022-12-14 15:51:37,534 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 212 treesize of output 223 [2022-12-14 15:51:37,744 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:37,744 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:37,776 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:37,776 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:37,787 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:38,583 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4134#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:38,583 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:38,583 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:38,583 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 19, 19] total 47 [2022-12-14 15:51:38,583 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [310569200] [2022-12-14 15:51:38,583 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:38,584 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2022-12-14 15:51:38,584 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:38,584 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2022-12-14 15:51:38,586 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=168, Invalid=2390, Unknown=8, NotChecked=404, Total=2970 [2022-12-14 15:51:38,586 INFO L87 Difference]: Start difference. First operand 36 states and 37 transitions. Second operand has 47 states, 47 states have (on average 1.8936170212765957) internal successors, (89), 47 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:39,351 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:39,351 INFO L93 Difference]: Finished difference Result 58 states and 59 transitions. [2022-12-14 15:51:39,352 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-12-14 15:51:39,352 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 47 states have (on average 1.8936170212765957) internal successors, (89), 47 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-12-14 15:51:39,352 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:39,352 INFO L225 Difference]: With dead ends: 58 [2022-12-14 15:51:39,352 INFO L226 Difference]: Without dead ends: 39 [2022-12-14 15:51:39,353 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 66 SyntacticMatches, 2 SemanticMatches, 66 ConstructedPredicates, 4 IntricatePredicates, 0 DeprecatedPredicates, 814 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=302, Invalid=3738, Unknown=8, NotChecked=508, Total=4556 [2022-12-14 15:51:39,354 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 97 mSDsluCounter, 54 mSDsCounter, 0 mSdLazyCounter, 700 mSolverCounterSat, 8 mSolverCounterUnsat, 16 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 97 SdHoareTripleChecker+Valid, 57 SdHoareTripleChecker+Invalid, 854 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 700 IncrementalHoareTripleChecker+Invalid, 16 IncrementalHoareTripleChecker+Unknown, 130 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:39,354 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [97 Valid, 57 Invalid, 854 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 700 Invalid, 16 Unknown, 130 Unchecked, 0.3s Time] [2022-12-14 15:51:39,354 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39 states. [2022-12-14 15:51:39,355 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39 to 38. [2022-12-14 15:51:39,355 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 36 states have (on average 1.0833333333333333) internal successors, (39), 37 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:39,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 39 transitions. [2022-12-14 15:51:39,356 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 39 transitions. Word has length 33 [2022-12-14 15:51:39,356 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:39,356 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 39 transitions. [2022-12-14 15:51:39,356 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 47 states have (on average 1.8936170212765957) internal successors, (89), 47 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:39,356 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 39 transitions. [2022-12-14 15:51:39,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-12-14 15:51:39,357 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:39,357 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 1, 1, 1, 1, 1] [2022-12-14 15:51:39,361 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Ended with exit code 0 [2022-12-14 15:51:39,557 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-12-14 15:51:39,558 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:39,559 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:39,559 INFO L85 PathProgramCache]: Analyzing trace with hash -785356179, now seen corresponding path program 11 times [2022-12-14 15:51:39,559 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:39,560 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1359000878] [2022-12-14 15:51:39,560 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:39,560 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:39,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:39,923 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 16 proven. 71 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:39,923 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:39,923 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1359000878] [2022-12-14 15:51:39,924 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1359000878] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:39,924 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1692452266] [2022-12-14 15:51:39,924 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:51:39,924 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:39,924 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:39,925 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:39,925 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-12-14 15:51:40,107 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-12-14 15:51:40,107 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:51:40,109 INFO L263 TraceCheckSpWp]: Trace formula consists of 297 conjuncts, 37 conjunts are in the unsatisfiable core [2022-12-14 15:51:40,110 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:40,288 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 25 proven. 62 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:40,288 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:40,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-12-14 15:51:40,579 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 25 proven. 62 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:40,579 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1692452266] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:40,579 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2079176033] [2022-12-14 15:51:40,580 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:40,580 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:40,580 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:40,581 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:40,581 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:40,601 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:40,604 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:40,628 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:40,661 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:40,680 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:40,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:40,760 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:40,781 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:40,781 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:40,833 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:40,833 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:40,873 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:40,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:40,887 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:41,833 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4509#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= 0 |#NULL.offset|) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:41,833 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:41,833 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:41,833 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 16, 16] total 38 [2022-12-14 15:51:41,833 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [231462130] [2022-12-14 15:51:41,833 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:41,833 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2022-12-14 15:51:41,833 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:41,834 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2022-12-14 15:51:41,834 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=282, Invalid=1880, Unknown=0, NotChecked=0, Total=2162 [2022-12-14 15:51:41,834 INFO L87 Difference]: Start difference. First operand 38 states and 39 transitions. Second operand has 39 states, 38 states have (on average 2.3421052631578947) internal successors, (89), 39 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:42,170 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:42,170 INFO L93 Difference]: Finished difference Result 43 states and 44 transitions. [2022-12-14 15:51:42,171 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-12-14 15:51:42,171 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 38 states have (on average 2.3421052631578947) internal successors, (89), 39 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-12-14 15:51:42,171 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:42,171 INFO L225 Difference]: With dead ends: 43 [2022-12-14 15:51:42,171 INFO L226 Difference]: Without dead ends: 43 [2022-12-14 15:51:42,172 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 127 GetRequests, 66 SyntacticMatches, 7 SemanticMatches, 54 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1065 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=507, Invalid=2573, Unknown=0, NotChecked=0, Total=3080 [2022-12-14 15:51:42,172 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 66 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 427 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 428 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 427 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:42,172 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 1 Invalid, 428 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 427 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 15:51:42,172 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2022-12-14 15:51:42,173 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 40. [2022-12-14 15:51:42,173 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 40 states, 38 states have (on average 1.0789473684210527) internal successors, (41), 39 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:42,173 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40 states to 40 states and 41 transitions. [2022-12-14 15:51:42,173 INFO L78 Accepts]: Start accepts. Automaton has 40 states and 41 transitions. Word has length 35 [2022-12-14 15:51:42,173 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:42,173 INFO L495 AbstractCegarLoop]: Abstraction has 40 states and 41 transitions. [2022-12-14 15:51:42,173 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 38 states have (on average 2.3421052631578947) internal successors, (89), 39 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:42,173 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 41 transitions. [2022-12-14 15:51:42,174 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-12-14 15:51:42,174 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:42,174 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 6, 1, 1, 1, 1, 1] [2022-12-14 15:51:42,179 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Ended with exit code 0 [2022-12-14 15:51:42,374 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-12-14 15:51:42,374 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:42,374 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:42,374 INFO L85 PathProgramCache]: Analyzing trace with hash 1423762214, now seen corresponding path program 6 times [2022-12-14 15:51:42,375 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:42,375 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [186534863] [2022-12-14 15:51:42,375 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:42,375 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:42,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:42,845 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 16 proven. 77 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:42,845 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:42,845 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [186534863] [2022-12-14 15:51:42,845 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [186534863] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:42,845 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [9016755] [2022-12-14 15:51:42,846 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:51:42,846 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:42,846 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:42,846 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:42,847 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-12-14 15:51:42,990 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:51:42,990 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:51:42,992 INFO L263 TraceCheckSpWp]: Trace formula consists of 303 conjuncts, 58 conjunts are in the unsatisfiable core [2022-12-14 15:51:42,994 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:43,020 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:43,021 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-12-14 15:51:43,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:51:43,598 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 25 proven. 68 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:43,598 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:44,047 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:44,088 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 36 proven. 57 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:44,088 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [9016755] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:44,088 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1826532216] [2022-12-14 15:51:44,089 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:44,089 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:44,090 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:44,090 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:44,090 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:44,107 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:44,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:44,133 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:51:44,159 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:44,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:44,213 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:44,241 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:44,260 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:44,260 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:44,411 INFO L321 Elim1Store]: treesize reduction 169, result has 22.8 percent of original size [2022-12-14 15:51:44,411 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 212 treesize of output 223 [2022-12-14 15:51:44,602 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:44,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:44,634 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:44,634 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:44,642 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:45,478 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4877#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:45,478 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:45,478 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:45,478 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 15, 16] total 47 [2022-12-14 15:51:45,478 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [131787040] [2022-12-14 15:51:45,478 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:45,478 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-12-14 15:51:45,479 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:45,479 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-12-14 15:51:45,480 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=318, Invalid=2874, Unknown=0, NotChecked=0, Total=3192 [2022-12-14 15:51:45,480 INFO L87 Difference]: Start difference. First operand 40 states and 41 transitions. Second operand has 49 states, 48 states have (on average 2.25) internal successors, (108), 48 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:46,421 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:46,421 INFO L93 Difference]: Finished difference Result 42 states and 43 transitions. [2022-12-14 15:51:46,421 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-12-14 15:51:46,421 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 48 states have (on average 2.25) internal successors, (108), 48 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-12-14 15:51:46,421 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:46,422 INFO L225 Difference]: With dead ends: 42 [2022-12-14 15:51:46,422 INFO L226 Difference]: Without dead ends: 42 [2022-12-14 15:51:46,422 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 138 GetRequests, 67 SyntacticMatches, 0 SemanticMatches, 71 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1223 ImplicationChecksByTransitivity, 2.5s TimeCoverageRelationStatistics Valid=779, Invalid=4477, Unknown=0, NotChecked=0, Total=5256 [2022-12-14 15:51:46,423 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 290 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 640 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 290 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 642 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 640 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:46,423 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [290 Valid, 0 Invalid, 642 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 640 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 15:51:46,423 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42 states. [2022-12-14 15:51:46,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42 to 41. [2022-12-14 15:51:46,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 39 states have (on average 1.0769230769230769) internal successors, (42), 40 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:46,424 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 42 transitions. [2022-12-14 15:51:46,424 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 42 transitions. Word has length 36 [2022-12-14 15:51:46,425 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:46,425 INFO L495 AbstractCegarLoop]: Abstraction has 41 states and 42 transitions. [2022-12-14 15:51:46,425 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 48 states have (on average 2.25) internal successors, (108), 48 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:46,425 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 42 transitions. [2022-12-14 15:51:46,425 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-12-14 15:51:46,425 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:46,425 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 6, 6, 1, 1, 1, 1, 1] [2022-12-14 15:51:46,431 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2022-12-14 15:51:46,626 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-12-14 15:51:46,627 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:46,627 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:46,628 INFO L85 PathProgramCache]: Analyzing trace with hash -1859079476, now seen corresponding path program 12 times [2022-12-14 15:51:46,628 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:46,628 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1347050226] [2022-12-14 15:51:46,628 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:46,629 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:46,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:47,117 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 7 proven. 99 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:47,117 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:47,117 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1347050226] [2022-12-14 15:51:47,118 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1347050226] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:47,118 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [280136384] [2022-12-14 15:51:47,118 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:51:47,118 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:47,118 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:47,119 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:47,119 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-12-14 15:51:47,275 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:51:47,275 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:51:47,278 INFO L263 TraceCheckSpWp]: Trace formula consists of 320 conjuncts, 84 conjunts are in the unsatisfiable core [2022-12-14 15:51:47,280 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:47,283 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:51:47,452 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:47,494 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 15:51:47,522 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:51:47,532 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:51:47,542 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:51:47,552 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:51:47,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:51:47,582 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 15:51:47,584 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 7 proven. 99 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:47,584 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:47,628 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_945 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_945) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-12-14 15:51:47,634 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_945 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_945) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2022-12-14 15:51:47,684 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_945 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_945) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 5)) 0)) is different from false [2022-12-14 15:51:47,733 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:51:47,733 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 15:51:47,736 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:51:47,737 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 15:51:47,847 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 7 proven. 54 refuted. 0 times theorem prover too weak. 0 trivial. 45 not checked. [2022-12-14 15:51:47,847 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [280136384] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:47,847 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1347321704] [2022-12-14 15:51:47,849 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:47,849 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:47,849 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:47,849 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:47,849 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:47,868 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:47,870 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:47,893 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:51:47,925 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:47,947 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:47,977 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:47,995 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:48,020 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:48,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:48,087 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:48,138 INFO L321 Elim1Store]: treesize reduction 171, result has 20.5 percent of original size [2022-12-14 15:51:48,139 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 221 [2022-12-14 15:51:48,255 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:48,255 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:48,292 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:48,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:48,302 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:49,033 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5260#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:49,033 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:49,033 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:49,033 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 20, 20] total 38 [2022-12-14 15:51:49,033 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [96789122] [2022-12-14 15:51:49,033 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:49,034 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2022-12-14 15:51:49,034 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:49,034 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2022-12-14 15:51:49,035 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=128, Invalid=1653, Unknown=37, NotChecked=252, Total=2070 [2022-12-14 15:51:49,035 INFO L87 Difference]: Start difference. First operand 41 states and 42 transitions. Second operand has 38 states, 38 states have (on average 2.0789473684210527) internal successors, (79), 38 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:49,656 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:49,657 INFO L93 Difference]: Finished difference Result 66 states and 67 transitions. [2022-12-14 15:51:49,657 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-12-14 15:51:49,657 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 2.0789473684210527) internal successors, (79), 38 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-12-14 15:51:49,657 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:49,657 INFO L225 Difference]: With dead ends: 66 [2022-12-14 15:51:49,657 INFO L226 Difference]: Without dead ends: 44 [2022-12-14 15:51:49,658 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 90 SyntacticMatches, 6 SemanticMatches, 54 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 465 ImplicationChecksByTransitivity, 1.5s TimeCoverageRelationStatistics Valid=197, Invalid=2534, Unknown=37, NotChecked=312, Total=3080 [2022-12-14 15:51:49,658 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 23 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 942 mSolverCounterSat, 7 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 23 SdHoareTripleChecker+Valid, 55 SdHoareTripleChecker+Invalid, 1068 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 942 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 118 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:49,658 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [23 Valid, 55 Invalid, 1068 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 942 Invalid, 1 Unknown, 118 Unchecked, 0.3s Time] [2022-12-14 15:51:49,658 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44 states. [2022-12-14 15:51:49,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44 to 43. [2022-12-14 15:51:49,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 41 states have (on average 1.0731707317073171) internal successors, (44), 42 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:49,659 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 44 transitions. [2022-12-14 15:51:49,659 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 44 transitions. Word has length 38 [2022-12-14 15:51:49,659 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:49,659 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 44 transitions. [2022-12-14 15:51:49,660 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 2.0789473684210527) internal successors, (79), 38 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:49,660 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 44 transitions. [2022-12-14 15:51:49,660 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-12-14 15:51:49,660 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:49,660 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 7, 7, 1, 1, 1, 1, 1] [2022-12-14 15:51:49,665 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Ended with exit code 0 [2022-12-14 15:51:49,861 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:49,861 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:49,862 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:49,862 INFO L85 PathProgramCache]: Analyzing trace with hash 1045675990, now seen corresponding path program 13 times [2022-12-14 15:51:49,863 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:49,863 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [707925263] [2022-12-14 15:51:49,863 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:49,863 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:49,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:50,270 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 25 proven. 94 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:50,270 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:50,270 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [707925263] [2022-12-14 15:51:50,270 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [707925263] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:50,270 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [555358611] [2022-12-14 15:51:50,270 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:51:50,270 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:50,270 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:50,271 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:50,272 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-12-14 15:51:50,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:50,355 INFO L263 TraceCheckSpWp]: Trace formula consists of 333 conjuncts, 47 conjunts are in the unsatisfiable core [2022-12-14 15:51:50,357 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:50,522 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 36 proven. 83 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:50,522 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:50,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 15:51:50,852 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 36 proven. 83 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:50,852 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [555358611] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:50,852 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [132555857] [2022-12-14 15:51:50,853 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:50,853 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:50,853 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:50,853 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:50,854 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:50,872 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:50,874 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:50,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:51:50,932 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:50,954 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:50,981 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:51,001 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:51,017 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:51,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:51,130 INFO L321 Elim1Store]: treesize reduction 169, result has 12.9 percent of original size [2022-12-14 15:51:51,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 224 treesize of output 219 [2022-12-14 15:51:51,200 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:51,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:51,234 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:51,234 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:51,239 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:51,992 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5671#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:51,992 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:51,992 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:51,992 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 18, 18] total 36 [2022-12-14 15:51:51,992 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [67071581] [2022-12-14 15:51:51,992 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:51,993 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2022-12-14 15:51:51,993 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:51,993 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2022-12-14 15:51:51,993 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=223, Invalid=1757, Unknown=0, NotChecked=0, Total=1980 [2022-12-14 15:51:51,994 INFO L87 Difference]: Start difference. First operand 43 states and 44 transitions. Second operand has 37 states, 36 states have (on average 2.3055555555555554) internal successors, (83), 37 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:52,394 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:52,395 INFO L93 Difference]: Finished difference Result 48 states and 49 transitions. [2022-12-14 15:51:52,395 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-12-14 15:51:52,395 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 36 states have (on average 2.3055555555555554) internal successors, (83), 37 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-12-14 15:51:52,395 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:52,395 INFO L225 Difference]: With dead ends: 48 [2022-12-14 15:51:52,395 INFO L226 Difference]: Without dead ends: 48 [2022-12-14 15:51:52,395 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 145 GetRequests, 84 SyntacticMatches, 8 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 964 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=458, Invalid=2512, Unknown=0, NotChecked=0, Total=2970 [2022-12-14 15:51:52,396 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 103 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 579 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 103 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 580 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 579 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:52,396 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [103 Valid, 1 Invalid, 580 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 579 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 15:51:52,396 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48 states. [2022-12-14 15:51:52,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48 to 45. [2022-12-14 15:51:52,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 43 states have (on average 1.069767441860465) internal successors, (46), 44 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:52,397 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 46 transitions. [2022-12-14 15:51:52,397 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 46 transitions. Word has length 40 [2022-12-14 15:51:52,397 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:52,397 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 46 transitions. [2022-12-14 15:51:52,397 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 36 states have (on average 2.3055555555555554) internal successors, (83), 37 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:52,397 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 46 transitions. [2022-12-14 15:51:52,398 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-12-14 15:51:52,398 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:52,398 INFO L195 NwaCegarLoop]: trace histogram [8, 7, 7, 7, 7, 1, 1, 1, 1, 1] [2022-12-14 15:51:52,402 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-12-14 15:51:52,598 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable30 [2022-12-14 15:51:52,599 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:52,600 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:52,600 INFO L85 PathProgramCache]: Analyzing trace with hash -1943782691, now seen corresponding path program 7 times [2022-12-14 15:51:52,600 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:52,600 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [828434511] [2022-12-14 15:51:52,601 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:52,601 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:52,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:53,222 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 25 proven. 101 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:53,223 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:53,223 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [828434511] [2022-12-14 15:51:53,223 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [828434511] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:53,223 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1384945063] [2022-12-14 15:51:53,223 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:51:53,223 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:53,223 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:53,224 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:53,224 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-12-14 15:51:53,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:53,326 INFO L263 TraceCheckSpWp]: Trace formula consists of 339 conjuncts, 76 conjunts are in the unsatisfiable core [2022-12-14 15:51:53,328 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:53,367 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:51:53,367 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:51:54,228 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 36 proven. 90 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:54,228 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:51:55,043 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 49 proven. 77 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:55,043 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1384945063] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:51:55,043 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1415517578] [2022-12-14 15:51:55,044 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:51:55,044 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:51:55,044 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:51:55,044 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:51:55,044 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:51:55,065 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:51:55,068 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:51:55,094 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:55,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:55,139 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:55,175 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:51:55,208 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:51:55,232 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:51:55,233 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:51:55,291 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:55,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:55,337 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:51:55,337 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:51:55,343 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:51:56,433 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6088#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:51:56,433 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:51:56,433 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:51:56,433 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 18, 18] total 54 [2022-12-14 15:51:56,433 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1841034460] [2022-12-14 15:51:56,433 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:51:56,434 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 56 states [2022-12-14 15:51:56,434 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:51:56,434 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 56 interpolants. [2022-12-14 15:51:56,435 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=324, Invalid=3708, Unknown=0, NotChecked=0, Total=4032 [2022-12-14 15:51:56,435 INFO L87 Difference]: Start difference. First operand 45 states and 46 transitions. Second operand has 56 states, 55 states have (on average 2.2363636363636363) internal successors, (123), 55 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:58,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:51:58,107 INFO L93 Difference]: Finished difference Result 47 states and 48 transitions. [2022-12-14 15:51:58,107 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-12-14 15:51:58,107 INFO L78 Accepts]: Start accepts. Automaton has has 56 states, 55 states have (on average 2.2363636363636363) internal successors, (123), 55 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-12-14 15:51:58,107 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:51:58,108 INFO L225 Difference]: With dead ends: 47 [2022-12-14 15:51:58,108 INFO L226 Difference]: Without dead ends: 47 [2022-12-14 15:51:58,108 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 77 SyntacticMatches, 0 SemanticMatches, 79 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1428 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=865, Invalid=5615, Unknown=0, NotChecked=0, Total=6480 [2022-12-14 15:51:58,109 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 231 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 808 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 231 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 813 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 808 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 15:51:58,109 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [231 Valid, 0 Invalid, 813 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 808 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 15:51:58,109 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47 states. [2022-12-14 15:51:58,110 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47 to 46. [2022-12-14 15:51:58,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 44 states have (on average 1.0681818181818181) internal successors, (47), 45 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:58,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 47 transitions. [2022-12-14 15:51:58,110 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 47 transitions. Word has length 41 [2022-12-14 15:51:58,110 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:51:58,110 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 47 transitions. [2022-12-14 15:51:58,111 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 56 states, 55 states have (on average 2.2363636363636363) internal successors, (123), 55 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:51:58,111 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 47 transitions. [2022-12-14 15:51:58,111 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-12-14 15:51:58,111 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:51:58,111 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 7, 7, 1, 1, 1, 1, 1] [2022-12-14 15:51:58,116 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Ended with exit code 0 [2022-12-14 15:51:58,312 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable31 [2022-12-14 15:51:58,312 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:51:58,313 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:51:58,313 INFO L85 PathProgramCache]: Analyzing trace with hash 335608003, now seen corresponding path program 14 times [2022-12-14 15:51:58,313 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:51:58,313 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [149056492] [2022-12-14 15:51:58,313 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:51:58,313 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:51:58,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:51:58,947 INFO L134 CoverageAnalysis]: Checked inductivity of 141 backedges. 8 proven. 133 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:51:58,947 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:51:58,947 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [149056492] [2022-12-14 15:51:58,947 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [149056492] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:51:58,947 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [67934652] [2022-12-14 15:51:58,947 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:51:58,948 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:51:58,948 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:51:58,948 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:51:58,949 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-12-14 15:51:59,382 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 9 check-sat command(s) [2022-12-14 15:51:59,382 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:51:59,385 INFO L263 TraceCheckSpWp]: Trace formula consists of 356 conjuncts, 120 conjunts are in the unsatisfiable core [2022-12-14 15:51:59,389 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:51:59,396 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:51:59,621 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 15:51:59,669 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:51:59,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:51:59,775 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:51:59,834 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:51:59,895 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:51:59,958 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:00,036 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:00,093 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:00,095 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:52:00,095 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-12-14 15:52:00,098 INFO L134 CoverageAnalysis]: Checked inductivity of 141 backedges. 8 proven. 133 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:00,098 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:52:00,187 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1171 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1171) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-12-14 15:52:00,194 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1171 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1171) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2022-12-14 15:52:00,328 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1171 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1171) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 6)) 0)) is different from false [2022-12-14 15:52:00,400 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:52:00,400 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 15:52:00,404 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:52:00,404 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 15:52:00,407 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 15:52:00,794 INFO L134 CoverageAnalysis]: Checked inductivity of 141 backedges. 8 proven. 79 refuted. 0 times theorem prover too weak. 0 trivial. 54 not checked. [2022-12-14 15:52:00,794 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [67934652] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:52:00,794 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [435866299] [2022-12-14 15:52:00,795 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:52:00,795 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:52:00,796 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:52:00,796 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:52:00,796 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:52:00,819 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:00,820 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:52:00,849 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:00,877 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:00,896 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:00,929 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:00,969 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:00,993 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:52:00,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:52:01,051 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:01,052 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:01,092 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:01,093 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:01,097 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:52:02,167 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6532#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:52:02,167 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:52:02,167 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:52:02,168 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 21, 22] total 57 [2022-12-14 15:52:02,168 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [626007236] [2022-12-14 15:52:02,168 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:52:02,168 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 57 states [2022-12-14 15:52:02,168 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:52:02,169 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 57 interpolants. [2022-12-14 15:52:02,169 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=199, Invalid=3544, Unknown=51, NotChecked=366, Total=4160 [2022-12-14 15:52:02,169 INFO L87 Difference]: Start difference. First operand 46 states and 47 transitions. Second operand has 57 states, 57 states have (on average 2.1052631578947367) internal successors, (120), 57 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:03,020 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:52:03,020 INFO L93 Difference]: Finished difference Result 74 states and 75 transitions. [2022-12-14 15:52:03,020 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-12-14 15:52:03,021 INFO L78 Accepts]: Start accepts. Automaton has has 57 states, 57 states have (on average 2.1052631578947367) internal successors, (120), 57 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-12-14 15:52:03,021 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:52:03,021 INFO L225 Difference]: With dead ends: 74 [2022-12-14 15:52:03,021 INFO L226 Difference]: Without dead ends: 49 [2022-12-14 15:52:03,021 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 92 SyntacticMatches, 0 SemanticMatches, 79 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 1296 ImplicationChecksByTransitivity, 2.8s TimeCoverageRelationStatistics Valid=359, Invalid=5608, Unknown=51, NotChecked=462, Total=6480 [2022-12-14 15:52:03,022 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 77 mSDsluCounter, 66 mSDsCounter, 0 mSdLazyCounter, 1150 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 69 SdHoareTripleChecker+Invalid, 1290 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 1150 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 132 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 15:52:03,022 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 69 Invalid, 1290 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 1150 Invalid, 0 Unknown, 132 Unchecked, 0.3s Time] [2022-12-14 15:52:03,022 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2022-12-14 15:52:03,022 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 48. [2022-12-14 15:52:03,023 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48 states, 46 states have (on average 1.065217391304348) internal successors, (49), 47 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:03,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 49 transitions. [2022-12-14 15:52:03,023 INFO L78 Accepts]: Start accepts. Automaton has 48 states and 49 transitions. Word has length 43 [2022-12-14 15:52:03,023 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:52:03,023 INFO L495 AbstractCegarLoop]: Abstraction has 48 states and 49 transitions. [2022-12-14 15:52:03,023 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 57 states, 57 states have (on average 2.1052631578947367) internal successors, (120), 57 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:03,023 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states and 49 transitions. [2022-12-14 15:52:03,023 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-12-14 15:52:03,023 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:52:03,023 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 8, 8, 1, 1, 1, 1, 1] [2022-12-14 15:52:03,029 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Forceful destruction successful, exit code 0 [2022-12-14 15:52:03,224 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable32 [2022-12-14 15:52:03,225 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:52:03,225 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:52:03,225 INFO L85 PathProgramCache]: Analyzing trace with hash 1691255289, now seen corresponding path program 15 times [2022-12-14 15:52:03,226 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:52:03,226 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [436155420] [2022-12-14 15:52:03,226 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:52:03,226 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:52:03,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:52:03,694 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 36 proven. 120 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:03,694 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:52:03,694 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [436155420] [2022-12-14 15:52:03,694 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [436155420] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:52:03,694 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1999762073] [2022-12-14 15:52:03,694 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:52:03,695 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:52:03,695 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:52:03,695 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:52:03,696 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-12-14 15:52:04,073 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:52:04,073 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:52:04,076 INFO L263 TraceCheckSpWp]: Trace formula consists of 369 conjuncts, 53 conjunts are in the unsatisfiable core [2022-12-14 15:52:04,078 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:52:04,085 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:52:04,085 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:52:04,279 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 49 proven. 107 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:04,279 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:52:04,744 INFO L134 CoverageAnalysis]: Checked inductivity of 156 backedges. 49 proven. 107 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:04,744 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1999762073] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:52:04,745 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1378822798] [2022-12-14 15:52:04,746 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:52:04,746 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:52:04,746 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:52:04,746 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:52:04,746 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:52:04,766 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:04,768 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:52:04,787 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:52:04,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:04,842 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:04,869 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:04,892 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:04,912 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:52:04,912 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:52:05,056 INFO L321 Elim1Store]: treesize reduction 161, result has 23.7 percent of original size [2022-12-14 15:52:05,057 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 207 treesize of output 218 [2022-12-14 15:52:05,149 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:05,149 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:05,189 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:05,189 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:05,194 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:52:05,939 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7008#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:52:05,939 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:52:05,940 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:52:05,940 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 20, 20] total 49 [2022-12-14 15:52:05,940 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1963027377] [2022-12-14 15:52:05,940 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:52:05,940 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 50 states [2022-12-14 15:52:05,940 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:52:05,940 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2022-12-14 15:52:05,941 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=389, Invalid=2917, Unknown=0, NotChecked=0, Total=3306 [2022-12-14 15:52:05,941 INFO L87 Difference]: Start difference. First operand 48 states and 49 transitions. Second operand has 50 states, 49 states have (on average 2.2653061224489797) internal successors, (111), 50 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:06,431 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:52:06,431 INFO L93 Difference]: Finished difference Result 53 states and 54 transitions. [2022-12-14 15:52:06,431 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-12-14 15:52:06,431 INFO L78 Accepts]: Start accepts. Automaton has has 50 states, 49 states have (on average 2.2653061224489797) internal successors, (111), 50 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-12-14 15:52:06,431 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:52:06,431 INFO L225 Difference]: With dead ends: 53 [2022-12-14 15:52:06,431 INFO L226 Difference]: Without dead ends: 53 [2022-12-14 15:52:06,432 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 96 SyntacticMatches, 0 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1341 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=774, Invalid=3918, Unknown=0, NotChecked=0, Total=4692 [2022-12-14 15:52:06,432 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 321 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 685 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 321 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 686 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 685 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 15:52:06,432 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [321 Valid, 1 Invalid, 686 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 685 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 15:52:06,432 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2022-12-14 15:52:06,433 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 50. [2022-12-14 15:52:06,433 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50 states, 48 states have (on average 1.0625) internal successors, (51), 49 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:06,433 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50 states to 50 states and 51 transitions. [2022-12-14 15:52:06,433 INFO L78 Accepts]: Start accepts. Automaton has 50 states and 51 transitions. Word has length 45 [2022-12-14 15:52:06,433 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:52:06,433 INFO L495 AbstractCegarLoop]: Abstraction has 50 states and 51 transitions. [2022-12-14 15:52:06,433 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 50 states, 49 states have (on average 2.2653061224489797) internal successors, (111), 50 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:06,433 INFO L276 IsEmpty]: Start isEmpty. Operand 50 states and 51 transitions. [2022-12-14 15:52:06,434 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-12-14 15:52:06,434 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:52:06,434 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 8, 1, 1, 1, 1, 1] [2022-12-14 15:52:06,441 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-12-14 15:52:06,634 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable33 [2022-12-14 15:52:06,635 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:52:06,636 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:52:06,636 INFO L85 PathProgramCache]: Analyzing trace with hash 889306394, now seen corresponding path program 8 times [2022-12-14 15:52:06,636 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:52:06,636 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1669874482] [2022-12-14 15:52:06,637 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:52:06,637 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:52:06,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:52:07,302 INFO L134 CoverageAnalysis]: Checked inductivity of 164 backedges. 36 proven. 128 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:07,303 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:52:07,303 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1669874482] [2022-12-14 15:52:07,303 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1669874482] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:52:07,303 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1103465457] [2022-12-14 15:52:07,303 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:52:07,303 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:52:07,303 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:52:07,304 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:52:07,304 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-12-14 15:52:08,008 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 9 check-sat command(s) [2022-12-14 15:52:08,008 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:52:08,012 INFO L263 TraceCheckSpWp]: Trace formula consists of 375 conjuncts, 82 conjunts are in the unsatisfiable core [2022-12-14 15:52:08,014 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:52:08,050 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:52:08,053 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 15:52:08,665 INFO L134 CoverageAnalysis]: Checked inductivity of 164 backedges. 43 proven. 121 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:08,665 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:52:09,334 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:09,371 INFO L134 CoverageAnalysis]: Checked inductivity of 164 backedges. 64 proven. 100 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:09,371 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1103465457] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:52:09,371 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [34337139] [2022-12-14 15:52:09,372 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:52:09,372 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:52:09,372 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:52:09,372 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:52:09,372 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:52:09,391 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:09,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:52:09,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:09,445 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:09,461 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:09,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:09,542 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:09,556 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:52:09,556 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:52:09,598 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:09,599 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:09,636 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:09,637 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:09,647 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:52:10,516 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7474#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:52:10,516 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:52:10,516 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:52:10,516 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 21, 20] total 61 [2022-12-14 15:52:10,516 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1625042405] [2022-12-14 15:52:10,516 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:52:10,517 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 63 states [2022-12-14 15:52:10,517 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:52:10,517 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 63 interpolants. [2022-12-14 15:52:10,517 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=421, Invalid=4549, Unknown=0, NotChecked=0, Total=4970 [2022-12-14 15:52:10,518 INFO L87 Difference]: Start difference. First operand 50 states and 51 transitions. Second operand has 63 states, 62 states have (on average 2.225806451612903) internal successors, (138), 62 states have internal predecessors, (138), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:12,124 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:52:12,124 INFO L93 Difference]: Finished difference Result 52 states and 53 transitions. [2022-12-14 15:52:12,124 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-12-14 15:52:12,124 INFO L78 Accepts]: Start accepts. Automaton has has 63 states, 62 states have (on average 2.225806451612903) internal successors, (138), 62 states have internal predecessors, (138), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 46 [2022-12-14 15:52:12,124 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:52:12,124 INFO L225 Difference]: With dead ends: 52 [2022-12-14 15:52:12,124 INFO L226 Difference]: Without dead ends: 52 [2022-12-14 15:52:12,125 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 87 SyntacticMatches, 0 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2070 ImplicationChecksByTransitivity, 3.4s TimeCoverageRelationStatistics Valid=1339, Invalid=8167, Unknown=0, NotChecked=0, Total=9506 [2022-12-14 15:52:12,125 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 395 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 924 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 395 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 934 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 924 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 15:52:12,125 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [395 Valid, 0 Invalid, 934 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 924 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 15:52:12,126 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52 states. [2022-12-14 15:52:12,126 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52 to 51. [2022-12-14 15:52:12,126 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 49 states have (on average 1.0612244897959184) internal successors, (52), 50 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:12,126 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 52 transitions. [2022-12-14 15:52:12,126 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 52 transitions. Word has length 46 [2022-12-14 15:52:12,126 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:52:12,127 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 52 transitions. [2022-12-14 15:52:12,127 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 63 states, 62 states have (on average 2.225806451612903) internal successors, (138), 62 states have internal predecessors, (138), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:12,127 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 52 transitions. [2022-12-14 15:52:12,127 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-12-14 15:52:12,127 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:52:12,127 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 8, 8, 1, 1, 1, 1, 1] [2022-12-14 15:52:12,132 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Ended with exit code 0 [2022-12-14 15:52:12,328 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable34,26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:52:12,328 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:52:12,329 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:52:12,329 INFO L85 PathProgramCache]: Analyzing trace with hash -75046976, now seen corresponding path program 16 times [2022-12-14 15:52:12,330 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:52:12,330 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [271193816] [2022-12-14 15:52:12,330 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:52:12,330 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:52:12,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:52:13,047 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 9 proven. 172 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:13,047 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:52:13,048 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [271193816] [2022-12-14 15:52:13,048 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [271193816] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:52:13,048 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [293786640] [2022-12-14 15:52:13,048 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:52:13,048 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:52:13,048 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:52:13,049 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:52:13,049 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-12-14 15:52:13,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:52:13,168 INFO L263 TraceCheckSpWp]: Trace formula consists of 392 conjuncts, 102 conjunts are in the unsatisfiable core [2022-12-14 15:52:13,171 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:52:13,176 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:52:13,430 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:13,472 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 15:52:13,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:13,507 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:13,514 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:13,522 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:13,530 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:13,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:13,546 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:13,571 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 15:52:13,573 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 9 proven. 172 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:13,573 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:52:13,625 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1427 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1427) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-12-14 15:52:13,675 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1427 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1427) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2022-12-14 15:52:13,770 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1427 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_1427) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ 7 |c_ULTIMATE.start_cstrcpy_~from#1.offset|)) 0)) is different from false [2022-12-14 15:52:13,824 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:52:13,824 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 15:52:13,827 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:52:13,827 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 15:52:13,955 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 9 proven. 109 refuted. 0 times theorem prover too weak. 0 trivial. 63 not checked. [2022-12-14 15:52:13,955 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [293786640] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:52:13,955 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2042084674] [2022-12-14 15:52:13,956 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:52:13,957 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:52:13,957 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:52:13,957 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:52:13,957 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:52:13,975 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:13,977 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:52:13,994 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:52:14,019 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:14,041 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:14,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:14,100 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:14,117 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:52:14,117 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:52:14,210 INFO L321 Elim1Store]: treesize reduction 159, result has 14.5 percent of original size [2022-12-14 15:52:14,210 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 2 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 8 case distinctions, treesize of input 207 treesize of output 202 [2022-12-14 15:52:14,274 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:14,274 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:14,313 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:14,313 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:14,319 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:52:15,142 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7967#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:52:15,142 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:52:15,142 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:52:15,142 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 24, 24] total 46 [2022-12-14 15:52:15,142 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [630346672] [2022-12-14 15:52:15,143 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:52:15,143 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2022-12-14 15:52:15,143 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:52:15,143 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2022-12-14 15:52:15,144 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=148, Invalid=2355, Unknown=59, NotChecked=300, Total=2862 [2022-12-14 15:52:15,144 INFO L87 Difference]: Start difference. First operand 51 states and 52 transitions. Second operand has 46 states, 46 states have (on average 2.152173913043478) internal successors, (99), 46 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:16,190 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:52:16,190 INFO L93 Difference]: Finished difference Result 82 states and 83 transitions. [2022-12-14 15:52:16,190 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-12-14 15:52:16,190 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 46 states have (on average 2.152173913043478) internal successors, (99), 46 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 48 [2022-12-14 15:52:16,190 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:52:16,191 INFO L225 Difference]: With dead ends: 82 [2022-12-14 15:52:16,191 INFO L226 Difference]: Without dead ends: 54 [2022-12-14 15:52:16,191 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 188 GetRequests, 118 SyntacticMatches, 6 SemanticMatches, 64 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 634 ImplicationChecksByTransitivity, 2.1s TimeCoverageRelationStatistics Valid=227, Invalid=3631, Unknown=60, NotChecked=372, Total=4290 [2022-12-14 15:52:16,192 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 23 mSDsluCounter, 58 mSDsCounter, 0 mSdLazyCounter, 1394 mSolverCounterSat, 9 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 23 SdHoareTripleChecker+Valid, 61 SdHoareTripleChecker+Invalid, 1546 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 1394 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 142 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-12-14 15:52:16,192 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [23 Valid, 61 Invalid, 1546 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 1394 Invalid, 1 Unknown, 142 Unchecked, 0.6s Time] [2022-12-14 15:52:16,192 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2022-12-14 15:52:16,192 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 53. [2022-12-14 15:52:16,193 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 51 states have (on average 1.0588235294117647) internal successors, (54), 52 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:16,193 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 54 transitions. [2022-12-14 15:52:16,193 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 54 transitions. Word has length 48 [2022-12-14 15:52:16,193 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:52:16,193 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 54 transitions. [2022-12-14 15:52:16,193 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 46 states have (on average 2.152173913043478) internal successors, (99), 46 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:16,193 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 54 transitions. [2022-12-14 15:52:16,193 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-12-14 15:52:16,193 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:52:16,193 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 9, 9, 1, 1, 1, 1, 1] [2022-12-14 15:52:16,198 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Ended with exit code 0 [2022-12-14 15:52:16,394 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2022-12-14 15:52:16,395 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:52:16,395 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:52:16,395 INFO L85 PathProgramCache]: Analyzing trace with hash 1189914698, now seen corresponding path program 17 times [2022-12-14 15:52:16,396 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:52:16,396 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [769077906] [2022-12-14 15:52:16,396 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:52:16,397 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:52:16,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:52:16,922 INFO L134 CoverageAnalysis]: Checked inductivity of 198 backedges. 49 proven. 149 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:16,922 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:52:16,922 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [769077906] [2022-12-14 15:52:16,922 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [769077906] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:52:16,922 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [284206637] [2022-12-14 15:52:16,922 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:52:16,922 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:52:16,922 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:52:16,923 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:52:16,924 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-12-14 15:52:17,546 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 10 check-sat command(s) [2022-12-14 15:52:17,546 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:52:17,549 INFO L263 TraceCheckSpWp]: Trace formula consists of 405 conjuncts, 50 conjunts are in the unsatisfiable core [2022-12-14 15:52:17,550 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:52:17,558 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:52:17,558 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:52:18,007 INFO L134 CoverageAnalysis]: Checked inductivity of 198 backedges. 64 proven. 134 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:18,008 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:52:18,709 INFO L134 CoverageAnalysis]: Checked inductivity of 198 backedges. 64 proven. 134 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:18,709 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [284206637] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:52:18,709 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [420515993] [2022-12-14 15:52:18,710 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:52:18,710 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:52:18,710 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:52:18,710 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:52:18,711 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:52:18,732 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:18,733 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:52:18,759 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:52:18,795 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:18,827 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:18,859 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:18,884 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:18,908 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:52:18,909 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:52:19,033 INFO L321 Elim1Store]: treesize reduction 169, result has 12.9 percent of original size [2022-12-14 15:52:19,033 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 212 treesize of output 209 [2022-12-14 15:52:19,123 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:19,124 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:19,160 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:19,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:19,166 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:52:19,887 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8495#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:52:19,887 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:52:19,887 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:52:19,888 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 22, 22] total 63 [2022-12-14 15:52:19,888 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [816503352] [2022-12-14 15:52:19,888 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:52:19,888 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 64 states [2022-12-14 15:52:19,888 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:52:19,889 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 64 interpolants. [2022-12-14 15:52:19,889 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=656, Invalid=4456, Unknown=0, NotChecked=0, Total=5112 [2022-12-14 15:52:19,889 INFO L87 Difference]: Start difference. First operand 53 states and 54 transitions. Second operand has 64 states, 63 states have (on average 2.3492063492063493) internal successors, (148), 64 states have internal predecessors, (148), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:20,390 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:52:20,390 INFO L93 Difference]: Finished difference Result 58 states and 59 transitions. [2022-12-14 15:52:20,390 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-12-14 15:52:20,390 INFO L78 Accepts]: Start accepts. Automaton has has 64 states, 63 states have (on average 2.3492063492063493) internal successors, (148), 64 states have internal predecessors, (148), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-12-14 15:52:20,391 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:52:20,391 INFO L225 Difference]: With dead ends: 58 [2022-12-14 15:52:20,391 INFO L226 Difference]: Without dead ends: 58 [2022-12-14 15:52:20,391 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 99 SyntacticMatches, 0 SemanticMatches, 82 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2269 ImplicationChecksByTransitivity, 2.1s TimeCoverageRelationStatistics Valid=1187, Invalid=5785, Unknown=0, NotChecked=0, Total=6972 [2022-12-14 15:52:20,391 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 313 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 684 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 313 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 685 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 684 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 15:52:20,392 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [313 Valid, 1 Invalid, 685 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 684 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 15:52:20,392 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2022-12-14 15:52:20,392 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 55. [2022-12-14 15:52:20,392 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55 states, 53 states have (on average 1.0566037735849056) internal successors, (56), 54 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:20,393 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 56 transitions. [2022-12-14 15:52:20,393 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 56 transitions. Word has length 50 [2022-12-14 15:52:20,393 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:52:20,393 INFO L495 AbstractCegarLoop]: Abstraction has 55 states and 56 transitions. [2022-12-14 15:52:20,393 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 64 states, 63 states have (on average 2.3492063492063493) internal successors, (148), 64 states have internal predecessors, (148), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:20,393 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 56 transitions. [2022-12-14 15:52:20,393 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-12-14 15:52:20,393 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:52:20,393 INFO L195 NwaCegarLoop]: trace histogram [10, 9, 9, 9, 9, 1, 1, 1, 1, 1] [2022-12-14 15:52:20,398 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2022-12-14 15:52:20,594 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-12-14 15:52:20,594 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:52:20,595 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:52:20,596 INFO L85 PathProgramCache]: Analyzing trace with hash -1767350039, now seen corresponding path program 9 times [2022-12-14 15:52:20,596 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:52:20,596 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1246688390] [2022-12-14 15:52:20,596 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:52:20,597 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:52:20,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:52:21,247 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 49 proven. 158 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:21,247 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:52:21,247 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1246688390] [2022-12-14 15:52:21,247 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1246688390] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:52:21,247 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [976394204] [2022-12-14 15:52:21,247 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:52:21,247 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:52:21,247 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:52:21,248 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:52:21,249 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-12-14 15:52:21,617 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:52:21,617 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:52:21,621 INFO L263 TraceCheckSpWp]: Trace formula consists of 411 conjuncts, 99 conjunts are in the unsatisfiable core [2022-12-14 15:52:21,623 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:52:21,651 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:21,651 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-12-14 15:52:21,653 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:52:22,895 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 64 proven. 143 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:22,896 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:52:23,962 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:24,028 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 81 proven. 126 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:24,028 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [976394204] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:52:24,028 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1443050071] [2022-12-14 15:52:24,030 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:52:24,030 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:52:24,030 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:52:24,030 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:52:24,030 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:52:24,049 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:24,051 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:52:24,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:24,098 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:24,111 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:24,141 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:24,172 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:24,194 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:52:24,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:52:24,242 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:24,243 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:24,277 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:24,277 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:24,283 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:52:25,299 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9007#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:52:25,299 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:52:25,299 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:52:25,300 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 21, 22] total 65 [2022-12-14 15:52:25,300 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [33924215] [2022-12-14 15:52:25,300 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:52:25,300 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 67 states [2022-12-14 15:52:25,300 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:52:25,301 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 67 interpolants. [2022-12-14 15:52:25,301 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=525, Invalid=5025, Unknown=0, NotChecked=0, Total=5550 [2022-12-14 15:52:25,301 INFO L87 Difference]: Start difference. First operand 55 states and 56 transitions. Second operand has 67 states, 66 states have (on average 2.3181818181818183) internal successors, (153), 66 states have internal predecessors, (153), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:26,981 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:52:26,981 INFO L93 Difference]: Finished difference Result 57 states and 58 transitions. [2022-12-14 15:52:26,981 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-12-14 15:52:26,981 INFO L78 Accepts]: Start accepts. Automaton has has 67 states, 66 states have (on average 2.3181818181818183) internal successors, (153), 66 states have internal predecessors, (153), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-12-14 15:52:26,981 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:52:26,982 INFO L225 Difference]: With dead ends: 57 [2022-12-14 15:52:26,982 INFO L226 Difference]: Without dead ends: 57 [2022-12-14 15:52:26,982 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 195 GetRequests, 100 SyntacticMatches, 0 SemanticMatches, 95 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2219 ImplicationChecksByTransitivity, 4.2s TimeCoverageRelationStatistics Valid=1373, Invalid=7939, Unknown=0, NotChecked=0, Total=9312 [2022-12-14 15:52:26,982 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 194 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1167 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 194 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 1169 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 1167 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-12-14 15:52:26,982 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [194 Valid, 0 Invalid, 1169 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 1167 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-12-14 15:52:26,983 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-12-14 15:52:26,983 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 56. [2022-12-14 15:52:26,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 54 states have (on average 1.0555555555555556) internal successors, (57), 55 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:26,983 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 57 transitions. [2022-12-14 15:52:26,983 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 57 transitions. Word has length 51 [2022-12-14 15:52:26,983 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:52:26,984 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 57 transitions. [2022-12-14 15:52:26,984 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 67 states, 66 states have (on average 2.3181818181818183) internal successors, (153), 66 states have internal predecessors, (153), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:26,984 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 57 transitions. [2022-12-14 15:52:26,984 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-12-14 15:52:26,984 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:52:26,984 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 10, 9, 9, 1, 1, 1, 1, 1] [2022-12-14 15:52:26,989 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-12-14 15:52:27,185 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-12-14 15:52:27,185 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:52:27,186 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:52:27,186 INFO L85 PathProgramCache]: Analyzing trace with hash -1911305265, now seen corresponding path program 18 times [2022-12-14 15:52:27,186 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:52:27,187 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [531081546] [2022-12-14 15:52:27,187 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:52:27,187 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:52:27,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:52:27,991 INFO L134 CoverageAnalysis]: Checked inductivity of 226 backedges. 10 proven. 216 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:27,991 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:52:27,991 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [531081546] [2022-12-14 15:52:27,991 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [531081546] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:52:27,991 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [447957774] [2022-12-14 15:52:27,991 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:52:27,991 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:52:27,991 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:52:27,992 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:52:27,993 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-12-14 15:52:28,359 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:52:28,359 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:52:28,363 INFO L263 TraceCheckSpWp]: Trace formula consists of 428 conjuncts, 137 conjunts are in the unsatisfiable core [2022-12-14 15:52:28,367 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:52:28,672 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 15:52:28,739 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:28,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-12-14 15:52:28,803 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:28,803 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-12-14 15:52:28,867 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:28,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-12-14 15:52:28,930 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:28,931 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-12-14 15:52:28,993 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:28,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-12-14 15:52:29,047 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:29,047 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-12-14 15:52:29,105 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:29,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-12-14 15:52:29,188 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:29,188 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-12-14 15:52:29,278 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:29,278 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 20 [2022-12-14 15:52:29,392 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:29,393 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:52:29,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-12-14 15:52:29,396 INFO L134 CoverageAnalysis]: Checked inductivity of 226 backedges. 10 proven. 216 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:29,396 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:52:31,737 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 1210 treesize of output 1162 [2022-12-14 15:52:34,294 INFO L134 CoverageAnalysis]: Checked inductivity of 226 backedges. 10 proven. 216 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:34,294 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [447957774] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:52:34,294 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1821460227] [2022-12-14 15:52:34,295 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:52:34,295 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:52:34,295 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:52:34,295 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:52:34,295 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:52:34,309 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:34,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:52:34,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:52:34,362 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:34,385 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:34,414 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:34,440 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:34,460 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:52:34,460 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:52:34,533 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:34,616 INFO L321 Elim1Store]: treesize reduction 167, result has 22.3 percent of original size [2022-12-14 15:52:34,616 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 225 [2022-12-14 15:52:34,716 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:34,716 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:34,762 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:34,762 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:34,772 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:52:36,141 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9555#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:52:36,141 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:52:36,141 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:52:36,141 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 26, 27] total 71 [2022-12-14 15:52:36,141 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [572153970] [2022-12-14 15:52:36,141 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:52:36,142 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 71 states [2022-12-14 15:52:36,142 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:52:36,142 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 71 interpolants. [2022-12-14 15:52:36,143 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=214, Invalid=5948, Unknown=0, NotChecked=0, Total=6162 [2022-12-14 15:52:36,143 INFO L87 Difference]: Start difference. First operand 56 states and 57 transitions. Second operand has 71 states, 71 states have (on average 2.112676056338028) internal successors, (150), 71 states have internal predecessors, (150), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:38,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:52:38,579 INFO L93 Difference]: Finished difference Result 90 states and 91 transitions. [2022-12-14 15:52:38,580 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-12-14 15:52:38,580 INFO L78 Accepts]: Start accepts. Automaton has has 71 states, 71 states have (on average 2.112676056338028) internal successors, (150), 71 states have internal predecessors, (150), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-12-14 15:52:38,580 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:52:38,580 INFO L225 Difference]: With dead ends: 90 [2022-12-14 15:52:38,580 INFO L226 Difference]: Without dead ends: 59 [2022-12-14 15:52:38,580 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 222 GetRequests, 107 SyntacticMatches, 7 SemanticMatches, 108 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1509 ImplicationChecksByTransitivity, 6.8s TimeCoverageRelationStatistics Valid=500, Invalid=11490, Unknown=0, NotChecked=0, Total=11990 [2022-12-14 15:52:38,581 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 157 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 1988 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 157 SdHoareTripleChecker+Valid, 79 SdHoareTripleChecker+Invalid, 1999 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 1988 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 15:52:38,581 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [157 Valid, 79 Invalid, 1999 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 1988 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-12-14 15:52:38,581 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-12-14 15:52:38,582 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 58. [2022-12-14 15:52:38,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58 states, 56 states have (on average 1.0535714285714286) internal successors, (59), 57 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:38,582 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58 states to 58 states and 59 transitions. [2022-12-14 15:52:38,582 INFO L78 Accepts]: Start accepts. Automaton has 58 states and 59 transitions. Word has length 53 [2022-12-14 15:52:38,582 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:52:38,582 INFO L495 AbstractCegarLoop]: Abstraction has 58 states and 59 transitions. [2022-12-14 15:52:38,582 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 71 states, 71 states have (on average 2.112676056338028) internal successors, (150), 71 states have internal predecessors, (150), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:38,582 INFO L276 IsEmpty]: Start isEmpty. Operand 58 states and 59 transitions. [2022-12-14 15:52:38,582 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-12-14 15:52:38,582 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:52:38,582 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 10, 10, 10, 1, 1, 1, 1, 1] [2022-12-14 15:52:38,588 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Ended with exit code 0 [2022-12-14 15:52:38,783 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable38,30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:52:38,784 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:52:38,784 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:52:38,784 INFO L85 PathProgramCache]: Analyzing trace with hash -829961851, now seen corresponding path program 19 times [2022-12-14 15:52:38,785 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:52:38,785 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [101859165] [2022-12-14 15:52:38,785 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:52:38,785 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:52:38,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:52:39,318 INFO L134 CoverageAnalysis]: Checked inductivity of 245 backedges. 64 proven. 181 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:39,318 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:52:39,318 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [101859165] [2022-12-14 15:52:39,318 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [101859165] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:52:39,318 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [438348469] [2022-12-14 15:52:39,318 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:52:39,318 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:52:39,319 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:52:39,319 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:52:39,320 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-12-14 15:52:39,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:52:39,427 INFO L263 TraceCheckSpWp]: Trace formula consists of 441 conjuncts, 62 conjunts are in the unsatisfiable core [2022-12-14 15:52:39,429 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:52:39,690 INFO L134 CoverageAnalysis]: Checked inductivity of 245 backedges. 81 proven. 164 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:39,690 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:52:40,012 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 15:52:40,150 INFO L134 CoverageAnalysis]: Checked inductivity of 245 backedges. 81 proven. 164 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:40,150 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [438348469] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:52:40,150 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1793653770] [2022-12-14 15:52:40,151 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:52:40,151 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:52:40,151 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:52:40,152 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:52:40,152 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:52:40,171 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:40,173 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:52:40,192 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:40,227 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:40,244 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:40,271 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:40,310 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:40,329 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:52:40,329 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:52:40,387 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:40,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:40,428 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:40,428 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:40,442 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:52:41,418 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10146#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= 0 |#NULL.offset|) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:52:41,418 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:52:41,419 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:52:41,419 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 24, 24] total 48 [2022-12-14 15:52:41,419 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [38375734] [2022-12-14 15:52:41,419 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:52:41,419 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-12-14 15:52:41,419 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:52:41,420 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-12-14 15:52:41,420 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=352, Invalid=2840, Unknown=0, NotChecked=0, Total=3192 [2022-12-14 15:52:41,420 INFO L87 Difference]: Start difference. First operand 58 states and 59 transitions. Second operand has 49 states, 48 states have (on average 2.3541666666666665) internal successors, (113), 49 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:41,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:52:41,853 INFO L93 Difference]: Finished difference Result 63 states and 64 transitions. [2022-12-14 15:52:41,853 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-12-14 15:52:41,854 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 48 states have (on average 2.3541666666666665) internal successors, (113), 49 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2022-12-14 15:52:41,854 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:52:41,854 INFO L225 Difference]: With dead ends: 63 [2022-12-14 15:52:41,854 INFO L226 Difference]: Without dead ends: 63 [2022-12-14 15:52:41,855 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 199 GetRequests, 120 SyntacticMatches, 11 SemanticMatches, 68 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1675 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=755, Invalid=4075, Unknown=0, NotChecked=0, Total=4830 [2022-12-14 15:52:41,855 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 293 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 977 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 293 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 978 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 977 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 15:52:41,855 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [293 Valid, 3 Invalid, 978 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 977 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 15:52:41,855 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2022-12-14 15:52:41,856 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 60. [2022-12-14 15:52:41,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60 states, 58 states have (on average 1.0517241379310345) internal successors, (61), 59 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:41,857 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 61 transitions. [2022-12-14 15:52:41,857 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 61 transitions. Word has length 55 [2022-12-14 15:52:41,857 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:52:41,857 INFO L495 AbstractCegarLoop]: Abstraction has 60 states and 61 transitions. [2022-12-14 15:52:41,857 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 48 states have (on average 2.3541666666666665) internal successors, (113), 49 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:41,857 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 61 transitions. [2022-12-14 15:52:41,858 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-12-14 15:52:41,858 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:52:41,858 INFO L195 NwaCegarLoop]: trace histogram [11, 10, 10, 10, 10, 1, 1, 1, 1, 1] [2022-12-14 15:52:41,863 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Forceful destruction successful, exit code 0 [2022-12-14 15:52:42,058 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-12-14 15:52:42,059 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:52:42,060 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:52:42,060 INFO L85 PathProgramCache]: Analyzing trace with hash 40986382, now seen corresponding path program 10 times [2022-12-14 15:52:42,060 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:52:42,061 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [778802172] [2022-12-14 15:52:42,061 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:52:42,061 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:52:42,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:52:42,882 INFO L134 CoverageAnalysis]: Checked inductivity of 255 backedges. 64 proven. 191 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:42,882 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:52:42,882 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [778802172] [2022-12-14 15:52:42,882 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [778802172] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:52:42,882 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1463723784] [2022-12-14 15:52:42,883 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:52:42,883 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:52:42,883 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:52:42,883 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:52:42,884 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-12-14 15:52:43,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:52:43,024 INFO L263 TraceCheckSpWp]: Trace formula consists of 447 conjuncts, 80 conjunts are in the unsatisfiable core [2022-12-14 15:52:43,026 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:52:43,058 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:43,059 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-12-14 15:52:43,060 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:52:44,372 INFO L134 CoverageAnalysis]: Checked inductivity of 255 backedges. 81 proven. 174 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:44,372 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:52:45,538 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:45,593 INFO L134 CoverageAnalysis]: Checked inductivity of 255 backedges. 100 proven. 155 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:45,594 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1463723784] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:52:45,594 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [940781388] [2022-12-14 15:52:45,594 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:52:45,595 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:52:45,595 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:52:45,595 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:52:45,595 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:52:45,613 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:45,615 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:52:45,641 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:52:45,676 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:45,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:45,724 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:45,746 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:45,764 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:52:45,765 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:52:45,834 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:45,883 INFO L321 Elim1Store]: treesize reduction 175, result has 20.1 percent of original size [2022-12-14 15:52:45,883 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 217 treesize of output 226 [2022-12-14 15:52:46,022 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:46,022 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:46,060 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:46,060 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:46,069 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:52:46,929 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10707#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:52:46,929 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:52:46,929 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:52:46,930 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 23, 25] total 72 [2022-12-14 15:52:46,930 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1006700861] [2022-12-14 15:52:46,930 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:52:46,930 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 74 states [2022-12-14 15:52:46,930 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:52:46,930 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 74 interpolants. [2022-12-14 15:52:46,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=687, Invalid=5955, Unknown=0, NotChecked=0, Total=6642 [2022-12-14 15:52:46,931 INFO L87 Difference]: Start difference. First operand 60 states and 61 transitions. Second operand has 74 states, 73 states have (on average 2.3013698630136985) internal successors, (168), 73 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:48,499 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:52:48,499 INFO L93 Difference]: Finished difference Result 62 states and 63 transitions. [2022-12-14 15:52:48,499 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-12-14 15:52:48,499 INFO L78 Accepts]: Start accepts. Automaton has has 74 states, 73 states have (on average 2.3013698630136985) internal successors, (168), 73 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2022-12-14 15:52:48,499 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:52:48,500 INFO L225 Difference]: With dead ends: 62 [2022-12-14 15:52:48,500 INFO L226 Difference]: Without dead ends: 62 [2022-12-14 15:52:48,500 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 214 GetRequests, 110 SyntacticMatches, 0 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2735 ImplicationChecksByTransitivity, 4.2s TimeCoverageRelationStatistics Valid=1700, Invalid=9430, Unknown=0, NotChecked=0, Total=11130 [2022-12-14 15:52:48,501 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 366 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1106 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 366 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 1108 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 1106 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 15:52:48,501 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [366 Valid, 0 Invalid, 1108 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 1106 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 15:52:48,501 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-12-14 15:52:48,502 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 61. [2022-12-14 15:52:48,502 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 59 states have (on average 1.0508474576271187) internal successors, (62), 60 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:48,503 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 62 transitions. [2022-12-14 15:52:48,503 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 62 transitions. Word has length 56 [2022-12-14 15:52:48,503 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:52:48,503 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 62 transitions. [2022-12-14 15:52:48,503 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 74 states, 73 states have (on average 2.3013698630136985) internal successors, (168), 73 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:48,503 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 62 transitions. [2022-12-14 15:52:48,503 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-12-14 15:52:48,503 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:52:48,504 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 10, 10, 1, 1, 1, 1, 1] [2022-12-14 15:52:48,509 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Forceful destruction successful, exit code 0 [2022-12-14 15:52:48,704 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable40 [2022-12-14 15:52:48,705 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:52:48,705 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:52:48,706 INFO L85 PathProgramCache]: Analyzing trace with hash 733207732, now seen corresponding path program 20 times [2022-12-14 15:52:48,706 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:52:48,706 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [583052890] [2022-12-14 15:52:48,706 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:52:48,707 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:52:48,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:52:49,575 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 11 proven. 265 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:49,575 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:52:49,576 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [583052890] [2022-12-14 15:52:49,576 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [583052890] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:52:49,576 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [838565880] [2022-12-14 15:52:49,576 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:52:49,576 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:52:49,576 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:52:49,577 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:52:49,577 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-12-14 15:52:50,832 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 12 check-sat command(s) [2022-12-14 15:52:50,832 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:52:50,838 INFO L263 TraceCheckSpWp]: Trace formula consists of 464 conjuncts, 152 conjunts are in the unsatisfiable core [2022-12-14 15:52:50,841 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:52:50,846 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:52:51,221 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 15:52:51,278 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:51,338 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:51,398 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:51,457 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:51,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:51,586 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:51,647 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:51,706 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:51,768 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:51,831 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:52:51,879 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:51,880 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:52:51,880 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-12-14 15:52:51,882 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 11 proven. 265 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:51,882 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:52:51,909 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2018 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_2018) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 1)) 0)) is different from false [2022-12-14 15:52:52,151 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2018 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_2018) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 6)) 0)) is different from false [2022-12-14 15:52:52,214 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2018 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_2018) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 8)) 0)) is different from false [2022-12-14 15:52:52,219 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2018 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_2018) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 9)) 0)) is different from false [2022-12-14 15:52:52,298 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:52:52,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 15:52:52,302 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:52:52,302 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 15:52:52,304 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 15:52:52,728 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 11 proven. 170 refuted. 0 times theorem prover too weak. 0 trivial. 95 not checked. [2022-12-14 15:52:52,728 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [838565880] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:52:52,728 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [974957740] [2022-12-14 15:52:52,729 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:52:52,729 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:52:52,729 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:52:52,729 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:52:52,729 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:52:52,747 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:52,749 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:52:52,775 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:52:52,809 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:52,836 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:52,863 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:52,886 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:52,901 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:52:52,901 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:52:53,007 INFO L321 Elim1Store]: treesize reduction 165, result has 13.2 percent of original size [2022-12-14 15:52:53,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 219 treesize of output 214 [2022-12-14 15:52:53,084 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:53,085 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:53,120 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:53,120 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:53,130 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:52:53,970 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11303#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:52:53,970 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:52:53,970 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:52:53,971 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 27, 28] total 75 [2022-12-14 15:52:53,971 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [630945359] [2022-12-14 15:52:53,971 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:52:53,971 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 75 states [2022-12-14 15:52:53,971 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:52:53,971 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 75 interpolants. [2022-12-14 15:52:53,972 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=252, Invalid=5849, Unknown=77, NotChecked=628, Total=6806 [2022-12-14 15:52:53,972 INFO L87 Difference]: Start difference. First operand 61 states and 62 transitions. Second operand has 75 states, 75 states have (on average 2.2) internal successors, (165), 75 states have internal predecessors, (165), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:55,546 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:52:55,546 INFO L93 Difference]: Finished difference Result 98 states and 99 transitions. [2022-12-14 15:52:55,547 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2022-12-14 15:52:55,547 INFO L78 Accepts]: Start accepts. Automaton has has 75 states, 75 states have (on average 2.2) internal successors, (165), 75 states have internal predecessors, (165), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2022-12-14 15:52:55,547 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:52:55,547 INFO L225 Difference]: With dead ends: 98 [2022-12-14 15:52:55,547 INFO L226 Difference]: Without dead ends: 64 [2022-12-14 15:52:55,548 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 232 GetRequests, 128 SyntacticMatches, 1 SemanticMatches, 103 ConstructedPredicates, 4 IntricatePredicates, 0 DeprecatedPredicates, 2260 ImplicationChecksByTransitivity, 3.3s TimeCoverageRelationStatistics Valid=468, Invalid=9570, Unknown=78, NotChecked=804, Total=10920 [2022-12-14 15:52:55,548 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 69 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 2273 mSolverCounterSat, 11 mSolverCounterUnsat, 10 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 89 SdHoareTripleChecker+Invalid, 2535 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 2273 IncrementalHoareTripleChecker+Invalid, 10 IncrementalHoareTripleChecker+Unknown, 241 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-12-14 15:52:55,548 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 89 Invalid, 2535 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 2273 Invalid, 10 Unknown, 241 Unchecked, 0.7s Time] [2022-12-14 15:52:55,548 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2022-12-14 15:52:55,549 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 63. [2022-12-14 15:52:55,549 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 61 states have (on average 1.0491803278688525) internal successors, (64), 62 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:55,549 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 64 transitions. [2022-12-14 15:52:55,549 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 64 transitions. Word has length 58 [2022-12-14 15:52:55,549 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:52:55,549 INFO L495 AbstractCegarLoop]: Abstraction has 63 states and 64 transitions. [2022-12-14 15:52:55,549 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 75 states, 75 states have (on average 2.2) internal successors, (165), 75 states have internal predecessors, (165), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:52:55,549 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 64 transitions. [2022-12-14 15:52:55,549 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-12-14 15:52:55,550 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:52:55,550 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 11, 11, 1, 1, 1, 1, 1] [2022-12-14 15:52:55,555 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Ended with exit code 0 [2022-12-14 15:52:55,750 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable41 [2022-12-14 15:52:55,751 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:52:55,751 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:52:55,751 INFO L85 PathProgramCache]: Analyzing trace with hash 734527678, now seen corresponding path program 21 times [2022-12-14 15:52:55,752 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:52:55,752 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [53163073] [2022-12-14 15:52:55,752 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:52:55,752 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:52:55,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:52:56,335 INFO L134 CoverageAnalysis]: Checked inductivity of 297 backedges. 81 proven. 216 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:56,335 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:52:56,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [53163073] [2022-12-14 15:52:56,335 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [53163073] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:52:56,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1096367663] [2022-12-14 15:52:56,335 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:52:56,335 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:52:56,335 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:52:56,336 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:52:56,337 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-12-14 15:52:57,097 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:52:57,097 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:52:57,101 INFO L263 TraceCheckSpWp]: Trace formula consists of 477 conjuncts, 68 conjunts are in the unsatisfiable core [2022-12-14 15:52:57,102 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:52:57,110 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:52:57,110 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:52:57,378 INFO L134 CoverageAnalysis]: Checked inductivity of 297 backedges. 100 proven. 197 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:57,378 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:52:58,143 INFO L134 CoverageAnalysis]: Checked inductivity of 297 backedges. 100 proven. 197 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:52:58,143 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1096367663] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:52:58,143 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [226403276] [2022-12-14 15:52:58,144 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:52:58,144 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:52:58,145 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:52:58,145 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:52:58,145 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:52:58,163 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:52:58,165 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:52:58,194 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:58,233 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:58,249 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:58,288 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:52:58,325 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:52:58,345 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:52:58,345 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:52:58,405 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:58,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:58,465 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:52:58,465 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:52:58,481 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:52:59,846 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11936#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= 0 |#NULL.offset|) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:52:59,846 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:52:59,846 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:52:59,846 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 26, 26] total 64 [2022-12-14 15:52:59,846 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [550270861] [2022-12-14 15:52:59,846 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:52:59,846 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 65 states [2022-12-14 15:52:59,846 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:52:59,847 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 65 interpolants. [2022-12-14 15:52:59,847 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=623, Invalid=4633, Unknown=0, NotChecked=0, Total=5256 [2022-12-14 15:52:59,847 INFO L87 Difference]: Start difference. First operand 63 states and 64 transitions. Second operand has 65 states, 64 states have (on average 2.296875) internal successors, (147), 65 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:00,464 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:53:00,464 INFO L93 Difference]: Finished difference Result 68 states and 69 transitions. [2022-12-14 15:53:00,464 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-12-14 15:53:00,464 INFO L78 Accepts]: Start accepts. Automaton has has 65 states, 64 states have (on average 2.296875) internal successors, (147), 65 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 60 [2022-12-14 15:53:00,464 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:53:00,465 INFO L225 Difference]: With dead ends: 68 [2022-12-14 15:53:00,465 INFO L226 Difference]: Without dead ends: 68 [2022-12-14 15:53:00,465 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 217 GetRequests, 132 SyntacticMatches, 0 SemanticMatches, 85 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2202 ImplicationChecksByTransitivity, 2.6s TimeCoverageRelationStatistics Valid=1260, Invalid=6222, Unknown=0, NotChecked=0, Total=7482 [2022-12-14 15:53:00,465 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 273 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 1042 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 273 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 1043 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1042 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 15:53:00,465 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [273 Valid, 3 Invalid, 1043 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1042 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 15:53:00,465 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2022-12-14 15:53:00,466 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 65. [2022-12-14 15:53:00,466 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65 states, 63 states have (on average 1.0476190476190477) internal successors, (66), 64 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:00,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65 states to 65 states and 66 transitions. [2022-12-14 15:53:00,466 INFO L78 Accepts]: Start accepts. Automaton has 65 states and 66 transitions. Word has length 60 [2022-12-14 15:53:00,466 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:53:00,466 INFO L495 AbstractCegarLoop]: Abstraction has 65 states and 66 transitions. [2022-12-14 15:53:00,467 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 65 states, 64 states have (on average 2.296875) internal successors, (147), 65 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:00,467 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 66 transitions. [2022-12-14 15:53:00,467 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-12-14 15:53:00,467 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:53:00,467 INFO L195 NwaCegarLoop]: trace histogram [12, 11, 11, 11, 11, 1, 1, 1, 1, 1] [2022-12-14 15:53:00,473 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Ended with exit code 0 [2022-12-14 15:53:00,667 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable42 [2022-12-14 15:53:00,668 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:53:00,669 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:53:00,669 INFO L85 PathProgramCache]: Analyzing trace with hash 1295521525, now seen corresponding path program 11 times [2022-12-14 15:53:00,669 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:53:00,669 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1649120985] [2022-12-14 15:53:00,670 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:53:00,670 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:53:00,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:53:01,624 INFO L134 CoverageAnalysis]: Checked inductivity of 308 backedges. 81 proven. 227 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:01,624 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:53:01,624 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1649120985] [2022-12-14 15:53:01,624 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1649120985] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:53:01,624 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1150875575] [2022-12-14 15:53:01,625 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:53:01,625 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:53:01,625 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:53:01,625 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:53:01,626 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-12-14 15:53:02,452 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 12 check-sat command(s) [2022-12-14 15:53:02,452 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:53:02,456 INFO L263 TraceCheckSpWp]: Trace formula consists of 483 conjuncts, 82 conjunts are in the unsatisfiable core [2022-12-14 15:53:02,458 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:53:02,503 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:53:02,509 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 15:53:03,569 INFO L134 CoverageAnalysis]: Checked inductivity of 308 backedges. 91 proven. 217 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:03,569 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:53:04,796 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:53:04,842 INFO L134 CoverageAnalysis]: Checked inductivity of 308 backedges. 121 proven. 187 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:04,842 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1150875575] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:53:04,843 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [614298110] [2022-12-14 15:53:04,843 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:53:04,844 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:53:04,844 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:53:04,844 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:53:04,844 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:53:04,861 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:04,862 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:53:04,888 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:04,915 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:04,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:04,972 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:04,999 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:53:05,018 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:53:05,019 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:53:05,092 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:53:05,092 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:53:05,144 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:53:05,144 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:53:05,164 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:53:06,687 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12546#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= 0 |#NULL.offset|) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:53:06,687 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:53:06,687 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:53:06,687 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26, 27, 26] total 79 [2022-12-14 15:53:06,687 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1062784414] [2022-12-14 15:53:06,688 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:53:06,688 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 81 states [2022-12-14 15:53:06,688 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:53:06,688 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 81 interpolants. [2022-12-14 15:53:06,689 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=658, Invalid=7174, Unknown=0, NotChecked=0, Total=7832 [2022-12-14 15:53:06,689 INFO L87 Difference]: Start difference. First operand 65 states and 66 transitions. Second operand has 81 states, 80 states have (on average 2.2875) internal successors, (183), 80 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:08,834 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:53:08,834 INFO L93 Difference]: Finished difference Result 67 states and 68 transitions. [2022-12-14 15:53:08,834 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2022-12-14 15:53:08,834 INFO L78 Accepts]: Start accepts. Automaton has has 81 states, 80 states have (on average 2.2875) internal successors, (183), 80 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 61 [2022-12-14 15:53:08,835 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:53:08,835 INFO L225 Difference]: With dead ends: 67 [2022-12-14 15:53:08,835 INFO L226 Difference]: Without dead ends: 67 [2022-12-14 15:53:08,835 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 243 GetRequests, 120 SyntacticMatches, 0 SemanticMatches, 123 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3453 ImplicationChecksByTransitivity, 5.5s TimeCoverageRelationStatistics Valid=2221, Invalid=13279, Unknown=0, NotChecked=0, Total=15500 [2022-12-14 15:53:08,836 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 474 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1269 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 474 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 1293 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 1269 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 15:53:08,836 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [474 Valid, 0 Invalid, 1293 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 1269 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 15:53:08,836 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2022-12-14 15:53:08,836 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 66. [2022-12-14 15:53:08,837 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 64 states have (on average 1.046875) internal successors, (67), 65 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:08,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 67 transitions. [2022-12-14 15:53:08,837 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 67 transitions. Word has length 61 [2022-12-14 15:53:08,837 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:53:08,837 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 67 transitions. [2022-12-14 15:53:08,837 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 81 states, 80 states have (on average 2.2875) internal successors, (183), 80 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:08,837 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 67 transitions. [2022-12-14 15:53:08,837 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-12-14 15:53:08,837 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:53:08,837 INFO L195 NwaCegarLoop]: trace histogram [12, 12, 12, 11, 11, 1, 1, 1, 1, 1] [2022-12-14 15:53:08,844 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Ended with exit code 0 [2022-12-14 15:53:09,038 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 35 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable43 [2022-12-14 15:53:09,039 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:53:09,039 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:53:09,039 INFO L85 PathProgramCache]: Analyzing trace with hash -544330021, now seen corresponding path program 22 times [2022-12-14 15:53:09,040 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:53:09,040 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1467847788] [2022-12-14 15:53:09,040 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:53:09,041 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:53:09,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:53:10,022 INFO L134 CoverageAnalysis]: Checked inductivity of 331 backedges. 12 proven. 319 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:10,022 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:53:10,022 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1467847788] [2022-12-14 15:53:10,022 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1467847788] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:53:10,022 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [436013012] [2022-12-14 15:53:10,022 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:53:10,022 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:53:10,023 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:53:10,023 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:53:10,024 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Waiting until timeout for monitored process [2022-12-14 15:53:10,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:53:10,176 INFO L263 TraceCheckSpWp]: Trace formula consists of 500 conjuncts, 129 conjunts are in the unsatisfiable core [2022-12-14 15:53:10,180 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:53:10,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:53:10,652 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:10,722 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 15:53:10,761 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:53:10,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:53:10,783 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:53:10,794 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:53:10,804 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:53:10,816 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:53:10,827 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:53:10,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:53:10,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:53:10,860 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:53:10,905 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 15:53:10,908 INFO L134 CoverageAnalysis]: Checked inductivity of 331 backedges. 12 proven. 319 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:10,908 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:53:10,984 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2349 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_2349) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-12-14 15:53:10,992 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2349 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_2349) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2022-12-14 15:53:11,000 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2349 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_2349) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2022-12-14 15:53:11,082 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2349 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_2349) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 6)) 0)) is different from false [2022-12-14 15:53:11,241 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2349 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_2349) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 9)) 0)) is different from false [2022-12-14 15:53:11,403 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:53:11,403 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 15:53:11,407 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:53:11,407 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 15:53:11,618 INFO L134 CoverageAnalysis]: Checked inductivity of 331 backedges. 12 proven. 184 refuted. 0 times theorem prover too weak. 0 trivial. 135 not checked. [2022-12-14 15:53:11,618 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [436013012] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:53:11,618 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1827263763] [2022-12-14 15:53:11,619 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:53:11,619 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:53:11,619 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:53:11,619 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:53:11,620 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:53:11,639 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:11,641 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:53:11,664 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:11,692 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:11,711 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:11,753 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:11,790 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:53:11,809 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:53:11,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:53:11,857 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:53:11,857 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:53:11,895 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:53:11,895 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:53:11,904 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:53:12,662 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13189#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:53:12,662 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:53:12,662 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:53:12,662 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [29, 30, 30] total 58 [2022-12-14 15:53:12,663 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1405607183] [2022-12-14 15:53:12,663 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:53:12,663 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 58 states [2022-12-14 15:53:12,663 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:53:12,663 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 58 interpolants. [2022-12-14 15:53:12,664 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=176, Invalid=3417, Unknown=87, NotChecked=610, Total=4290 [2022-12-14 15:53:12,664 INFO L87 Difference]: Start difference. First operand 66 states and 67 transitions. Second operand has 58 states, 58 states have (on average 2.2241379310344827) internal successors, (129), 58 states have internal predecessors, (129), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:14,418 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:53:14,418 INFO L93 Difference]: Finished difference Result 106 states and 107 transitions. [2022-12-14 15:53:14,418 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2022-12-14 15:53:14,418 INFO L78 Accepts]: Start accepts. Automaton has has 58 states, 58 states have (on average 2.2241379310344827) internal successors, (129), 58 states have internal predecessors, (129), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 63 [2022-12-14 15:53:14,418 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:53:14,419 INFO L225 Difference]: With dead ends: 106 [2022-12-14 15:53:14,419 INFO L226 Difference]: Without dead ends: 69 [2022-12-14 15:53:14,419 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 252 GetRequests, 160 SyntacticMatches, 3 SemanticMatches, 89 ConstructedPredicates, 5 IntricatePredicates, 0 DeprecatedPredicates, 1039 ImplicationChecksByTransitivity, 3.0s TimeCoverageRelationStatistics Valid=384, Invalid=6859, Unknown=87, NotChecked=860, Total=8190 [2022-12-14 15:53:14,420 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 112 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 2360 mSolverCounterSat, 12 mSolverCounterUnsat, 90 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 112 SdHoareTripleChecker+Valid, 91 SdHoareTripleChecker+Invalid, 2762 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 2360 IncrementalHoareTripleChecker+Invalid, 90 IncrementalHoareTripleChecker+Unknown, 300 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-12-14 15:53:14,420 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [112 Valid, 91 Invalid, 2762 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 2360 Invalid, 90 Unknown, 300 Unchecked, 0.9s Time] [2022-12-14 15:53:14,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2022-12-14 15:53:14,421 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 68. [2022-12-14 15:53:14,421 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 66 states have (on average 1.0454545454545454) internal successors, (69), 67 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:14,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 69 transitions. [2022-12-14 15:53:14,421 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 69 transitions. Word has length 63 [2022-12-14 15:53:14,421 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:53:14,421 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 69 transitions. [2022-12-14 15:53:14,422 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 58 states, 58 states have (on average 2.2241379310344827) internal successors, (129), 58 states have internal predecessors, (129), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:14,422 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 69 transitions. [2022-12-14 15:53:14,422 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-12-14 15:53:14,422 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:53:14,422 INFO L195 NwaCegarLoop]: trace histogram [12, 12, 12, 12, 12, 1, 1, 1, 1, 1] [2022-12-14 15:53:14,428 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Ended with exit code 0 [2022-12-14 15:53:14,622 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 36 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable44 [2022-12-14 15:53:14,623 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:53:14,624 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:53:14,624 INFO L85 PathProgramCache]: Analyzing trace with hash 1266745617, now seen corresponding path program 23 times [2022-12-14 15:53:14,624 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:53:14,624 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [576937530] [2022-12-14 15:53:14,625 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:53:14,625 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:53:14,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:53:15,469 INFO L134 CoverageAnalysis]: Checked inductivity of 354 backedges. 100 proven. 254 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:15,469 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:53:15,469 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [576937530] [2022-12-14 15:53:15,469 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [576937530] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:53:15,469 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [986290992] [2022-12-14 15:53:15,469 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:53:15,469 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:53:15,469 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:53:15,470 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:53:15,471 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Waiting until timeout for monitored process [2022-12-14 15:53:16,343 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 13 check-sat command(s) [2022-12-14 15:53:16,343 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:53:16,347 INFO L263 TraceCheckSpWp]: Trace formula consists of 513 conjuncts, 61 conjunts are in the unsatisfiable core [2022-12-14 15:53:16,349 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:53:16,977 INFO L134 CoverageAnalysis]: Checked inductivity of 354 backedges. 121 proven. 233 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:16,977 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:53:17,482 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-12-14 15:53:17,719 INFO L134 CoverageAnalysis]: Checked inductivity of 354 backedges. 121 proven. 233 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:17,719 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [986290992] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:53:17,720 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1051193421] [2022-12-14 15:53:17,720 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:53:17,721 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:53:17,721 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:53:17,721 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:53:17,721 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:53:17,737 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:17,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:53:17,760 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:53:17,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:17,817 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:17,847 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:17,872 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:53:17,890 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:53:17,890 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:53:17,962 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:53:18,029 INFO L321 Elim1Store]: treesize reduction 171, result has 20.5 percent of original size [2022-12-14 15:53:18,030 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 221 [2022-12-14 15:53:18,157 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:53:18,157 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:53:18,198 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:53:18,198 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:53:18,206 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:53:18,908 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13874#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:53:18,908 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:53:18,908 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:53:18,909 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 28, 28] total 68 [2022-12-14 15:53:18,909 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [90148821] [2022-12-14 15:53:18,909 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:53:18,909 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 69 states [2022-12-14 15:53:18,909 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:53:18,910 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 69 interpolants. [2022-12-14 15:53:18,910 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=792, Invalid=5060, Unknown=0, NotChecked=0, Total=5852 [2022-12-14 15:53:18,910 INFO L87 Difference]: Start difference. First operand 68 states and 69 transitions. Second operand has 69 states, 68 states have (on average 2.4558823529411766) internal successors, (167), 69 states have internal predecessors, (167), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:19,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:53:19,707 INFO L93 Difference]: Finished difference Result 73 states and 74 transitions. [2022-12-14 15:53:19,707 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-12-14 15:53:19,707 INFO L78 Accepts]: Start accepts. Automaton has has 69 states, 68 states have (on average 2.4558823529411766) internal successors, (167), 69 states have internal predecessors, (167), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 65 [2022-12-14 15:53:19,708 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:53:19,708 INFO L225 Difference]: With dead ends: 73 [2022-12-14 15:53:19,708 INFO L226 Difference]: Without dead ends: 73 [2022-12-14 15:53:19,708 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 235 GetRequests, 132 SyntacticMatches, 13 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3216 ImplicationChecksByTransitivity, 2.7s TimeCoverageRelationStatistics Valid=1443, Invalid=6929, Unknown=0, NotChecked=0, Total=8372 [2022-12-14 15:53:19,708 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 290 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 926 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 290 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 927 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 926 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 15:53:19,709 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [290 Valid, 1 Invalid, 927 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 926 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 15:53:19,709 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2022-12-14 15:53:19,709 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 70. [2022-12-14 15:53:19,709 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 68 states have (on average 1.0441176470588236) internal successors, (71), 69 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:19,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 71 transitions. [2022-12-14 15:53:19,710 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 71 transitions. Word has length 65 [2022-12-14 15:53:19,710 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:53:19,710 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 71 transitions. [2022-12-14 15:53:19,710 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 69 states, 68 states have (on average 2.4558823529411766) internal successors, (167), 69 states have internal predecessors, (167), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:19,710 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 71 transitions. [2022-12-14 15:53:19,711 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-12-14 15:53:19,711 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:53:19,711 INFO L195 NwaCegarLoop]: trace histogram [13, 12, 12, 12, 12, 1, 1, 1, 1, 1] [2022-12-14 15:53:19,717 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Ended with exit code 0 [2022-12-14 15:53:19,911 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable45,37 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:53:19,912 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:53:19,912 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:53:19,912 INFO L85 PathProgramCache]: Analyzing trace with hash 614408450, now seen corresponding path program 12 times [2022-12-14 15:53:19,913 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:53:19,913 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1991895394] [2022-12-14 15:53:19,913 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:53:19,914 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:53:19,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:53:21,023 INFO L134 CoverageAnalysis]: Checked inductivity of 366 backedges. 100 proven. 266 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:21,023 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:53:21,023 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1991895394] [2022-12-14 15:53:21,023 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1991895394] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:53:21,023 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [625182392] [2022-12-14 15:53:21,023 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:53:21,023 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:53:21,024 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:53:21,024 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:53:21,025 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-12-14 15:53:21,617 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:53:21,617 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:53:21,622 INFO L263 TraceCheckSpWp]: Trace formula consists of 519 conjuncts, 92 conjunts are in the unsatisfiable core [2022-12-14 15:53:21,624 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:53:21,666 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:21,666 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-12-14 15:53:21,668 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:53:23,580 INFO L134 CoverageAnalysis]: Checked inductivity of 366 backedges. 121 proven. 245 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:23,580 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:53:25,013 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:53:25,077 INFO L134 CoverageAnalysis]: Checked inductivity of 366 backedges. 144 proven. 222 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:25,077 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [625182392] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:53:25,078 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [289111066] [2022-12-14 15:53:25,078 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:53:25,078 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:53:25,078 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:53:25,079 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:53:25,079 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:53:25,095 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:25,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:53:25,114 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:53:25,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:25,165 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:25,188 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:25,216 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:53:25,239 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:53:25,240 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:53:25,302 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:53:25,367 INFO L321 Elim1Store]: treesize reduction 171, result has 21.9 percent of original size [2022-12-14 15:53:25,367 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 217 treesize of output 230 [2022-12-14 15:53:25,453 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:53:25,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:53:25,485 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:53:25,485 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:53:25,494 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:53:26,570 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14531#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:53:26,570 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:53:26,570 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:53:26,570 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 27, 29] total 84 [2022-12-14 15:53:26,571 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1668396048] [2022-12-14 15:53:26,571 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:53:26,571 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 86 states [2022-12-14 15:53:26,571 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:53:26,571 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 86 interpolants. [2022-12-14 15:53:26,572 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=901, Invalid=7841, Unknown=0, NotChecked=0, Total=8742 [2022-12-14 15:53:26,572 INFO L87 Difference]: Start difference. First operand 70 states and 71 transitions. Second operand has 86 states, 85 states have (on average 2.3294117647058825) internal successors, (198), 85 states have internal predecessors, (198), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:28,740 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:53:28,740 INFO L93 Difference]: Finished difference Result 72 states and 73 transitions. [2022-12-14 15:53:28,740 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-12-14 15:53:28,740 INFO L78 Accepts]: Start accepts. Automaton has has 86 states, 85 states have (on average 2.3294117647058825) internal successors, (198), 85 states have internal predecessors, (198), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 66 [2022-12-14 15:53:28,740 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:53:28,740 INFO L225 Difference]: With dead ends: 72 [2022-12-14 15:53:28,740 INFO L226 Difference]: Without dead ends: 72 [2022-12-14 15:53:28,741 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 252 GetRequests, 132 SyntacticMatches, 0 SemanticMatches, 120 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3656 ImplicationChecksByTransitivity, 5.8s TimeCoverageRelationStatistics Valid=2265, Invalid=12497, Unknown=0, NotChecked=0, Total=14762 [2022-12-14 15:53:28,741 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 378 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1372 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 378 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 1374 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 1372 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-12-14 15:53:28,741 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [378 Valid, 0 Invalid, 1374 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 1372 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-12-14 15:53:28,741 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2022-12-14 15:53:28,742 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 71. [2022-12-14 15:53:28,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 69 states have (on average 1.0434782608695652) internal successors, (72), 70 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:28,742 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 72 transitions. [2022-12-14 15:53:28,742 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 72 transitions. Word has length 66 [2022-12-14 15:53:28,742 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:53:28,742 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 72 transitions. [2022-12-14 15:53:28,742 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 86 states, 85 states have (on average 2.3294117647058825) internal successors, (198), 85 states have internal predecessors, (198), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:28,742 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 72 transitions. [2022-12-14 15:53:28,743 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-12-14 15:53:28,743 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:53:28,743 INFO L195 NwaCegarLoop]: trace histogram [13, 13, 13, 12, 12, 1, 1, 1, 1, 1] [2022-12-14 15:53:28,749 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Forceful destruction successful, exit code 0 [2022-12-14 15:53:28,943 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 38 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable46 [2022-12-14 15:53:28,944 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:53:28,944 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:53:28,944 INFO L85 PathProgramCache]: Analyzing trace with hash 2036001192, now seen corresponding path program 24 times [2022-12-14 15:53:28,945 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:53:28,945 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [896108113] [2022-12-14 15:53:28,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:53:28,946 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:53:28,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:53:30,124 INFO L134 CoverageAnalysis]: Checked inductivity of 391 backedges. 13 proven. 378 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:30,124 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:53:30,124 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [896108113] [2022-12-14 15:53:30,124 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [896108113] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:53:30,124 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1045779821] [2022-12-14 15:53:30,124 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:53:30,125 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:53:30,125 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:53:30,125 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:53:30,126 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Waiting until timeout for monitored process [2022-12-14 15:53:30,752 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:53:30,752 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:53:30,757 INFO L263 TraceCheckSpWp]: Trace formula consists of 536 conjuncts, 157 conjunts are in the unsatisfiable core [2022-12-14 15:53:30,762 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:53:31,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:31,320 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:31,321 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:53:31,395 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:31,395 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:53:31,474 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:31,474 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:53:31,551 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:31,551 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:53:31,632 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:31,632 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:53:31,715 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:31,715 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:53:31,797 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:31,798 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:53:31,881 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:31,882 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:53:31,969 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:31,970 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:53:32,057 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:32,057 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:53:32,145 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:32,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:53:32,235 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:32,235 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:53:32,380 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:53:32,381 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:53:32,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 15:53:32,384 INFO L134 CoverageAnalysis]: Checked inductivity of 391 backedges. 13 proven. 378 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:32,384 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:53:35,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 167 treesize of output 161 [2022-12-14 15:53:36,929 INFO L134 CoverageAnalysis]: Checked inductivity of 391 backedges. 13 proven. 378 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:36,929 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1045779821] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:53:36,929 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [280451999] [2022-12-14 15:53:36,930 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:53:36,930 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:53:36,931 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:53:36,931 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:53:36,931 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:53:36,954 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:36,956 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:53:36,984 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:53:37,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:37,048 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:37,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:37,111 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:53:37,134 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:53:37,135 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:53:37,207 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:53:37,283 INFO L321 Elim1Store]: treesize reduction 171, result has 21.9 percent of original size [2022-12-14 15:53:37,283 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 217 treesize of output 230 [2022-12-14 15:53:37,494 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:53:37,494 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:53:37,537 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:53:37,538 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:53:37,548 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:53:39,138 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15229#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:53:39,138 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:53:39,138 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:53:39,138 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [31, 32, 33] total 89 [2022-12-14 15:53:39,138 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [616637440] [2022-12-14 15:53:39,138 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:53:39,138 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 89 states [2022-12-14 15:53:39,139 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:53:39,139 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 89 interpolants. [2022-12-14 15:53:39,139 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=259, Invalid=9053, Unknown=0, NotChecked=0, Total=9312 [2022-12-14 15:53:39,139 INFO L87 Difference]: Start difference. First operand 71 states and 72 transitions. Second operand has 89 states, 89 states have (on average 2.191011235955056) internal successors, (195), 89 states have internal predecessors, (195), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:43,706 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:53:43,707 INFO L93 Difference]: Finished difference Result 114 states and 115 transitions. [2022-12-14 15:53:43,707 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 43 states. [2022-12-14 15:53:43,707 INFO L78 Accepts]: Start accepts. Automaton has has 89 states, 89 states have (on average 2.191011235955056) internal successors, (195), 89 states have internal predecessors, (195), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2022-12-14 15:53:43,707 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:53:43,707 INFO L225 Difference]: With dead ends: 114 [2022-12-14 15:53:43,707 INFO L226 Difference]: Without dead ends: 74 [2022-12-14 15:53:43,708 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 285 GetRequests, 140 SyntacticMatches, 10 SemanticMatches, 135 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2205 ImplicationChecksByTransitivity, 10.2s TimeCoverageRelationStatistics Valid=623, Invalid=18009, Unknown=0, NotChecked=0, Total=18632 [2022-12-14 15:53:43,709 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 242 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 3993 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 242 SdHoareTripleChecker+Valid, 109 SdHoareTripleChecker+Invalid, 4008 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 3993 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-12-14 15:53:43,709 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [242 Valid, 109 Invalid, 4008 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 3993 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-12-14 15:53:43,709 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2022-12-14 15:53:43,710 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 73. [2022-12-14 15:53:43,710 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 71 states have (on average 1.0422535211267605) internal successors, (74), 72 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:43,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 74 transitions. [2022-12-14 15:53:43,710 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 74 transitions. Word has length 68 [2022-12-14 15:53:43,710 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:53:43,710 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 74 transitions. [2022-12-14 15:53:43,710 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 89 states, 89 states have (on average 2.191011235955056) internal successors, (195), 89 states have internal predecessors, (195), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:43,710 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 74 transitions. [2022-12-14 15:53:43,711 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2022-12-14 15:53:43,711 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:53:43,711 INFO L195 NwaCegarLoop]: trace histogram [13, 13, 13, 13, 13, 1, 1, 1, 1, 1] [2022-12-14 15:53:43,717 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Ended with exit code 0 [2022-12-14 15:53:43,911 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 39 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable47 [2022-12-14 15:53:43,912 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:53:43,912 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:53:43,913 INFO L85 PathProgramCache]: Analyzing trace with hash 1786841394, now seen corresponding path program 25 times [2022-12-14 15:53:43,913 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:53:43,914 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [749669322] [2022-12-14 15:53:43,914 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:53:43,914 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:53:43,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:53:44,665 INFO L134 CoverageAnalysis]: Checked inductivity of 416 backedges. 121 proven. 295 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:44,665 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:53:44,665 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [749669322] [2022-12-14 15:53:44,666 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [749669322] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:53:44,666 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [844221131] [2022-12-14 15:53:44,666 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:53:44,666 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:53:44,666 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:53:44,667 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:53:44,667 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Waiting until timeout for monitored process [2022-12-14 15:53:44,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:53:44,838 INFO L263 TraceCheckSpWp]: Trace formula consists of 549 conjuncts, 77 conjunts are in the unsatisfiable core [2022-12-14 15:53:44,839 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:53:45,209 INFO L134 CoverageAnalysis]: Checked inductivity of 416 backedges. 144 proven. 272 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:45,209 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:53:45,658 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 15:53:45,828 INFO L134 CoverageAnalysis]: Checked inductivity of 416 backedges. 144 proven. 272 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:45,828 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [844221131] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:53:45,828 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [773732877] [2022-12-14 15:53:45,829 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:53:45,829 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:53:45,829 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:53:45,829 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:53:45,829 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:53:45,852 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:45,853 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:53:45,874 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:53:45,898 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:45,920 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:45,948 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:45,972 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:53:45,986 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:53:45,986 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:53:46,100 INFO L321 Elim1Store]: treesize reduction 169, result has 22.8 percent of original size [2022-12-14 15:53:46,100 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 212 treesize of output 223 [2022-12-14 15:53:46,296 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:53:46,297 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:53:46,343 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:53:46,343 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:53:46,350 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:53:47,182 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15979#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:53:47,182 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:53:47,182 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:53:47,182 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [29, 30, 30] total 60 [2022-12-14 15:53:47,182 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1491079979] [2022-12-14 15:53:47,183 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:53:47,183 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 61 states [2022-12-14 15:53:47,183 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:53:47,183 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 61 interpolants. [2022-12-14 15:53:47,184 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=517, Invalid=4175, Unknown=0, NotChecked=0, Total=4692 [2022-12-14 15:53:47,184 INFO L87 Difference]: Start difference. First operand 73 states and 74 transitions. Second operand has 61 states, 60 states have (on average 2.3833333333333333) internal successors, (143), 61 states have internal predecessors, (143), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:48,047 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:53:48,048 INFO L93 Difference]: Finished difference Result 78 states and 79 transitions. [2022-12-14 15:53:48,048 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-12-14 15:53:48,048 INFO L78 Accepts]: Start accepts. Automaton has has 61 states, 60 states have (on average 2.3833333333333333) internal successors, (143), 61 states have internal predecessors, (143), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 70 [2022-12-14 15:53:48,048 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:53:48,048 INFO L225 Difference]: With dead ends: 78 [2022-12-14 15:53:48,048 INFO L226 Difference]: Without dead ends: 78 [2022-12-14 15:53:48,049 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 253 GetRequests, 156 SyntacticMatches, 14 SemanticMatches, 83 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2575 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=1133, Invalid=6007, Unknown=0, NotChecked=0, Total=7140 [2022-12-14 15:53:48,049 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 355 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 1505 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 355 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 1506 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1505 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-12-14 15:53:48,049 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [355 Valid, 3 Invalid, 1506 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1505 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-12-14 15:53:48,049 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-12-14 15:53:48,050 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 75. [2022-12-14 15:53:48,050 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 73 states have (on average 1.0410958904109588) internal successors, (76), 74 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:48,050 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 76 transitions. [2022-12-14 15:53:48,050 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 76 transitions. Word has length 70 [2022-12-14 15:53:48,051 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:53:48,051 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 76 transitions. [2022-12-14 15:53:48,051 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 61 states, 60 states have (on average 2.3833333333333333) internal successors, (143), 61 states have internal predecessors, (143), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:48,051 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 76 transitions. [2022-12-14 15:53:48,051 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-12-14 15:53:48,051 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:53:48,051 INFO L195 NwaCegarLoop]: trace histogram [14, 13, 13, 13, 13, 1, 1, 1, 1, 1] [2022-12-14 15:53:48,056 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Ended with exit code 0 [2022-12-14 15:53:48,252 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 40 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable48 [2022-12-14 15:53:48,252 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:53:48,253 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:53:48,253 INFO L85 PathProgramCache]: Analyzing trace with hash -442491647, now seen corresponding path program 13 times [2022-12-14 15:53:48,254 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:53:48,254 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1705375830] [2022-12-14 15:53:48,254 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:53:48,254 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:53:48,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:53:49,395 INFO L134 CoverageAnalysis]: Checked inductivity of 429 backedges. 121 proven. 308 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:49,395 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:53:49,395 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1705375830] [2022-12-14 15:53:49,395 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1705375830] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:53:49,395 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1932660210] [2022-12-14 15:53:49,395 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:53:49,395 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:53:49,395 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:53:49,396 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:53:49,397 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Waiting until timeout for monitored process [2022-12-14 15:53:49,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:53:49,599 INFO L263 TraceCheckSpWp]: Trace formula consists of 555 conjuncts, 89 conjunts are in the unsatisfiable core [2022-12-14 15:53:49,601 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:53:49,648 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:49,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 15:53:49,653 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:53:51,048 INFO L134 CoverageAnalysis]: Checked inductivity of 429 backedges. 144 proven. 285 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:51,048 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:53:52,576 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:53:52,646 INFO L134 CoverageAnalysis]: Checked inductivity of 429 backedges. 169 proven. 260 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:52,646 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1932660210] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:53:52,647 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [414769176] [2022-12-14 15:53:52,648 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:53:52,648 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:53:52,648 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:53:52,648 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:53:52,648 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:53:52,669 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:53:52,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:53:52,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:53:52,730 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:52,754 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:52,784 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:53:52,808 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:53:52,827 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:53:52,827 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:53:52,902 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:53:52,978 INFO L321 Elim1Store]: treesize reduction 167, result has 20.9 percent of original size [2022-12-14 15:53:52,978 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 221 [2022-12-14 15:53:53,120 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:53:53,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:53:53,161 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:53:53,161 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:53:53,172 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:53:54,441 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16684#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:53:54,441 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:53:54,442 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:53:54,442 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [30, 30, 30] total 90 [2022-12-14 15:53:54,442 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [997327757] [2022-12-14 15:53:54,442 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:53:54,442 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 92 states [2022-12-14 15:53:54,442 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:53:54,443 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 92 interpolants. [2022-12-14 15:53:54,443 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=717, Invalid=9183, Unknown=0, NotChecked=0, Total=9900 [2022-12-14 15:53:54,443 INFO L87 Difference]: Start difference. First operand 75 states and 76 transitions. Second operand has 92 states, 91 states have (on average 2.340659340659341) internal successors, (213), 91 states have internal predecessors, (213), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:56,737 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:53:56,737 INFO L93 Difference]: Finished difference Result 77 states and 78 transitions. [2022-12-14 15:53:56,737 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-12-14 15:53:56,737 INFO L78 Accepts]: Start accepts. Automaton has has 92 states, 91 states have (on average 2.340659340659341) internal successors, (213), 91 states have internal predecessors, (213), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 71 [2022-12-14 15:53:56,737 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:53:56,737 INFO L225 Difference]: With dead ends: 77 [2022-12-14 15:53:56,738 INFO L226 Difference]: Without dead ends: 77 [2022-12-14 15:53:56,738 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 270 GetRequests, 143 SyntacticMatches, 0 SemanticMatches, 127 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3846 ImplicationChecksByTransitivity, 5.7s TimeCoverageRelationStatistics Valid=2203, Invalid=14309, Unknown=0, NotChecked=0, Total=16512 [2022-12-14 15:53:56,738 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 599 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2432 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 599 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 2442 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 2432 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 15:53:56,738 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [599 Valid, 0 Invalid, 2442 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 2432 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-12-14 15:53:56,739 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2022-12-14 15:53:56,739 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 76. [2022-12-14 15:53:56,739 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 74 states have (on average 1.0405405405405406) internal successors, (77), 75 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:56,739 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 77 transitions. [2022-12-14 15:53:56,740 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 77 transitions. Word has length 71 [2022-12-14 15:53:56,740 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:53:56,740 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 77 transitions. [2022-12-14 15:53:56,740 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 92 states, 91 states have (on average 2.340659340659341) internal successors, (213), 91 states have internal predecessors, (213), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:53:56,740 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 77 transitions. [2022-12-14 15:53:56,740 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-12-14 15:53:56,740 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:53:56,740 INFO L195 NwaCegarLoop]: trace histogram [14, 14, 14, 13, 13, 1, 1, 1, 1, 1] [2022-12-14 15:53:56,745 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Ended with exit code 0 [2022-12-14 15:53:56,940 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable49,41 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:53:56,941 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:53:56,942 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:53:56,942 INFO L85 PathProgramCache]: Analyzing trace with hash -32710169, now seen corresponding path program 26 times [2022-12-14 15:53:56,942 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:53:56,942 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [966082129] [2022-12-14 15:53:56,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:53:56,943 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:53:56,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:53:58,246 INFO L134 CoverageAnalysis]: Checked inductivity of 456 backedges. 14 proven. 442 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:53:58,246 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:53:58,247 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [966082129] [2022-12-14 15:53:58,247 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [966082129] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:53:58,247 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2088625987] [2022-12-14 15:53:58,247 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:53:58,247 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:53:58,247 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:53:58,248 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:53:58,249 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Waiting until timeout for monitored process [2022-12-14 15:54:01,715 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 15 check-sat command(s) [2022-12-14 15:54:01,715 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:54:01,724 INFO L263 TraceCheckSpWp]: Trace formula consists of 572 conjuncts, 151 conjunts are in the unsatisfiable core [2022-12-14 15:54:01,728 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:54:01,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:54:02,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:02,363 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 15:54:02,403 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:02,411 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:02,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:02,424 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:02,431 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:02,441 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:02,452 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:02,462 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:02,471 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:02,482 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:02,492 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:02,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:02,506 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 15:54:02,509 INFO L134 CoverageAnalysis]: Checked inductivity of 456 backedges. 14 proven. 442 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:54:02,509 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:54:03,057 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3091 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3091) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ 7 |c_ULTIMATE.start_cstrcpy_~from#1.offset|)) 0)) is different from false [2022-12-14 15:54:03,220 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3091 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3091) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 10)) 0)) is different from false [2022-12-14 15:54:03,308 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3091 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3091) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 12)) 0)) is different from false [2022-12-14 15:54:03,314 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3091 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3091) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 13)) 0)) is different from false [2022-12-14 15:54:03,320 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:54:03,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 15:54:03,323 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:54:03,323 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 15:54:03,565 INFO L134 CoverageAnalysis]: Checked inductivity of 456 backedges. 14 proven. 304 refuted. 0 times theorem prover too weak. 0 trivial. 138 not checked. [2022-12-14 15:54:03,565 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2088625987] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:54:03,565 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1723364719] [2022-12-14 15:54:03,566 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:54:03,567 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:54:03,567 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:54:03,567 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:54:03,567 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:54:03,587 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:54:03,590 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:54:03,620 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:03,646 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:03,665 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:03,693 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:03,736 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:54:03,753 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:54:03,753 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:54:03,816 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:54:03,816 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:54:03,871 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:54:03,871 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:54:03,882 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:54:05,062 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17401#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:54:05,062 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:54:05,062 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:54:05,063 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [33, 33, 34] total 66 [2022-12-14 15:54:05,063 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [31967090] [2022-12-14 15:54:05,063 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:54:05,063 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 66 states [2022-12-14 15:54:05,063 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:54:05,064 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 66 interpolants. [2022-12-14 15:54:05,064 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=196, Invalid=4489, Unknown=161, NotChecked=556, Total=5402 [2022-12-14 15:54:05,064 INFO L87 Difference]: Start difference. First operand 76 states and 77 transitions. Second operand has 66 states, 66 states have (on average 2.242424242424242) internal successors, (148), 66 states have internal predecessors, (148), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:54:07,158 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:54:07,158 INFO L93 Difference]: Finished difference Result 122 states and 123 transitions. [2022-12-14 15:54:07,158 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2022-12-14 15:54:07,158 INFO L78 Accepts]: Start accepts. Automaton has has 66 states, 66 states have (on average 2.242424242424242) internal successors, (148), 66 states have internal predecessors, (148), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 73 [2022-12-14 15:54:07,158 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:54:07,159 INFO L225 Difference]: With dead ends: 122 [2022-12-14 15:54:07,159 INFO L226 Difference]: Without dead ends: 79 [2022-12-14 15:54:07,159 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 283 GetRequests, 188 SyntacticMatches, 6 SemanticMatches, 89 ConstructedPredicates, 4 IntricatePredicates, 0 DeprecatedPredicates, 1100 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=299, Invalid=7035, Unknown=164, NotChecked=692, Total=8190 [2022-12-14 15:54:07,160 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 12 mSDsluCounter, 94 mSDsCounter, 0 mSdLazyCounter, 3236 mSolverCounterSat, 14 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 3549 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 3236 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 298 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-12-14 15:54:07,160 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [12 Valid, 97 Invalid, 3549 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 3236 Invalid, 1 Unknown, 298 Unchecked, 1.2s Time] [2022-12-14 15:54:07,160 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-12-14 15:54:07,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 78. [2022-12-14 15:54:07,161 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 76 states have (on average 1.0394736842105263) internal successors, (79), 77 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:54:07,161 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 79 transitions. [2022-12-14 15:54:07,161 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 79 transitions. Word has length 73 [2022-12-14 15:54:07,161 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:54:07,161 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 79 transitions. [2022-12-14 15:54:07,161 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 66 states, 66 states have (on average 2.242424242424242) internal successors, (148), 66 states have internal predecessors, (148), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:54:07,161 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 79 transitions. [2022-12-14 15:54:07,161 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2022-12-14 15:54:07,161 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:54:07,161 INFO L195 NwaCegarLoop]: trace histogram [14, 14, 14, 14, 14, 1, 1, 1, 1, 1] [2022-12-14 15:54:07,169 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Ended with exit code 0 [2022-12-14 15:54:07,362 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable50,42 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:54:07,362 INFO L420 AbstractCegarLoop]: === Iteration 52 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:54:07,363 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:54:07,363 INFO L85 PathProgramCache]: Analyzing trace with hash -1503729507, now seen corresponding path program 27 times [2022-12-14 15:54:07,364 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:54:07,364 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [159090049] [2022-12-14 15:54:07,364 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:54:07,364 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:54:07,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:54:08,230 INFO L134 CoverageAnalysis]: Checked inductivity of 483 backedges. 144 proven. 339 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:54:08,230 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:54:08,230 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [159090049] [2022-12-14 15:54:08,230 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [159090049] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:54:08,230 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1923054897] [2022-12-14 15:54:08,230 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:54:08,230 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:54:08,231 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:54:08,231 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:54:08,232 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Waiting until timeout for monitored process [2022-12-14 15:54:09,305 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:54:09,305 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:54:09,310 INFO L263 TraceCheckSpWp]: Trace formula consists of 585 conjuncts, 83 conjunts are in the unsatisfiable core [2022-12-14 15:54:09,312 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:54:09,320 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:54:09,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:54:09,684 INFO L134 CoverageAnalysis]: Checked inductivity of 483 backedges. 169 proven. 314 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:54:09,684 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:54:10,618 INFO L134 CoverageAnalysis]: Checked inductivity of 483 backedges. 169 proven. 314 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:54:10,618 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1923054897] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:54:10,619 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1763865435] [2022-12-14 15:54:10,619 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:54:10,619 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:54:10,619 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:54:10,619 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:54:10,619 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:54:10,641 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:54:10,643 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:54:10,663 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:10,690 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:10,703 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:10,734 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:10,763 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:54:10,782 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:54:10,782 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:54:10,828 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:54:10,828 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:54:10,862 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:54:10,862 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:54:10,868 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:54:11,828 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18170#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:54:11,828 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:54:11,828 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:54:11,828 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [31, 32, 32] total 79 [2022-12-14 15:54:11,828 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1666780943] [2022-12-14 15:54:11,828 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:54:11,829 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 80 states [2022-12-14 15:54:11,829 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:54:11,829 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 80 interpolants. [2022-12-14 15:54:11,829 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=920, Invalid=6736, Unknown=0, NotChecked=0, Total=7656 [2022-12-14 15:54:11,830 INFO L87 Difference]: Start difference. First operand 78 states and 79 transitions. Second operand has 80 states, 79 states have (on average 2.3164556962025316) internal successors, (183), 80 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:54:12,828 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:54:12,828 INFO L93 Difference]: Finished difference Result 83 states and 84 transitions. [2022-12-14 15:54:12,828 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-12-14 15:54:12,829 INFO L78 Accepts]: Start accepts. Automaton has has 80 states, 79 states have (on average 2.3164556962025316) internal successors, (183), 80 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 75 [2022-12-14 15:54:12,829 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:54:12,829 INFO L225 Difference]: With dead ends: 83 [2022-12-14 15:54:12,829 INFO L226 Difference]: Without dead ends: 83 [2022-12-14 15:54:12,830 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 271 GetRequests, 168 SyntacticMatches, 0 SemanticMatches, 103 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3270 ImplicationChecksByTransitivity, 2.7s TimeCoverageRelationStatistics Valid=1872, Invalid=9048, Unknown=0, NotChecked=0, Total=10920 [2022-12-14 15:54:12,830 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 536 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 1831 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 536 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 1832 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1831 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-12-14 15:54:12,830 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [536 Valid, 3 Invalid, 1832 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1831 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-12-14 15:54:12,830 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2022-12-14 15:54:12,831 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 80. [2022-12-14 15:54:12,831 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 78 states have (on average 1.0384615384615385) internal successors, (81), 79 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:54:12,831 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 81 transitions. [2022-12-14 15:54:12,831 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 81 transitions. Word has length 75 [2022-12-14 15:54:12,831 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:54:12,831 INFO L495 AbstractCegarLoop]: Abstraction has 80 states and 81 transitions. [2022-12-14 15:54:12,831 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 80 states, 79 states have (on average 2.3164556962025316) internal successors, (183), 80 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:54:12,831 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 81 transitions. [2022-12-14 15:54:12,832 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2022-12-14 15:54:12,832 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:54:12,832 INFO L195 NwaCegarLoop]: trace histogram [15, 14, 14, 14, 14, 1, 1, 1, 1, 1] [2022-12-14 15:54:12,838 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Ended with exit code 0 [2022-12-14 15:54:13,032 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable51,43 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:54:13,033 INFO L420 AbstractCegarLoop]: === Iteration 53 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:54:13,034 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:54:13,034 INFO L85 PathProgramCache]: Analyzing trace with hash 629025526, now seen corresponding path program 14 times [2022-12-14 15:54:13,034 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:54:13,034 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1033761233] [2022-12-14 15:54:13,035 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:54:13,035 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:54:13,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:54:14,282 INFO L134 CoverageAnalysis]: Checked inductivity of 497 backedges. 144 proven. 353 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:54:14,283 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:54:14,283 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1033761233] [2022-12-14 15:54:14,283 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1033761233] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:54:14,283 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1999581425] [2022-12-14 15:54:14,283 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:54:14,283 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:54:14,283 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:54:14,284 INFO L229 MonitoredProcess]: Starting monitored process 44 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:54:14,285 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Waiting until timeout for monitored process [2022-12-14 15:54:16,778 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 15 check-sat command(s) [2022-12-14 15:54:16,778 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:54:16,786 INFO L263 TraceCheckSpWp]: Trace formula consists of 591 conjuncts, 143 conjunts are in the unsatisfiable core [2022-12-14 15:54:16,789 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:54:16,824 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:54:16,827 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 15:54:18,368 INFO L134 CoverageAnalysis]: Checked inductivity of 497 backedges. 169 proven. 328 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:54:18,368 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:54:19,987 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:54:20,041 INFO L134 CoverageAnalysis]: Checked inductivity of 497 backedges. 172 proven. 325 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:54:20,041 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1999581425] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:54:20,041 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1392809816] [2022-12-14 15:54:20,042 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:54:20,042 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:54:20,042 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:54:20,042 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:54:20,042 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:54:20,058 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:54:20,059 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:54:20,084 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:54:20,115 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:20,138 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:20,168 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:20,189 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:54:20,208 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:54:20,208 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:54:20,282 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:54:20,341 INFO L321 Elim1Store]: treesize reduction 171, result has 21.9 percent of original size [2022-12-14 15:54:20,341 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 217 treesize of output 230 [2022-12-14 15:54:20,439 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:54:20,439 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:54:20,472 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:54:20,472 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:54:20,478 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:54:21,482 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18922#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:54:21,482 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:54:21,482 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:54:21,482 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [32, 31, 32] total 95 [2022-12-14 15:54:21,483 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [597883925] [2022-12-14 15:54:21,483 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:54:21,483 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 97 states [2022-12-14 15:54:21,483 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:54:21,483 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 97 interpolants. [2022-12-14 15:54:21,484 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=994, Invalid=9926, Unknown=0, NotChecked=0, Total=10920 [2022-12-14 15:54:21,484 INFO L87 Difference]: Start difference. First operand 80 states and 81 transitions. Second operand has 97 states, 96 states have (on average 2.375) internal successors, (228), 96 states have internal predecessors, (228), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:54:23,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:54:23,536 INFO L93 Difference]: Finished difference Result 82 states and 83 transitions. [2022-12-14 15:54:23,536 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-12-14 15:54:23,536 INFO L78 Accepts]: Start accepts. Automaton has has 97 states, 96 states have (on average 2.375) internal successors, (228), 96 states have internal predecessors, (228), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 76 [2022-12-14 15:54:23,536 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:54:23,537 INFO L225 Difference]: With dead ends: 82 [2022-12-14 15:54:23,537 INFO L226 Difference]: Without dead ends: 82 [2022-12-14 15:54:23,537 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 289 GetRequests, 155 SyntacticMatches, 0 SemanticMatches, 134 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4925 ImplicationChecksByTransitivity, 5.4s TimeCoverageRelationStatistics Valid=2695, Invalid=15665, Unknown=0, NotChecked=0, Total=18360 [2022-12-14 15:54:23,538 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 479 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2080 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 479 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 2081 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 2080 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-12-14 15:54:23,538 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [479 Valid, 0 Invalid, 2081 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 2080 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-12-14 15:54:23,538 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2022-12-14 15:54:23,539 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 81. [2022-12-14 15:54:23,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 79 states have (on average 1.0379746835443038) internal successors, (82), 80 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:54:23,539 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 82 transitions. [2022-12-14 15:54:23,539 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 82 transitions. Word has length 76 [2022-12-14 15:54:23,539 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:54:23,539 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 82 transitions. [2022-12-14 15:54:23,539 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 97 states, 96 states have (on average 2.375) internal successors, (228), 96 states have internal predecessors, (228), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:54:23,539 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 82 transitions. [2022-12-14 15:54:23,540 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2022-12-14 15:54:23,540 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:54:23,540 INFO L195 NwaCegarLoop]: trace histogram [15, 15, 15, 14, 14, 1, 1, 1, 1, 1] [2022-12-14 15:54:23,547 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Forceful destruction successful, exit code 0 [2022-12-14 15:54:23,740 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 44 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable52 [2022-12-14 15:54:23,741 INFO L420 AbstractCegarLoop]: === Iteration 54 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:54:23,741 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:54:23,742 INFO L85 PathProgramCache]: Analyzing trace with hash -1096857956, now seen corresponding path program 28 times [2022-12-14 15:54:23,742 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:54:23,742 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [627749322] [2022-12-14 15:54:23,742 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:54:23,743 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:54:23,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:54:25,204 INFO L134 CoverageAnalysis]: Checked inductivity of 526 backedges. 15 proven. 511 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:54:25,205 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:54:25,205 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [627749322] [2022-12-14 15:54:25,205 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [627749322] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:54:25,205 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2137164808] [2022-12-14 15:54:25,205 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:54:25,205 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:54:25,205 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:54:25,206 INFO L229 MonitoredProcess]: Starting monitored process 45 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:54:25,206 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Waiting until timeout for monitored process [2022-12-14 15:54:25,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:54:25,420 INFO L263 TraceCheckSpWp]: Trace formula consists of 608 conjuncts, 156 conjunts are in the unsatisfiable core [2022-12-14 15:54:25,423 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:54:25,426 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:54:26,013 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:26,093 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 15:54:26,135 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:26,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:26,153 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:26,163 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:26,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:26,180 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:26,190 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:26,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:26,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:26,217 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:26,227 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:26,235 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:26,245 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:54:26,286 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 15:54:26,289 INFO L134 CoverageAnalysis]: Checked inductivity of 526 backedges. 15 proven. 511 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:54:26,289 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:54:26,460 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3497 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3497) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2022-12-14 15:54:26,535 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3497 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3497) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 5)) 0)) is different from false [2022-12-14 15:54:26,542 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3497 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3497) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 6)) 0)) is different from false [2022-12-14 15:54:26,549 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3497 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3497) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ 7 |c_ULTIMATE.start_cstrcpy_~from#1.offset|)) 0)) is different from false [2022-12-14 15:54:26,556 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3497 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3497) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 8)) 0)) is different from false [2022-12-14 15:54:26,563 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3497 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3497) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 9)) 0)) is different from false [2022-12-14 15:54:26,658 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3497 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3497) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 11)) 0)) is different from false [2022-12-14 15:54:26,664 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3497 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3497) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 12)) 0)) is different from false [2022-12-14 15:54:26,754 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_3497 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_3497) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 14)) 0)) is different from false [2022-12-14 15:54:26,760 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:54:26,760 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 15:54:26,763 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:54:26,763 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 15:54:26,976 INFO L134 CoverageAnalysis]: Checked inductivity of 526 backedges. 15 proven. 241 refuted. 0 times theorem prover too weak. 0 trivial. 270 not checked. [2022-12-14 15:54:26,976 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2137164808] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:54:26,976 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1760249360] [2022-12-14 15:54:26,977 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:54:26,977 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:54:26,977 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:54:26,977 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:54:26,977 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:54:26,997 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:54:27,000 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:54:27,019 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:27,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:27,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:27,100 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:27,138 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:54:27,159 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:54:27,159 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:54:27,220 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:54:27,220 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:54:27,255 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:54:27,255 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:54:27,267 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:54:28,300 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '19687#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:54:28,300 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:54:28,300 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:54:28,300 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [35, 36, 36] total 70 [2022-12-14 15:54:28,300 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [522571191] [2022-12-14 15:54:28,300 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:54:28,300 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 70 states [2022-12-14 15:54:28,300 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:54:28,301 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 70 interpolants. [2022-12-14 15:54:28,301 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=201, Invalid=4436, Unknown=91, NotChecked=1278, Total=6006 [2022-12-14 15:54:28,301 INFO L87 Difference]: Start difference. First operand 81 states and 82 transitions. Second operand has 70 states, 70 states have (on average 2.2714285714285714) internal successors, (159), 70 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:54:30,756 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:54:30,756 INFO L93 Difference]: Finished difference Result 130 states and 131 transitions. [2022-12-14 15:54:30,756 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2022-12-14 15:54:30,756 INFO L78 Accepts]: Start accepts. Automaton has has 70 states, 70 states have (on average 2.2714285714285714) internal successors, (159), 70 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 78 [2022-12-14 15:54:30,756 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:54:30,756 INFO L225 Difference]: With dead ends: 130 [2022-12-14 15:54:30,756 INFO L226 Difference]: Without dead ends: 84 [2022-12-14 15:54:30,757 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 308 GetRequests, 202 SyntacticMatches, 10 SemanticMatches, 96 ConstructedPredicates, 9 IntricatePredicates, 0 DeprecatedPredicates, 1113 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=330, Invalid=7446, Unknown=92, NotChecked=1638, Total=9506 [2022-12-14 15:54:30,757 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 47 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 3114 mSolverCounterSat, 15 mSolverCounterUnsat, 26 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 91 SdHoareTripleChecker+Invalid, 3684 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 3114 IncrementalHoareTripleChecker+Invalid, 26 IncrementalHoareTripleChecker+Unknown, 529 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-12-14 15:54:30,757 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 91 Invalid, 3684 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 3114 Invalid, 26 Unknown, 529 Unchecked, 1.3s Time] [2022-12-14 15:54:30,757 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-12-14 15:54:30,758 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 83. [2022-12-14 15:54:30,758 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83 states, 81 states have (on average 1.037037037037037) internal successors, (84), 82 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:54:30,758 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 84 transitions. [2022-12-14 15:54:30,758 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 84 transitions. Word has length 78 [2022-12-14 15:54:30,758 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:54:30,758 INFO L495 AbstractCegarLoop]: Abstraction has 83 states and 84 transitions. [2022-12-14 15:54:30,758 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 70 states, 70 states have (on average 2.2714285714285714) internal successors, (159), 70 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:54:30,759 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 84 transitions. [2022-12-14 15:54:30,759 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2022-12-14 15:54:30,759 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:54:30,759 INFO L195 NwaCegarLoop]: trace histogram [15, 15, 15, 15, 15, 1, 1, 1, 1, 1] [2022-12-14 15:54:30,764 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Ended with exit code 0 [2022-12-14 15:54:30,959 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 45 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable53 [2022-12-14 15:54:30,960 INFO L420 AbstractCegarLoop]: === Iteration 55 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:54:30,960 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:54:30,961 INFO L85 PathProgramCache]: Analyzing trace with hash -315424346, now seen corresponding path program 29 times [2022-12-14 15:54:30,961 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:54:30,961 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [770364525] [2022-12-14 15:54:30,961 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:54:30,962 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:54:30,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:54:32,040 INFO L134 CoverageAnalysis]: Checked inductivity of 555 backedges. 169 proven. 386 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:54:32,040 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:54:32,040 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [770364525] [2022-12-14 15:54:32,040 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [770364525] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:54:32,040 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1119135339] [2022-12-14 15:54:32,040 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:54:32,041 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:54:32,041 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:54:32,041 INFO L229 MonitoredProcess]: Starting monitored process 46 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:54:32,042 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Waiting until timeout for monitored process [2022-12-14 15:54:38,314 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 16 check-sat command(s) [2022-12-14 15:54:38,314 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:54:38,327 INFO L263 TraceCheckSpWp]: Trace formula consists of 621 conjuncts, 73 conjunts are in the unsatisfiable core [2022-12-14 15:54:38,329 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:54:39,236 INFO L134 CoverageAnalysis]: Checked inductivity of 555 backedges. 196 proven. 359 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:54:39,236 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:54:39,835 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-12-14 15:54:40,090 INFO L134 CoverageAnalysis]: Checked inductivity of 555 backedges. 196 proven. 359 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:54:40,090 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1119135339] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:54:40,090 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1205777703] [2022-12-14 15:54:40,091 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:54:40,091 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:54:40,091 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:54:40,091 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:54:40,091 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:54:40,107 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:54:40,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:54:40,133 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:40,162 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:40,179 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:40,212 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:40,241 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:54:40,258 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:54:40,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:54:40,311 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:54:40,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:54:40,346 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:54:40,346 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:54:40,357 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:54:41,208 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '20513#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:54:41,208 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:54:41,208 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:54:41,208 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [33, 34, 34] total 83 [2022-12-14 15:54:41,208 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1125499582] [2022-12-14 15:54:41,208 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:54:41,208 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 84 states [2022-12-14 15:54:41,208 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:54:41,209 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 84 interpolants. [2022-12-14 15:54:41,209 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1155, Invalid=7217, Unknown=0, NotChecked=0, Total=8372 [2022-12-14 15:54:41,209 INFO L87 Difference]: Start difference. First operand 83 states and 84 transitions. Second operand has 84 states, 83 states have (on average 2.4819277108433737) internal successors, (206), 84 states have internal predecessors, (206), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:54:42,246 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:54:42,246 INFO L93 Difference]: Finished difference Result 88 states and 89 transitions. [2022-12-14 15:54:42,246 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2022-12-14 15:54:42,246 INFO L78 Accepts]: Start accepts. Automaton has has 84 states, 83 states have (on average 2.4819277108433737) internal successors, (206), 84 states have internal predecessors, (206), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 80 [2022-12-14 15:54:42,247 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:54:42,247 INFO L225 Difference]: With dead ends: 88 [2022-12-14 15:54:42,247 INFO L226 Difference]: Without dead ends: 88 [2022-12-14 15:54:42,247 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 289 GetRequests, 165 SyntacticMatches, 16 SemanticMatches, 108 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4710 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=2100, Invalid=9890, Unknown=0, NotChecked=0, Total=11990 [2022-12-14 15:54:42,248 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 510 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1303 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 510 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 1304 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1303 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-12-14 15:54:42,248 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [510 Valid, 1 Invalid, 1304 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1303 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-12-14 15:54:42,248 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2022-12-14 15:54:42,248 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 85. [2022-12-14 15:54:42,249 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 83 states have (on average 1.036144578313253) internal successors, (86), 84 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:54:42,249 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 86 transitions. [2022-12-14 15:54:42,249 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 86 transitions. Word has length 80 [2022-12-14 15:54:42,249 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:54:42,249 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 86 transitions. [2022-12-14 15:54:42,249 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 84 states, 83 states have (on average 2.4819277108433737) internal successors, (206), 84 states have internal predecessors, (206), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:54:42,249 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 86 transitions. [2022-12-14 15:54:42,249 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2022-12-14 15:54:42,249 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:54:42,249 INFO L195 NwaCegarLoop]: trace histogram [16, 15, 15, 15, 15, 1, 1, 1, 1, 1] [2022-12-14 15:54:42,258 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Forceful destruction successful, exit code 0 [2022-12-14 15:54:42,450 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 46 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable54 [2022-12-14 15:54:42,451 INFO L420 AbstractCegarLoop]: === Iteration 56 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:54:42,451 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:54:42,451 INFO L85 PathProgramCache]: Analyzing trace with hash -1188220147, now seen corresponding path program 15 times [2022-12-14 15:54:42,452 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:54:42,452 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1150512180] [2022-12-14 15:54:42,452 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:54:42,452 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:54:42,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:54:43,756 INFO L134 CoverageAnalysis]: Checked inductivity of 570 backedges. 169 proven. 401 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:54:43,756 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:54:43,756 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1150512180] [2022-12-14 15:54:43,756 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1150512180] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:54:43,756 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1802124305] [2022-12-14 15:54:43,756 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:54:43,756 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:54:43,757 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:54:43,757 INFO L229 MonitoredProcess]: Starting monitored process 47 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:54:43,758 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Waiting until timeout for monitored process [2022-12-14 15:54:44,590 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:54:44,590 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:54:44,597 INFO L263 TraceCheckSpWp]: Trace formula consists of 627 conjuncts, 140 conjunts are in the unsatisfiable core [2022-12-14 15:54:44,600 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:54:44,644 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:54:44,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-12-14 15:54:44,647 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:54:47,111 INFO L134 CoverageAnalysis]: Checked inductivity of 570 backedges. 196 proven. 374 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:54:47,111 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:54:49,480 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:54:49,556 INFO L134 CoverageAnalysis]: Checked inductivity of 570 backedges. 225 proven. 345 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:54:49,556 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1802124305] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:54:49,556 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [433947463] [2022-12-14 15:54:49,557 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:54:49,557 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:54:49,557 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:54:49,557 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:54:49,557 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:54:49,575 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:54:49,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:54:49,598 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:49,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:49,641 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:49,669 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:54:49,705 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:54:49,721 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:54:49,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:54:49,772 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:54:49,772 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:54:49,817 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:54:49,817 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:54:49,834 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:54:51,716 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21313#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= 0 |#NULL.offset|) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:54:51,716 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:54:51,716 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:54:51,716 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [34, 33, 34] total 101 [2022-12-14 15:54:51,716 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1556393733] [2022-12-14 15:54:51,716 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:54:51,717 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 103 states [2022-12-14 15:54:51,717 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:54:51,717 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 103 interpolants. [2022-12-14 15:54:51,717 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1128, Invalid=11082, Unknown=0, NotChecked=0, Total=12210 [2022-12-14 15:54:51,718 INFO L87 Difference]: Start difference. First operand 85 states and 86 transitions. Second operand has 103 states, 102 states have (on average 2.3823529411764706) internal successors, (243), 102 states have internal predecessors, (243), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:54:55,029 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:54:55,029 INFO L93 Difference]: Finished difference Result 87 states and 88 transitions. [2022-12-14 15:54:55,029 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-12-14 15:54:55,029 INFO L78 Accepts]: Start accepts. Automaton has has 103 states, 102 states have (on average 2.3823529411764706) internal successors, (243), 102 states have internal predecessors, (243), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 81 [2022-12-14 15:54:55,029 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:54:55,030 INFO L225 Difference]: With dead ends: 87 [2022-12-14 15:54:55,030 INFO L226 Difference]: Without dead ends: 87 [2022-12-14 15:54:55,030 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 308 GetRequests, 166 SyntacticMatches, 0 SemanticMatches, 142 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5035 ImplicationChecksByTransitivity, 8.5s TimeCoverageRelationStatistics Valid=3032, Invalid=17560, Unknown=0, NotChecked=0, Total=20592 [2022-12-14 15:54:55,031 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 615 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2842 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 615 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 2843 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 2842 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:54:55,031 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [615 Valid, 0 Invalid, 2843 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 2842 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-12-14 15:54:55,031 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2022-12-14 15:54:55,032 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 86. [2022-12-14 15:54:55,032 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 84 states have (on average 1.0357142857142858) internal successors, (87), 85 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:54:55,032 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 87 transitions. [2022-12-14 15:54:55,032 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 87 transitions. Word has length 81 [2022-12-14 15:54:55,032 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:54:55,032 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 87 transitions. [2022-12-14 15:54:55,032 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 103 states, 102 states have (on average 2.3823529411764706) internal successors, (243), 102 states have internal predecessors, (243), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:54:55,032 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 87 transitions. [2022-12-14 15:54:55,032 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2022-12-14 15:54:55,032 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:54:55,032 INFO L195 NwaCegarLoop]: trace histogram [16, 16, 16, 15, 15, 1, 1, 1, 1, 1] [2022-12-14 15:54:55,040 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Forceful destruction successful, exit code 0 [2022-12-14 15:54:55,233 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable55,47 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:54:55,233 INFO L420 AbstractCegarLoop]: === Iteration 57 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:54:55,234 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:54:55,234 INFO L85 PathProgramCache]: Analyzing trace with hash 581739763, now seen corresponding path program 30 times [2022-12-14 15:54:55,234 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:54:55,234 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1385732619] [2022-12-14 15:54:55,235 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:54:55,235 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:54:55,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:54:57,044 INFO L134 CoverageAnalysis]: Checked inductivity of 601 backedges. 16 proven. 585 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:54:57,044 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:54:57,045 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1385732619] [2022-12-14 15:54:57,045 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1385732619] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:54:57,045 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1907671515] [2022-12-14 15:54:57,045 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:54:57,045 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:54:57,045 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:54:57,046 INFO L229 MonitoredProcess]: Starting monitored process 48 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:54:57,046 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Waiting until timeout for monitored process [2022-12-14 15:55:00,909 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:55:00,910 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:55:00,920 INFO L263 TraceCheckSpWp]: Trace formula consists of 644 conjuncts, 190 conjunts are in the unsatisfiable core [2022-12-14 15:55:00,927 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:01,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:01,624 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:01,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:55:01,707 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:01,707 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:55:01,794 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:01,794 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:55:01,880 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:01,880 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:55:01,973 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:01,973 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:55:02,074 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:02,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:55:02,171 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:02,171 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:55:02,265 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:02,266 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:55:02,361 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:02,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:55:02,474 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:02,474 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:55:02,576 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:02,576 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:55:02,680 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:02,681 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:55:02,778 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:02,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:55:02,890 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:02,890 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:55:02,979 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:02,979 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 21 [2022-12-14 15:55:03,140 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:03,142 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:55:03,142 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 15:55:03,145 INFO L134 CoverageAnalysis]: Checked inductivity of 601 backedges. 16 proven. 585 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:03,145 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:08,868 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 1210 treesize of output 1162 [2022-12-14 15:55:11,010 INFO L134 CoverageAnalysis]: Checked inductivity of 601 backedges. 16 proven. 585 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:11,010 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1907671515] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:11,010 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1771264467] [2022-12-14 15:55:11,011 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:55:11,011 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:11,011 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:11,011 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:11,011 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:11,027 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:11,028 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:11,049 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:11,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:11,102 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:11,129 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:11,149 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:11,165 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:55:11,165 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:55:11,291 INFO L321 Elim1Store]: treesize reduction 161, result has 23.7 percent of original size [2022-12-14 15:55:11,291 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 215 treesize of output 228 [2022-12-14 15:55:11,460 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:55:11,460 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:55:11,492 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:55:11,492 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:55:11,502 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:12,997 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '22159#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:55:12,997 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:55:12,997 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:12,997 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [37, 38, 39] total 107 [2022-12-14 15:55:12,997 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2043684628] [2022-12-14 15:55:12,997 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:55:12,998 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 107 states [2022-12-14 15:55:12,998 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:12,998 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 107 interpolants. [2022-12-14 15:55:12,998 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=304, Invalid=12806, Unknown=0, NotChecked=0, Total=13110 [2022-12-14 15:55:12,999 INFO L87 Difference]: Start difference. First operand 86 states and 87 transitions. Second operand has 107 states, 107 states have (on average 2.2429906542056073) internal successors, (240), 107 states have internal predecessors, (240), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:18,934 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:18,934 INFO L93 Difference]: Finished difference Result 138 states and 139 transitions. [2022-12-14 15:55:18,934 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2022-12-14 15:55:18,934 INFO L78 Accepts]: Start accepts. Automaton has has 107 states, 107 states have (on average 2.2429906542056073) internal successors, (240), 107 states have internal predecessors, (240), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 83 [2022-12-14 15:55:18,934 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:18,934 INFO L225 Difference]: With dead ends: 138 [2022-12-14 15:55:18,934 INFO L226 Difference]: Without dead ends: 89 [2022-12-14 15:55:18,935 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 348 GetRequests, 173 SyntacticMatches, 13 SemanticMatches, 162 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3027 ImplicationChecksByTransitivity, 14.2s TimeCoverageRelationStatistics Valid=746, Invalid=25986, Unknown=0, NotChecked=0, Total=26732 [2022-12-14 15:55:18,935 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 296 mSDsluCounter, 130 mSDsCounter, 0 mSdLazyCounter, 6116 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 296 SdHoareTripleChecker+Valid, 133 SdHoareTripleChecker+Invalid, 6134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 6116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:18,936 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [296 Valid, 133 Invalid, 6134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 6116 Invalid, 0 Unknown, 0 Unchecked, 2.3s Time] [2022-12-14 15:55:18,936 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2022-12-14 15:55:18,937 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 88. [2022-12-14 15:55:18,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 86 states have (on average 1.0348837209302326) internal successors, (89), 87 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:18,937 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 89 transitions. [2022-12-14 15:55:18,937 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 89 transitions. Word has length 83 [2022-12-14 15:55:18,937 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:18,937 INFO L495 AbstractCegarLoop]: Abstraction has 88 states and 89 transitions. [2022-12-14 15:55:18,937 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 107 states, 107 states have (on average 2.2429906542056073) internal successors, (240), 107 states have internal predecessors, (240), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:18,937 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 89 transitions. [2022-12-14 15:55:18,937 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2022-12-14 15:55:18,937 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:18,937 INFO L195 NwaCegarLoop]: trace histogram [16, 16, 16, 16, 16, 1, 1, 1, 1, 1] [2022-12-14 15:55:18,946 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Ended with exit code 0 [2022-12-14 15:55:19,138 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable56,48 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:19,138 INFO L420 AbstractCegarLoop]: === Iteration 58 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:55:19,138 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:19,138 INFO L85 PathProgramCache]: Analyzing trace with hash 1128677417, now seen corresponding path program 31 times [2022-12-14 15:55:19,138 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:19,138 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1220962151] [2022-12-14 15:55:19,138 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:19,138 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:19,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:20,112 INFO L134 CoverageAnalysis]: Checked inductivity of 632 backedges. 196 proven. 436 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:20,112 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:20,112 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1220962151] [2022-12-14 15:55:20,112 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1220962151] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:20,113 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [71997886] [2022-12-14 15:55:20,113 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:55:20,113 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:20,113 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:20,114 INFO L229 MonitoredProcess]: Starting monitored process 49 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:20,114 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Waiting until timeout for monitored process [2022-12-14 15:55:20,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:20,301 INFO L263 TraceCheckSpWp]: Trace formula consists of 657 conjuncts, 92 conjunts are in the unsatisfiable core [2022-12-14 15:55:20,302 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:20,756 INFO L134 CoverageAnalysis]: Checked inductivity of 632 backedges. 225 proven. 407 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:20,756 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:21,285 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 15:55:21,626 INFO L134 CoverageAnalysis]: Checked inductivity of 632 backedges. 225 proven. 407 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:21,626 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [71997886] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:21,626 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [299293967] [2022-12-14 15:55:21,627 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:55:21,627 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:21,627 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:21,627 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:21,628 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:21,654 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:21,657 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:21,683 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:21,710 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:21,728 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:21,769 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:21,797 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:21,817 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:55:21,818 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:55:21,878 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:55:21,879 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:55:21,918 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:55:21,918 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:55:21,932 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:23,023 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '23068#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:55:23,024 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:55:23,024 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:23,024 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [35, 36, 36] total 72 [2022-12-14 15:55:23,024 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1598690485] [2022-12-14 15:55:23,024 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:55:23,024 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 73 states [2022-12-14 15:55:23,024 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:23,024 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 73 interpolants. [2022-12-14 15:55:23,025 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=718, Invalid=5762, Unknown=0, NotChecked=0, Total=6480 [2022-12-14 15:55:23,025 INFO L87 Difference]: Start difference. First operand 88 states and 89 transitions. Second operand has 73 states, 72 states have (on average 2.4027777777777777) internal successors, (173), 73 states have internal predecessors, (173), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:24,023 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:24,023 INFO L93 Difference]: Finished difference Result 93 states and 94 transitions. [2022-12-14 15:55:24,023 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2022-12-14 15:55:24,023 INFO L78 Accepts]: Start accepts. Automaton has has 73 states, 72 states have (on average 2.4027777777777777) internal successors, (173), 73 states have internal predecessors, (173), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 85 [2022-12-14 15:55:24,023 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:24,024 INFO L225 Difference]: With dead ends: 93 [2022-12-14 15:55:24,024 INFO L226 Difference]: Without dead ends: 93 [2022-12-14 15:55:24,025 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 307 GetRequests, 192 SyntacticMatches, 17 SemanticMatches, 98 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3664 ImplicationChecksByTransitivity, 2.9s TimeCoverageRelationStatistics Valid=1592, Invalid=8308, Unknown=0, NotChecked=0, Total=9900 [2022-12-14 15:55:24,025 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 363 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 2118 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 363 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 2119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 2118 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:24,025 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [363 Valid, 3 Invalid, 2119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 2118 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-12-14 15:55:24,025 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-12-14 15:55:24,027 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 90. [2022-12-14 15:55:24,027 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 88 states have (on average 1.0340909090909092) internal successors, (91), 89 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:24,027 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 91 transitions. [2022-12-14 15:55:24,027 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 91 transitions. Word has length 85 [2022-12-14 15:55:24,027 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:24,027 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 91 transitions. [2022-12-14 15:55:24,027 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 73 states, 72 states have (on average 2.4027777777777777) internal successors, (173), 73 states have internal predecessors, (173), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:24,027 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 91 transitions. [2022-12-14 15:55:24,028 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2022-12-14 15:55:24,028 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:24,028 INFO L195 NwaCegarLoop]: trace histogram [17, 16, 16, 16, 16, 1, 1, 1, 1, 1] [2022-12-14 15:55:24,034 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Forceful destruction successful, exit code 0 [2022-12-14 15:55:24,229 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 49 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable57 [2022-12-14 15:55:24,229 INFO L420 AbstractCegarLoop]: === Iteration 59 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:55:24,230 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:24,230 INFO L85 PathProgramCache]: Analyzing trace with hash 629261546, now seen corresponding path program 16 times [2022-12-14 15:55:24,230 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:24,231 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1223824974] [2022-12-14 15:55:24,231 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:24,231 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:24,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:25,824 INFO L134 CoverageAnalysis]: Checked inductivity of 648 backedges. 196 proven. 452 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:25,824 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:25,824 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1223824974] [2022-12-14 15:55:25,824 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1223824974] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:25,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1186309525] [2022-12-14 15:55:25,825 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:55:25,825 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:25,825 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:25,826 INFO L229 MonitoredProcess]: Starting monitored process 50 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:25,826 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Waiting until timeout for monitored process [2022-12-14 15:55:26,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:26,106 INFO L263 TraceCheckSpWp]: Trace formula consists of 663 conjuncts, 106 conjunts are in the unsatisfiable core [2022-12-14 15:55:26,109 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:26,164 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:26,165 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 15:55:26,167 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:55:27,684 INFO L134 CoverageAnalysis]: Checked inductivity of 648 backedges. 225 proven. 423 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:27,684 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:29,613 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:29,685 INFO L134 CoverageAnalysis]: Checked inductivity of 648 backedges. 256 proven. 392 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:29,685 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1186309525] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:29,685 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [742144979] [2022-12-14 15:55:29,685 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:55:29,685 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:29,686 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:29,686 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:29,686 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:29,702 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:29,704 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:29,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:29,753 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:29,768 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:29,802 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:29,828 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:29,843 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:55:29,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:55:29,897 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:55:29,898 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:55:29,935 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:55:29,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:55:29,947 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:31,173 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '23917#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:55:31,173 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:55:31,173 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:31,173 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [36, 36, 36] total 108 [2022-12-14 15:55:31,173 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1569163854] [2022-12-14 15:55:31,173 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:55:31,173 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 110 states [2022-12-14 15:55:31,173 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:31,174 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 110 interpolants. [2022-12-14 15:55:31,174 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=981, Invalid=12825, Unknown=0, NotChecked=0, Total=13806 [2022-12-14 15:55:31,174 INFO L87 Difference]: Start difference. First operand 90 states and 91 transitions. Second operand has 110 states, 109 states have (on average 2.36697247706422) internal successors, (258), 109 states have internal predecessors, (258), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:34,001 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:34,001 INFO L93 Difference]: Finished difference Result 92 states and 93 transitions. [2022-12-14 15:55:34,001 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2022-12-14 15:55:34,001 INFO L78 Accepts]: Start accepts. Automaton has has 110 states, 109 states have (on average 2.36697247706422) internal successors, (258), 109 states have internal predecessors, (258), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 86 [2022-12-14 15:55:34,002 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:34,002 INFO L225 Difference]: With dead ends: 92 [2022-12-14 15:55:34,002 INFO L226 Difference]: Without dead ends: 92 [2022-12-14 15:55:34,003 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 327 GetRequests, 176 SyntacticMatches, 0 SemanticMatches, 151 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5487 ImplicationChecksByTransitivity, 6.6s TimeCoverageRelationStatistics Valid=3115, Invalid=20141, Unknown=0, NotChecked=0, Total=23256 [2022-12-14 15:55:34,003 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 945 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3253 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 945 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 3265 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 3253 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:34,003 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [945 Valid, 0 Invalid, 3265 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 3253 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-12-14 15:55:34,004 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2022-12-14 15:55:34,005 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 91. [2022-12-14 15:55:34,005 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 89 states have (on average 1.0337078651685394) internal successors, (92), 90 states have internal predecessors, (92), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:34,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 92 transitions. [2022-12-14 15:55:34,005 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 92 transitions. Word has length 86 [2022-12-14 15:55:34,005 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:34,006 INFO L495 AbstractCegarLoop]: Abstraction has 91 states and 92 transitions. [2022-12-14 15:55:34,006 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 110 states, 109 states have (on average 2.36697247706422) internal successors, (258), 109 states have internal predecessors, (258), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:34,006 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 92 transitions. [2022-12-14 15:55:34,006 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2022-12-14 15:55:34,006 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:34,006 INFO L195 NwaCegarLoop]: trace histogram [17, 17, 17, 16, 16, 1, 1, 1, 1, 1] [2022-12-14 15:55:34,012 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Ended with exit code 0 [2022-12-14 15:55:34,207 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 50 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable58 [2022-12-14 15:55:34,207 INFO L420 AbstractCegarLoop]: === Iteration 60 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:55:34,208 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:34,208 INFO L85 PathProgramCache]: Analyzing trace with hash -870042736, now seen corresponding path program 32 times [2022-12-14 15:55:34,208 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:34,209 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [893118724] [2022-12-14 15:55:34,209 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:34,209 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:34,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:36,157 INFO L134 CoverageAnalysis]: Checked inductivity of 681 backedges. 17 proven. 664 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:36,157 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:36,157 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [893118724] [2022-12-14 15:55:36,157 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [893118724] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:36,157 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1742798174] [2022-12-14 15:55:36,157 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:55:36,157 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:36,157 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:36,158 INFO L229 MonitoredProcess]: Starting monitored process 51 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:36,159 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (51)] Waiting until timeout for monitored process [2022-12-14 15:55:45,560 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 18 check-sat command(s) [2022-12-14 15:55:45,561 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:55:45,574 INFO L263 TraceCheckSpWp]: Trace formula consists of 680 conjuncts, 219 conjunts are in the unsatisfiable core [2022-12-14 15:55:45,579 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:45,584 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:55:46,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 15:55:46,611 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:55:46,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:55:46,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:55:46,920 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:55:47,030 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:55:47,137 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:55:47,245 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:55:47,359 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:55:47,467 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:55:47,581 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:55:47,669 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:55:47,780 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:55:47,893 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:55:47,987 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:55:48,100 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:55:48,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:55:48,371 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:48,373 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:55:48,373 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-12-14 15:55:48,376 INFO L134 CoverageAnalysis]: Checked inductivity of 681 backedges. 17 proven. 664 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:48,376 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:48,980 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4393 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4393) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 6)) 0)) is different from false [2022-12-14 15:55:48,987 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4393 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4393) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ 7 |c_ULTIMATE.start_cstrcpy_~from#1.offset|)) 0)) is different from false [2022-12-14 15:55:49,322 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4393 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4393) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 11)) 0)) is different from false [2022-12-14 15:55:49,328 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4393 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4393) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 12)) 0)) is different from false [2022-12-14 15:55:49,335 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4393 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4393) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 13)) 0)) is different from false [2022-12-14 15:55:49,340 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4393 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4393) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 14)) 0)) is different from false [2022-12-14 15:55:49,346 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4393 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4393) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 15)) 0)) is different from false [2022-12-14 15:55:49,438 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:55:49,438 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 15:55:49,441 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:55:49,441 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 15:55:49,445 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 15:55:50,605 INFO L134 CoverageAnalysis]: Checked inductivity of 681 backedges. 17 proven. 391 refuted. 0 times theorem prover too weak. 0 trivial. 273 not checked. [2022-12-14 15:55:50,606 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1742798174] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:50,606 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1529907066] [2022-12-14 15:55:50,606 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:55:50,606 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:50,607 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:50,607 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:50,607 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:50,623 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:50,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:50,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:50,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:50,707 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:50,755 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:50,786 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:50,804 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:55:50,804 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:55:50,930 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:50,995 INFO L321 Elim1Store]: treesize reduction 175, result has 20.1 percent of original size [2022-12-14 15:55:50,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 217 treesize of output 226 [2022-12-14 15:55:51,123 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:55:51,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:55:51,155 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:55:51,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:55:51,161 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:52,436 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '24812#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:55:52,436 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:55:52,436 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:52,437 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [39, 40, 40] total 112 [2022-12-14 15:55:52,437 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1339813813] [2022-12-14 15:55:52,437 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:55:52,437 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 112 states [2022-12-14 15:55:52,437 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:52,438 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 112 interpolants. [2022-12-14 15:55:52,439 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=357, Invalid=12173, Unknown=154, NotChecked=1596, Total=14280 [2022-12-14 15:55:52,439 INFO L87 Difference]: Start difference. First operand 91 states and 92 transitions. Second operand has 112 states, 112 states have (on average 2.2767857142857144) internal successors, (255), 112 states have internal predecessors, (255), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:56,053 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:56,053 INFO L93 Difference]: Finished difference Result 146 states and 147 transitions. [2022-12-14 15:55:56,054 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2022-12-14 15:55:56,054 INFO L78 Accepts]: Start accepts. Automaton has has 112 states, 112 states have (on average 2.2767857142857144) internal successors, (255), 112 states have internal predecessors, (255), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 88 [2022-12-14 15:55:56,054 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:56,055 INFO L225 Difference]: With dead ends: 146 [2022-12-14 15:55:56,055 INFO L226 Difference]: Without dead ends: 94 [2022-12-14 15:55:56,056 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 351 GetRequests, 199 SyntacticMatches, 0 SemanticMatches, 152 ConstructedPredicates, 7 IntricatePredicates, 0 DeprecatedPredicates, 4607 ImplicationChecksByTransitivity, 7.9s TimeCoverageRelationStatistics Valid=685, Invalid=20651, Unknown=154, NotChecked=2072, Total=23562 [2022-12-14 15:55:56,056 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 156 mSDsluCounter, 124 mSDsCounter, 0 mSdLazyCounter, 5285 mSolverCounterSat, 18 mSolverCounterUnsat, 14 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 156 SdHoareTripleChecker+Valid, 127 SdHoareTripleChecker+Invalid, 5939 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 5285 IncrementalHoareTripleChecker+Invalid, 14 IncrementalHoareTripleChecker+Unknown, 622 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:56,056 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [156 Valid, 127 Invalid, 5939 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 5285 Invalid, 14 Unknown, 622 Unchecked, 1.7s Time] [2022-12-14 15:55:56,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-12-14 15:55:56,057 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 93. [2022-12-14 15:55:56,058 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 91 states have (on average 1.032967032967033) internal successors, (94), 92 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:56,058 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 94 transitions. [2022-12-14 15:55:56,058 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 94 transitions. Word has length 88 [2022-12-14 15:55:56,058 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:56,058 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 94 transitions. [2022-12-14 15:55:56,058 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 112 states, 112 states have (on average 2.2767857142857144) internal successors, (255), 112 states have internal predecessors, (255), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:56,058 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 94 transitions. [2022-12-14 15:55:56,059 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2022-12-14 15:55:56,059 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:56,059 INFO L195 NwaCegarLoop]: trace histogram [17, 17, 17, 17, 17, 1, 1, 1, 1, 1] [2022-12-14 15:55:56,068 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (51)] Ended with exit code 0 [2022-12-14 15:55:56,259 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 51 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable59 [2022-12-14 15:55:56,259 INFO L420 AbstractCegarLoop]: === Iteration 61 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:55:56,259 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:56,259 INFO L85 PathProgramCache]: Analyzing trace with hash -25613798, now seen corresponding path program 33 times [2022-12-14 15:55:56,260 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:56,260 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [965839022] [2022-12-14 15:55:56,260 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:56,260 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:56,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:57,491 INFO L134 CoverageAnalysis]: Checked inductivity of 714 backedges. 225 proven. 489 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:57,491 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:57,492 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [965839022] [2022-12-14 15:55:57,492 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [965839022] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:57,492 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1990471537] [2022-12-14 15:55:57,492 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:55:57,492 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:57,492 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:57,493 INFO L229 MonitoredProcess]: Starting monitored process 52 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:57,493 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (52)] Waiting until timeout for monitored process [2022-12-14 15:55:58,703 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:55:58,703 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:55:58,709 INFO L263 TraceCheckSpWp]: Trace formula consists of 693 conjuncts, 101 conjunts are in the unsatisfiable core [2022-12-14 15:55:58,711 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:58,721 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:55:58,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:55:59,379 INFO L134 CoverageAnalysis]: Checked inductivity of 714 backedges. 256 proven. 458 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:59,380 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:56:00,913 INFO L134 CoverageAnalysis]: Checked inductivity of 714 backedges. 256 proven. 458 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:00,913 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1990471537] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:56:00,913 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [267933399] [2022-12-14 15:56:00,914 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:56:00,914 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:56:00,914 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:56:00,914 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:56:00,914 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:56:00,935 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:00,938 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:56:00,962 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:00,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:01,013 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:01,050 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:01,082 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:56:01,099 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:56:01,099 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:56:01,150 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:56:01,150 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:56:01,187 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:56:01,188 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:56:01,201 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:56:02,907 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '25754#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= 0 |#NULL.offset|) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:56:02,907 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:56:02,907 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:56:02,907 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [37, 37, 37] total 92 [2022-12-14 15:56:02,907 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [724959255] [2022-12-14 15:56:02,907 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:56:02,907 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 93 states [2022-12-14 15:56:02,907 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:56:02,908 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 93 interpolants. [2022-12-14 15:56:02,908 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1269, Invalid=8831, Unknown=0, NotChecked=0, Total=10100 [2022-12-14 15:56:02,908 INFO L87 Difference]: Start difference. First operand 93 states and 94 transitions. Second operand has 93 states, 92 states have (on average 2.380434782608696) internal successors, (219), 93 states have internal predecessors, (219), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:04,504 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:56:04,504 INFO L93 Difference]: Finished difference Result 98 states and 99 transitions. [2022-12-14 15:56:04,504 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2022-12-14 15:56:04,504 INFO L78 Accepts]: Start accepts. Automaton has has 93 states, 92 states have (on average 2.380434782608696) internal successors, (219), 93 states have internal predecessors, (219), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 90 [2022-12-14 15:56:04,504 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:56:04,505 INFO L225 Difference]: With dead ends: 98 [2022-12-14 15:56:04,505 INFO L226 Difference]: Without dead ends: 98 [2022-12-14 15:56:04,505 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 325 GetRequests, 206 SyntacticMatches, 0 SemanticMatches, 119 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4267 ImplicationChecksByTransitivity, 4.7s TimeCoverageRelationStatistics Valid=2597, Invalid=11923, Unknown=0, NotChecked=0, Total=14520 [2022-12-14 15:56:04,505 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 566 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2132 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 566 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 2133 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 2132 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 15:56:04,505 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [566 Valid, 1 Invalid, 2133 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 2132 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-12-14 15:56:04,506 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2022-12-14 15:56:04,506 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 95. [2022-12-14 15:56:04,506 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 95 states, 93 states have (on average 1.032258064516129) internal successors, (96), 94 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:04,507 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 96 transitions. [2022-12-14 15:56:04,507 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 96 transitions. Word has length 90 [2022-12-14 15:56:04,507 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:56:04,507 INFO L495 AbstractCegarLoop]: Abstraction has 95 states and 96 transitions. [2022-12-14 15:56:04,507 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 93 states, 92 states have (on average 2.380434782608696) internal successors, (219), 93 states have internal predecessors, (219), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:04,507 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 96 transitions. [2022-12-14 15:56:04,507 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2022-12-14 15:56:04,507 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:56:04,507 INFO L195 NwaCegarLoop]: trace histogram [18, 17, 17, 17, 17, 1, 1, 1, 1, 1] [2022-12-14 15:56:04,515 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (52)] Ended with exit code 0 [2022-12-14 15:56:04,708 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable60,52 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:04,708 INFO L420 AbstractCegarLoop]: === Iteration 62 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:56:04,708 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:56:04,709 INFO L85 PathProgramCache]: Analyzing trace with hash -794027751, now seen corresponding path program 17 times [2022-12-14 15:56:04,709 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:56:04,709 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [754404789] [2022-12-14 15:56:04,709 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:56:04,710 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:56:04,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:56:06,401 INFO L134 CoverageAnalysis]: Checked inductivity of 731 backedges. 225 proven. 506 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:06,401 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:56:06,401 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [754404789] [2022-12-14 15:56:06,401 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [754404789] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:56:06,401 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1147779828] [2022-12-14 15:56:06,401 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:56:06,401 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:06,401 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:56:06,402 INFO L229 MonitoredProcess]: Starting monitored process 53 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:56:06,403 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (53)] Waiting until timeout for monitored process [2022-12-14 15:56:10,369 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 18 check-sat command(s) [2022-12-14 15:56:10,369 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:56:10,379 INFO L263 TraceCheckSpWp]: Trace formula consists of 699 conjuncts, 132 conjunts are in the unsatisfiable core [2022-12-14 15:56:10,382 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:56:10,429 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:56:10,432 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 15:56:12,403 INFO L134 CoverageAnalysis]: Checked inductivity of 731 backedges. 241 proven. 490 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:12,403 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:56:14,445 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:56:14,510 INFO L134 CoverageAnalysis]: Checked inductivity of 731 backedges. 289 proven. 442 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:14,510 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1147779828] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:56:14,511 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1473391522] [2022-12-14 15:56:14,511 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:56:14,511 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:56:14,511 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:56:14,511 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:56:14,511 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:56:14,528 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:14,530 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:56:14,549 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:56:14,574 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:14,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:14,621 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:14,637 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:56:14,651 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:56:14,651 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:56:14,720 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:56:14,775 INFO L321 Elim1Store]: treesize reduction 171, result has 20.5 percent of original size [2022-12-14 15:56:14,775 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 221 [2022-12-14 15:56:14,901 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:56:14,902 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:56:14,933 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:56:14,933 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:56:14,940 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:56:16,085 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '26652#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:56:16,086 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:56:16,086 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:56:16,086 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [38, 39, 38] total 115 [2022-12-14 15:56:16,086 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [302784022] [2022-12-14 15:56:16,086 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:56:16,086 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 117 states [2022-12-14 15:56:16,087 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:56:16,088 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 117 interpolants. [2022-12-14 15:56:16,088 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1321, Invalid=14179, Unknown=0, NotChecked=0, Total=15500 [2022-12-14 15:56:16,088 INFO L87 Difference]: Start difference. First operand 95 states and 96 transitions. Second operand has 117 states, 116 states have (on average 2.353448275862069) internal successors, (273), 116 states have internal predecessors, (273), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:20,666 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:56:20,666 INFO L93 Difference]: Finished difference Result 97 states and 98 transitions. [2022-12-14 15:56:20,666 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 57 states. [2022-12-14 15:56:20,666 INFO L78 Accepts]: Start accepts. Automaton has has 117 states, 116 states have (on average 2.353448275862069) internal successors, (273), 116 states have internal predecessors, (273), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 91 [2022-12-14 15:56:20,666 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:56:20,667 INFO L225 Difference]: With dead ends: 97 [2022-12-14 15:56:20,667 INFO L226 Difference]: Without dead ends: 97 [2022-12-14 15:56:20,668 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 363 GetRequests, 186 SyntacticMatches, 0 SemanticMatches, 177 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7245 ImplicationChecksByTransitivity, 8.9s TimeCoverageRelationStatistics Valid=4687, Invalid=27175, Unknown=0, NotChecked=0, Total=31862 [2022-12-14 15:56:20,668 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 729 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2678 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 729 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 2715 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 2678 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-12-14 15:56:20,668 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [729 Valid, 0 Invalid, 2715 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 2678 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-12-14 15:56:20,669 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2022-12-14 15:56:20,670 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 96. [2022-12-14 15:56:20,670 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 94 states have (on average 1.0319148936170213) internal successors, (97), 95 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:20,670 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 97 transitions. [2022-12-14 15:56:20,670 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 97 transitions. Word has length 91 [2022-12-14 15:56:20,670 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:56:20,670 INFO L495 AbstractCegarLoop]: Abstraction has 96 states and 97 transitions. [2022-12-14 15:56:20,671 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 117 states, 116 states have (on average 2.353448275862069) internal successors, (273), 116 states have internal predecessors, (273), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:20,671 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 97 transitions. [2022-12-14 15:56:20,671 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2022-12-14 15:56:20,671 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:56:20,671 INFO L195 NwaCegarLoop]: trace histogram [18, 18, 18, 17, 17, 1, 1, 1, 1, 1] [2022-12-14 15:56:20,680 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (53)] Ended with exit code 0 [2022-12-14 15:56:20,872 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable61,53 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:20,872 INFO L420 AbstractCegarLoop]: === Iteration 63 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:56:20,873 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:56:20,873 INFO L85 PathProgramCache]: Analyzing trace with hash 1443510271, now seen corresponding path program 34 times [2022-12-14 15:56:20,873 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:56:20,874 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [340830208] [2022-12-14 15:56:20,874 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:56:20,874 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:56:20,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:56:22,839 INFO L134 CoverageAnalysis]: Checked inductivity of 766 backedges. 18 proven. 748 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:22,839 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:56:22,839 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [340830208] [2022-12-14 15:56:22,839 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [340830208] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:56:22,840 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1629795043] [2022-12-14 15:56:22,840 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:56:22,840 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:22,840 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:56:22,840 INFO L229 MonitoredProcess]: Starting monitored process 54 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:56:22,841 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (54)] Waiting until timeout for monitored process [2022-12-14 15:56:23,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:56:23,080 INFO L263 TraceCheckSpWp]: Trace formula consists of 716 conjuncts, 181 conjunts are in the unsatisfiable core [2022-12-14 15:56:23,083 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:56:23,086 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:56:23,863 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:23,952 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 15:56:23,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:56:24,004 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:56:24,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:56:24,025 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:56:24,034 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:56:24,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:56:24,052 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:56:24,060 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:56:24,068 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:56:24,077 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:56:24,086 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:56:24,095 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:56:24,104 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:56:24,112 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:56:24,128 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:56:24,137 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:56:24,179 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 15:56:24,181 INFO L134 CoverageAnalysis]: Checked inductivity of 766 backedges. 18 proven. 748 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:24,181 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:56:24,187 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4872 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4872) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 1)) 0)) is different from false [2022-12-14 15:56:24,191 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4872 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4872) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-12-14 15:56:24,197 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4872 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4872) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2022-12-14 15:56:24,392 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4872 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4872) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 6)) 0)) is different from false [2022-12-14 15:56:24,785 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4872 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4872) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 11)))) is different from false [2022-12-14 15:56:24,792 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4872 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4872) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 12)) 0)) is different from false [2022-12-14 15:56:24,798 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4872 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4872) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 13)) 0)) is different from false [2022-12-14 15:56:24,907 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4872 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4872) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 15)) 0)) is different from false [2022-12-14 15:56:24,913 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_4872 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_4872) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 16)) 0)) is different from false [2022-12-14 15:56:25,024 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:56:25,024 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 15:56:25,028 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:56:25,028 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 15:56:25,318 INFO L134 CoverageAnalysis]: Checked inductivity of 766 backedges. 18 proven. 406 refuted. 0 times theorem prover too weak. 0 trivial. 342 not checked. [2022-12-14 15:56:25,318 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1629795043] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:56:25,319 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1820592982] [2022-12-14 15:56:25,319 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:56:25,320 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:56:25,320 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:56:25,320 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:56:25,320 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:56:25,345 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:25,347 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:56:25,373 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:25,403 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:25,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:25,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:25,495 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:56:25,520 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:56:25,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:56:25,575 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:56:25,576 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:56:25,613 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:56:25,613 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:56:25,624 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:56:26,774 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '27595#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:56:26,774 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:56:26,774 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:56:26,774 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [41, 42, 42] total 82 [2022-12-14 15:56:26,774 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [773603342] [2022-12-14 15:56:26,774 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:56:26,775 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 82 states [2022-12-14 15:56:26,775 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:56:26,775 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 82 interpolants. [2022-12-14 15:56:26,776 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=232, Invalid=6135, Unknown=149, NotChecked=1494, Total=8010 [2022-12-14 15:56:26,776 INFO L87 Difference]: Start difference. First operand 96 states and 97 transitions. Second operand has 82 states, 82 states have (on average 2.3048780487804876) internal successors, (189), 82 states have internal predecessors, (189), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:29,655 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:56:29,655 INFO L93 Difference]: Finished difference Result 154 states and 155 transitions. [2022-12-14 15:56:29,655 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 59 states. [2022-12-14 15:56:29,655 INFO L78 Accepts]: Start accepts. Automaton has has 82 states, 82 states have (on average 2.3048780487804876) internal successors, (189), 82 states have internal predecessors, (189), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 93 [2022-12-14 15:56:29,656 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:56:29,656 INFO L225 Difference]: With dead ends: 154 [2022-12-14 15:56:29,656 INFO L226 Difference]: Without dead ends: 99 [2022-12-14 15:56:29,656 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 365 GetRequests, 244 SyntacticMatches, 11 SemanticMatches, 110 ConstructedPredicates, 9 IntricatePredicates, 0 DeprecatedPredicates, 1473 ImplicationChecksByTransitivity, 4.8s TimeCoverageRelationStatistics Valid=366, Invalid=10027, Unknown=149, NotChecked=1890, Total=12432 [2022-12-14 15:56:29,657 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 33 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 4750 mSolverCounterSat, 18 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 107 SdHoareTripleChecker+Invalid, 5535 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 4750 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 766 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-12-14 15:56:29,657 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 107 Invalid, 5535 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 4750 Invalid, 1 Unknown, 766 Unchecked, 1.6s Time] [2022-12-14 15:56:29,657 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 99 states. [2022-12-14 15:56:29,657 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 99 to 98. [2022-12-14 15:56:29,658 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 96 states have (on average 1.03125) internal successors, (99), 97 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:29,658 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 99 transitions. [2022-12-14 15:56:29,658 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 99 transitions. Word has length 93 [2022-12-14 15:56:29,658 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:56:29,658 INFO L495 AbstractCegarLoop]: Abstraction has 98 states and 99 transitions. [2022-12-14 15:56:29,658 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 82 states, 82 states have (on average 2.3048780487804876) internal successors, (189), 82 states have internal predecessors, (189), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:29,658 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 99 transitions. [2022-12-14 15:56:29,658 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2022-12-14 15:56:29,658 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:56:29,658 INFO L195 NwaCegarLoop]: trace histogram [18, 18, 18, 18, 18, 1, 1, 1, 1, 1] [2022-12-14 15:56:29,664 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (54)] Ended with exit code 0 [2022-12-14 15:56:29,859 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable62,54 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:29,859 INFO L420 AbstractCegarLoop]: === Iteration 64 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:56:29,860 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:56:29,860 INFO L85 PathProgramCache]: Analyzing trace with hash 735823797, now seen corresponding path program 35 times [2022-12-14 15:56:29,861 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:56:29,861 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1102840907] [2022-12-14 15:56:29,861 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:56:29,861 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:56:29,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:56:30,901 INFO L134 CoverageAnalysis]: Checked inductivity of 801 backedges. 256 proven. 545 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:30,901 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:56:30,902 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1102840907] [2022-12-14 15:56:30,902 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1102840907] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:56:30,902 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [864252613] [2022-12-14 15:56:30,902 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:56:30,902 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:30,902 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:56:30,903 INFO L229 MonitoredProcess]: Starting monitored process 55 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:56:30,903 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (55)] Waiting until timeout for monitored process [2022-12-14 15:56:37,122 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 19 check-sat command(s) [2022-12-14 15:56:37,122 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:56:37,131 INFO L263 TraceCheckSpWp]: Trace formula consists of 729 conjuncts, 86 conjunts are in the unsatisfiable core [2022-12-14 15:56:37,133 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:56:37,139 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:56:37,140 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:56:38,187 INFO L134 CoverageAnalysis]: Checked inductivity of 801 backedges. 289 proven. 512 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:38,188 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:56:40,039 INFO L134 CoverageAnalysis]: Checked inductivity of 801 backedges. 289 proven. 512 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:40,039 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [864252613] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:56:40,040 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [494734937] [2022-12-14 15:56:40,040 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:56:40,040 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:56:40,041 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:56:40,041 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:56:40,041 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:56:40,060 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:40,062 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:56:40,090 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:40,117 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:40,135 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:40,171 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:40,210 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:56:40,228 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:56:40,228 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:56:40,282 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:56:40,283 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:56:40,322 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:56:40,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:56:40,335 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:56:41,537 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '28589#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:56:41,537 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:56:41,537 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:56:41,537 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [39, 40, 40] total 117 [2022-12-14 15:56:41,537 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1166193082] [2022-12-14 15:56:41,537 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:56:41,538 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 118 states [2022-12-14 15:56:41,538 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:56:41,538 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 118 interpolants. [2022-12-14 15:56:41,539 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=2132, Invalid=13618, Unknown=0, NotChecked=0, Total=15750 [2022-12-14 15:56:41,539 INFO L87 Difference]: Start difference. First operand 98 states and 99 transitions. Second operand has 118 states, 117 states have (on average 2.4188034188034186) internal successors, (283), 118 states have internal predecessors, (283), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:42,730 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:56:42,730 INFO L93 Difference]: Finished difference Result 103 states and 104 transitions. [2022-12-14 15:56:42,730 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2022-12-14 15:56:42,730 INFO L78 Accepts]: Start accepts. Automaton has has 118 states, 117 states have (on average 2.4188034188034186) internal successors, (283), 118 states have internal predecessors, (283), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 95 [2022-12-14 15:56:42,731 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:56:42,731 INFO L225 Difference]: With dead ends: 103 [2022-12-14 15:56:42,731 INFO L226 Difference]: Without dead ends: 103 [2022-12-14 15:56:42,732 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 343 GetRequests, 198 SyntacticMatches, 0 SemanticMatches, 145 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7327 ImplicationChecksByTransitivity, 4.6s TimeCoverageRelationStatistics Valid=3824, Invalid=17638, Unknown=0, NotChecked=0, Total=21462 [2022-12-14 15:56:42,732 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 528 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 1687 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 528 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 1688 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1687 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-12-14 15:56:42,732 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [528 Valid, 3 Invalid, 1688 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1687 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-12-14 15:56:42,732 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 103 states. [2022-12-14 15:56:42,733 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 103 to 100. [2022-12-14 15:56:42,733 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 98 states have (on average 1.030612244897959) internal successors, (101), 99 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:42,733 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 101 transitions. [2022-12-14 15:56:42,733 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 101 transitions. Word has length 95 [2022-12-14 15:56:42,734 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:56:42,734 INFO L495 AbstractCegarLoop]: Abstraction has 100 states and 101 transitions. [2022-12-14 15:56:42,734 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 118 states, 117 states have (on average 2.4188034188034186) internal successors, (283), 118 states have internal predecessors, (283), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:42,734 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 101 transitions. [2022-12-14 15:56:42,734 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-12-14 15:56:42,734 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:56:42,734 INFO L195 NwaCegarLoop]: trace histogram [19, 18, 18, 18, 18, 1, 1, 1, 1, 1] [2022-12-14 15:56:42,743 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (55)] Forceful destruction successful, exit code 0 [2022-12-14 15:56:42,935 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 55 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable63 [2022-12-14 15:56:42,936 INFO L420 AbstractCegarLoop]: === Iteration 65 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:56:42,936 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:56:42,937 INFO L85 PathProgramCache]: Analyzing trace with hash 1335701214, now seen corresponding path program 18 times [2022-12-14 15:56:42,937 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:56:42,937 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [994053620] [2022-12-14 15:56:42,937 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:56:42,938 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:56:42,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:56:44,812 INFO L134 CoverageAnalysis]: Checked inductivity of 819 backedges. 256 proven. 563 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:44,812 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:56:44,812 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [994053620] [2022-12-14 15:56:44,812 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [994053620] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:56:44,813 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [632337870] [2022-12-14 15:56:44,813 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:56:44,813 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:44,813 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:56:44,814 INFO L229 MonitoredProcess]: Starting monitored process 56 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:56:44,814 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (56)] Waiting until timeout for monitored process [2022-12-14 15:56:47,840 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:56:47,840 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:56:47,850 INFO L263 TraceCheckSpWp]: Trace formula consists of 735 conjuncts, 181 conjunts are in the unsatisfiable core [2022-12-14 15:56:47,853 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:56:47,916 INFO L321 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-12-14 15:56:47,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 15:56:47,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:56:51,550 INFO L134 CoverageAnalysis]: Checked inductivity of 819 backedges. 289 proven. 530 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:51,551 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:56:54,915 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:56:55,010 INFO L134 CoverageAnalysis]: Checked inductivity of 819 backedges. 324 proven. 495 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:55,010 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [632337870] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:56:55,010 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1780777704] [2022-12-14 15:56:55,011 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:56:55,011 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:56:55,011 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:56:55,011 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:56:55,011 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:56:55,028 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:55,029 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:56:55,055 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:55,079 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:55,091 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:55,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:55,156 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:56:55,174 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:56:55,174 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:56:55,219 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:56:55,220 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:56:55,259 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:56:55,259 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:56:55,264 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:56:57,209 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '29533#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:56:57,210 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:56:57,210 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:56:57,210 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [40, 39, 40] total 119 [2022-12-14 15:56:57,210 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1923472966] [2022-12-14 15:56:57,210 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:56:57,210 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 121 states [2022-12-14 15:56:57,210 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:56:57,211 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 121 interpolants. [2022-12-14 15:56:57,212 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1729, Invalid=14783, Unknown=0, NotChecked=0, Total=16512 [2022-12-14 15:56:57,212 INFO L87 Difference]: Start difference. First operand 100 states and 101 transitions. Second operand has 121 states, 120 states have (on average 2.4) internal successors, (288), 120 states have internal predecessors, (288), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:57:01,227 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:57:01,227 INFO L93 Difference]: Finished difference Result 102 states and 103 transitions. [2022-12-14 15:57:01,227 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 42 states. [2022-12-14 15:57:01,228 INFO L78 Accepts]: Start accepts. Automaton has has 121 states, 120 states have (on average 2.4) internal successors, (288), 120 states have internal predecessors, (288), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 96 [2022-12-14 15:57:01,228 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:57:01,228 INFO L225 Difference]: With dead ends: 102 [2022-12-14 15:57:01,228 INFO L226 Difference]: Without dead ends: 102 [2022-12-14 15:57:01,229 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 365 GetRequests, 199 SyntacticMatches, 0 SemanticMatches, 166 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7060 ImplicationChecksByTransitivity, 11.4s TimeCoverageRelationStatistics Valid=4376, Invalid=23680, Unknown=0, NotChecked=0, Total=28056 [2022-12-14 15:57:01,229 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 848 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2767 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 848 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 2768 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 2767 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:57:01,229 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [848 Valid, 0 Invalid, 2768 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 2767 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-12-14 15:57:01,229 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 102 states. [2022-12-14 15:57:01,230 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 102 to 101. [2022-12-14 15:57:01,230 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 99 states have (on average 1.0303030303030303) internal successors, (102), 100 states have internal predecessors, (102), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:57:01,230 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 102 transitions. [2022-12-14 15:57:01,230 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 102 transitions. Word has length 96 [2022-12-14 15:57:01,231 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:57:01,231 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 102 transitions. [2022-12-14 15:57:01,231 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 121 states, 120 states have (on average 2.4) internal successors, (288), 120 states have internal predecessors, (288), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:57:01,231 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 102 transitions. [2022-12-14 15:57:01,231 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-12-14 15:57:01,231 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:57:01,231 INFO L195 NwaCegarLoop]: trace histogram [19, 19, 19, 18, 18, 1, 1, 1, 1, 1] [2022-12-14 15:57:01,239 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (56)] Ended with exit code 0 [2022-12-14 15:57:01,432 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 56 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable64 [2022-12-14 15:57:01,432 INFO L420 AbstractCegarLoop]: === Iteration 66 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:57:01,433 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:57:01,433 INFO L85 PathProgramCache]: Analyzing trace with hash -586354556, now seen corresponding path program 36 times [2022-12-14 15:57:01,433 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:57:01,433 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [833893722] [2022-12-14 15:57:01,434 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:57:01,434 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:57:01,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:57:03,448 INFO L134 CoverageAnalysis]: Checked inductivity of 856 backedges. 19 proven. 837 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:57:03,448 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:57:03,448 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [833893722] [2022-12-14 15:57:03,448 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [833893722] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:57:03,448 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1032864035] [2022-12-14 15:57:03,448 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:57:03,449 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:57:03,449 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:57:03,449 INFO L229 MonitoredProcess]: Starting monitored process 57 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:57:03,450 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (57)] Waiting until timeout for monitored process [2022-12-14 15:57:08,442 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:57:08,442 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:57:08,454 INFO L263 TraceCheckSpWp]: Trace formula consists of 752 conjuncts, 235 conjunts are in the unsatisfiable core [2022-12-14 15:57:08,459 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:57:09,475 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 15:57:09,664 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:09,671 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 15:57:09,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 28 treesize of output 34 [2022-12-14 15:57:09,904 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:09,905 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:09,906 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:09,907 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:57:09,907 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 35 treesize of output 37 [2022-12-14 15:57:10,035 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:10,035 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:10,036 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:10,037 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:57:10,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 35 treesize of output 37 [2022-12-14 15:57:10,176 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:10,177 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:10,177 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:10,179 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:57:10,179 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 35 treesize of output 37 [2022-12-14 15:57:10,322 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:10,323 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:10,324 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:57:10,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 33 treesize of output 35 [2022-12-14 15:57:10,466 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:10,466 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:10,468 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:57:10,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 33 treesize of output 35 [2022-12-14 15:57:10,624 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:10,624 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:10,635 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-12-14 15:57:10,635 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-12-14 15:57:10,787 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:10,788 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:10,800 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-12-14 15:57:10,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-12-14 15:57:10,935 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:10,936 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:10,947 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-12-14 15:57:10,947 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-12-14 15:57:11,099 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:11,100 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:11,111 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-12-14 15:57:11,111 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-12-14 15:57:11,255 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:11,256 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:11,266 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-12-14 15:57:11,267 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-12-14 15:57:11,412 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:11,413 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:11,424 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-12-14 15:57:11,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-12-14 15:57:11,571 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:11,572 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:11,583 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-12-14 15:57:11,583 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-12-14 15:57:11,740 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:11,741 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:11,752 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-12-14 15:57:11,752 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-12-14 15:57:11,875 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:11,876 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:11,883 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-12-14 15:57:11,883 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-12-14 15:57:12,002 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:12,002 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:12,012 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-12-14 15:57:12,012 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-12-14 15:57:12,141 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:12,142 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:12,151 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-12-14 15:57:12,151 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-12-14 15:57:12,294 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:12,295 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:12,305 INFO L321 Elim1Store]: treesize reduction 17, result has 46.9 percent of original size [2022-12-14 15:57:12,305 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 33 treesize of output 43 [2022-12-14 15:57:12,495 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:57:12,497 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:57:12,497 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-12-14 15:57:12,500 INFO L134 CoverageAnalysis]: Checked inductivity of 856 backedges. 19 proven. 837 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:57:12,500 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:57:20,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 180 treesize of output 176 [2022-12-14 15:57:20,263 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 101 treesize of output 95 [2022-12-14 15:57:22,737 INFO L134 CoverageAnalysis]: Checked inductivity of 856 backedges. 22 proven. 834 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:57:22,737 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1032864035] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:57:22,737 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [187472] [2022-12-14 15:57:22,738 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:57:22,738 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:57:22,738 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:57:22,738 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:57:22,738 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:57:22,752 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:22,754 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:57:22,774 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:57:22,802 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:57:22,813 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:57:22,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:57:22,868 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:57:22,884 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:57:22,884 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:57:22,937 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:57:22,938 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:57:22,976 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:57:22,977 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:57:22,984 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:57:24,724 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '30532#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:57:24,724 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:57:24,724 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:57:24,724 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [43, 46, 46] total 128 [2022-12-14 15:57:24,724 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [203067681] [2022-12-14 15:57:24,724 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:57:24,724 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 128 states [2022-12-14 15:57:24,724 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:57:24,725 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 128 interpolants. [2022-12-14 15:57:24,725 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=369, Invalid=17991, Unknown=0, NotChecked=0, Total=18360 [2022-12-14 15:57:24,725 INFO L87 Difference]: Start difference. First operand 101 states and 102 transitions. Second operand has 128 states, 128 states have (on average 2.2265625) internal successors, (285), 128 states have internal predecessors, (285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:57:32,847 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:57:32,847 INFO L93 Difference]: Finished difference Result 162 states and 163 transitions. [2022-12-14 15:57:32,847 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 62 states. [2022-12-14 15:57:32,848 INFO L78 Accepts]: Start accepts. Automaton has has 128 states, 128 states have (on average 2.2265625) internal successors, (285), 128 states have internal predecessors, (285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 98 [2022-12-14 15:57:32,848 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:57:32,848 INFO L225 Difference]: With dead ends: 162 [2022-12-14 15:57:32,848 INFO L226 Difference]: Without dead ends: 104 [2022-12-14 15:57:32,849 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 412 GetRequests, 203 SyntacticMatches, 16 SemanticMatches, 193 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4472 ImplicationChecksByTransitivity, 19.8s TimeCoverageRelationStatistics Valid=913, Invalid=36917, Unknown=0, NotChecked=0, Total=37830 [2022-12-14 15:57:32,849 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 350 mSDsluCounter, 151 mSDsCounter, 0 mSdLazyCounter, 8865 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 350 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 8887 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 8865 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.3s IncrementalHoareTripleChecker+Time [2022-12-14 15:57:32,850 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [350 Valid, 154 Invalid, 8887 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 8865 Invalid, 0 Unknown, 0 Unchecked, 3.3s Time] [2022-12-14 15:57:32,850 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2022-12-14 15:57:32,850 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 103. [2022-12-14 15:57:32,850 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 103 states, 101 states have (on average 1.0297029702970297) internal successors, (104), 102 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:57:32,851 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 104 transitions. [2022-12-14 15:57:32,851 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 104 transitions. Word has length 98 [2022-12-14 15:57:32,851 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:57:32,851 INFO L495 AbstractCegarLoop]: Abstraction has 103 states and 104 transitions. [2022-12-14 15:57:32,851 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 128 states, 128 states have (on average 2.2265625) internal successors, (285), 128 states have internal predecessors, (285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:57:32,851 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 104 transitions. [2022-12-14 15:57:32,851 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2022-12-14 15:57:32,851 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:57:32,851 INFO L195 NwaCegarLoop]: trace histogram [19, 19, 19, 19, 19, 1, 1, 1, 1, 1] [2022-12-14 15:57:32,861 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (57)] Ended with exit code 0 [2022-12-14 15:57:33,052 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 57 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable65 [2022-12-14 15:57:33,052 INFO L420 AbstractCegarLoop]: === Iteration 67 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:57:33,053 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:57:33,053 INFO L85 PathProgramCache]: Analyzing trace with hash 1030668942, now seen corresponding path program 37 times [2022-12-14 15:57:33,054 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:57:33,054 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2093888303] [2022-12-14 15:57:33,054 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:57:33,054 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:57:33,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:57:34,774 INFO L134 CoverageAnalysis]: Checked inductivity of 893 backedges. 289 proven. 604 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:57:34,774 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:57:34,774 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2093888303] [2022-12-14 15:57:34,774 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2093888303] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:57:34,774 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1729742806] [2022-12-14 15:57:34,774 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:57:34,774 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:57:34,774 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:57:34,775 INFO L229 MonitoredProcess]: Starting monitored process 58 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:57:34,776 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (58)] Waiting until timeout for monitored process [2022-12-14 15:57:34,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:57:34,998 INFO L263 TraceCheckSpWp]: Trace formula consists of 765 conjuncts, 107 conjunts are in the unsatisfiable core [2022-12-14 15:57:35,000 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:57:35,818 INFO L134 CoverageAnalysis]: Checked inductivity of 893 backedges. 324 proven. 569 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:57:35,819 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:57:36,876 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 15:57:37,470 INFO L134 CoverageAnalysis]: Checked inductivity of 893 backedges. 324 proven. 569 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:57:37,470 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1729742806] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:57:37,470 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [522324554] [2022-12-14 15:57:37,471 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:57:37,471 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:57:37,471 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:57:37,471 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:57:37,471 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:57:37,491 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:37,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:57:37,521 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:57:37,550 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:57:37,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:57:37,612 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:57:37,641 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:57:37,667 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:57:37,667 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:57:37,738 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:57:37,813 INFO L321 Elim1Store]: treesize reduction 167, result has 20.9 percent of original size [2022-12-14 15:57:37,813 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 221 [2022-12-14 15:57:37,959 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:57:37,959 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:57:38,000 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:57:38,000 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:57:38,012 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:57:39,241 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '31602#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:57:39,241 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:57:39,241 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:57:39,241 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [41, 42, 42] total 84 [2022-12-14 15:57:39,242 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1686727573] [2022-12-14 15:57:39,242 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:57:39,242 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 85 states [2022-12-14 15:57:39,242 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:57:39,242 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 85 interpolants. [2022-12-14 15:57:39,243 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=955, Invalid=7601, Unknown=0, NotChecked=0, Total=8556 [2022-12-14 15:57:39,243 INFO L87 Difference]: Start difference. First operand 103 states and 104 transitions. Second operand has 85 states, 84 states have (on average 2.4166666666666665) internal successors, (203), 85 states have internal predecessors, (203), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:57:41,269 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:57:41,269 INFO L93 Difference]: Finished difference Result 108 states and 109 transitions. [2022-12-14 15:57:41,269 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 43 states. [2022-12-14 15:57:41,269 INFO L78 Accepts]: Start accepts. Automaton has has 85 states, 84 states have (on average 2.4166666666666665) internal successors, (203), 85 states have internal predecessors, (203), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 100 [2022-12-14 15:57:41,269 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:57:41,270 INFO L225 Difference]: With dead ends: 108 [2022-12-14 15:57:41,270 INFO L226 Difference]: Without dead ends: 108 [2022-12-14 15:57:41,270 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 361 GetRequests, 228 SyntacticMatches, 20 SemanticMatches, 113 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4942 ImplicationChecksByTransitivity, 5.0s TimeCoverageRelationStatistics Valid=2132, Invalid=10978, Unknown=0, NotChecked=0, Total=13110 [2022-12-14 15:57:41,270 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 212 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2683 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 212 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 2684 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 2683 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:57:41,270 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [212 Valid, 1 Invalid, 2684 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 2683 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-12-14 15:57:41,271 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2022-12-14 15:57:41,271 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 105. [2022-12-14 15:57:41,271 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 105 states, 103 states have (on average 1.029126213592233) internal successors, (106), 104 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:57:41,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 105 states and 106 transitions. [2022-12-14 15:57:41,272 INFO L78 Accepts]: Start accepts. Automaton has 105 states and 106 transitions. Word has length 100 [2022-12-14 15:57:41,272 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:57:41,272 INFO L495 AbstractCegarLoop]: Abstraction has 105 states and 106 transitions. [2022-12-14 15:57:41,272 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 85 states, 84 states have (on average 2.4166666666666665) internal successors, (203), 85 states have internal predecessors, (203), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:57:41,272 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 106 transitions. [2022-12-14 15:57:41,272 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2022-12-14 15:57:41,272 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:57:41,272 INFO L195 NwaCegarLoop]: trace histogram [20, 19, 19, 19, 19, 1, 1, 1, 1, 1] [2022-12-14 15:57:41,278 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (58)] Ended with exit code 0 [2022-12-14 15:57:41,473 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable66,58 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:57:41,473 INFO L420 AbstractCegarLoop]: === Iteration 68 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:57:41,474 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:57:41,474 INFO L85 PathProgramCache]: Analyzing trace with hash 1885966117, now seen corresponding path program 19 times [2022-12-14 15:57:41,475 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:57:41,475 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [385593829] [2022-12-14 15:57:41,475 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:57:41,475 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:57:41,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:57:43,338 INFO L134 CoverageAnalysis]: Checked inductivity of 912 backedges. 289 proven. 623 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:57:43,338 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:57:43,338 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [385593829] [2022-12-14 15:57:43,338 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [385593829] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:57:43,338 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [694291824] [2022-12-14 15:57:43,338 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:57:43,338 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:57:43,339 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:57:43,339 INFO L229 MonitoredProcess]: Starting monitored process 59 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:57:43,340 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (59)] Waiting until timeout for monitored process [2022-12-14 15:57:43,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:57:43,652 INFO L263 TraceCheckSpWp]: Trace formula consists of 771 conjuncts, 138 conjunts are in the unsatisfiable core [2022-12-14 15:57:43,654 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:57:43,703 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:43,704 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-12-14 15:57:43,705 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:57:47,182 INFO L134 CoverageAnalysis]: Checked inductivity of 912 backedges. 0 proven. 912 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:57:47,182 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:57:50,660 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:57:50,771 INFO L134 CoverageAnalysis]: Checked inductivity of 912 backedges. 361 proven. 551 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:57:50,771 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [694291824] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:57:50,771 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [862718038] [2022-12-14 15:57:50,772 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:57:50,772 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:57:50,772 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:57:50,772 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:57:50,772 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:57:50,796 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:50,797 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:57:50,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:57:50,842 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:57:50,864 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:57:50,889 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:57:50,910 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:57:50,923 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:57:50,923 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:57:50,989 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:57:51,053 INFO L321 Elim1Store]: treesize reduction 171, result has 20.5 percent of original size [2022-12-14 15:57:51,053 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 221 [2022-12-14 15:57:51,131 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:57:51,131 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:57:51,176 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:57:51,176 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:57:51,186 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:57:52,782 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '32596#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:57:52,782 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:57:52,782 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:57:52,782 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [42, 42, 43] total 127 [2022-12-14 15:57:52,782 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [239254189] [2022-12-14 15:57:52,782 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:57:52,783 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 129 states [2022-12-14 15:57:52,783 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:57:52,783 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 129 interpolants. [2022-12-14 15:57:52,784 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1563, Invalid=17069, Unknown=0, NotChecked=0, Total=18632 [2022-12-14 15:57:52,784 INFO L87 Difference]: Start difference. First operand 105 states and 106 transitions. Second operand has 129 states, 128 states have (on average 2.3671875) internal successors, (303), 128 states have internal predecessors, (303), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:57:58,737 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:57:58,737 INFO L93 Difference]: Finished difference Result 108 states and 109 transitions. [2022-12-14 15:57:58,737 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 46 states. [2022-12-14 15:57:58,737 INFO L78 Accepts]: Start accepts. Automaton has has 129 states, 128 states have (on average 2.3671875) internal successors, (303), 128 states have internal predecessors, (303), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 101 [2022-12-14 15:57:58,738 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:57:58,738 INFO L225 Difference]: With dead ends: 108 [2022-12-14 15:57:58,738 INFO L226 Difference]: Without dead ends: 108 [2022-12-14 15:57:58,739 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 386 GetRequests, 208 SyntacticMatches, 0 SemanticMatches, 178 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6977 ImplicationChecksByTransitivity, 12.4s TimeCoverageRelationStatistics Valid=3439, Invalid=28781, Unknown=0, NotChecked=0, Total=32220 [2022-12-14 15:57:58,739 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 714 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 4525 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 714 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 4530 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 4525 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-12-14 15:57:58,739 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [714 Valid, 0 Invalid, 4530 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 4525 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2022-12-14 15:57:58,739 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2022-12-14 15:57:58,740 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 106. [2022-12-14 15:57:58,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 106 states, 104 states have (on average 1.0288461538461537) internal successors, (107), 105 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:57:58,740 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106 states to 106 states and 107 transitions. [2022-12-14 15:57:58,740 INFO L78 Accepts]: Start accepts. Automaton has 106 states and 107 transitions. Word has length 101 [2022-12-14 15:57:58,740 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:57:58,740 INFO L495 AbstractCegarLoop]: Abstraction has 106 states and 107 transitions. [2022-12-14 15:57:58,741 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 129 states, 128 states have (on average 2.3671875) internal successors, (303), 128 states have internal predecessors, (303), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:57:58,741 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 107 transitions. [2022-12-14 15:57:58,741 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2022-12-14 15:57:58,741 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:57:58,741 INFO L195 NwaCegarLoop]: trace histogram [20, 20, 20, 19, 19, 1, 1, 1, 1, 1] [2022-12-14 15:57:58,747 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (59)] Ended with exit code 0 [2022-12-14 15:57:58,942 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable67,59 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:57:58,942 INFO L420 AbstractCegarLoop]: === Iteration 69 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:57:58,943 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:57:58,943 INFO L85 PathProgramCache]: Analyzing trace with hash -62760181, now seen corresponding path program 38 times [2022-12-14 15:57:58,943 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:57:58,943 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1246839962] [2022-12-14 15:57:58,944 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:57:58,944 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:57:59,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:58:01,138 INFO L134 CoverageAnalysis]: Checked inductivity of 951 backedges. 20 proven. 931 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:01,138 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:58:01,138 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1246839962] [2022-12-14 15:58:01,138 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1246839962] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:58:01,138 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [177162255] [2022-12-14 15:58:01,138 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:58:01,138 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:58:01,138 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:58:01,139 INFO L229 MonitoredProcess]: Starting monitored process 60 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:58:01,140 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (60)] Waiting until timeout for monitored process [2022-12-14 15:58:12,918 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 21 check-sat command(s) [2022-12-14 15:58:12,918 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:58:12,934 INFO L263 TraceCheckSpWp]: Trace formula consists of 788 conjuncts, 199 conjunts are in the unsatisfiable core [2022-12-14 15:58:12,940 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:58:12,943 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:58:13,675 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:13,745 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 15:58:13,788 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:58:13,796 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:58:13,806 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:58:13,814 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:58:13,824 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:58:13,834 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:58:13,845 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:58:13,853 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:58:13,862 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:58:13,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:58:13,883 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:58:13,893 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:58:13,903 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:58:13,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:58:13,924 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:58:13,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:58:13,944 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:58:13,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:58:14,008 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 15:58:14,011 INFO L134 CoverageAnalysis]: Checked inductivity of 951 backedges. 20 proven. 931 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:14,011 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:58:14,018 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_5921 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_5921) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 1)) 0)) is different from false [2022-12-14 15:58:14,022 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_5921 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_5921) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-12-14 15:58:14,106 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_5921 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_5921) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2022-12-14 15:58:14,112 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_5921 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_5921) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 5)) 0)) is different from false [2022-12-14 15:58:14,409 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_5921 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_5921) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 9)) 0)) is different from false [2022-12-14 15:58:15,168 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-12-14 15:58:15,169 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 15:58:15,384 INFO L134 CoverageAnalysis]: Checked inductivity of 951 backedges. 20 proven. 691 refuted. 0 times theorem prover too weak. 0 trivial. 240 not checked. [2022-12-14 15:58:15,384 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [177162255] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:58:15,384 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1510950691] [2022-12-14 15:58:15,385 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:58:15,385 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:58:15,385 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:58:15,385 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:58:15,386 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:58:15,402 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:58:15,404 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:58:15,426 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:15,461 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:15,474 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:15,504 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:15,539 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:58:15,553 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:58:15,554 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:58:15,613 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:58:15,613 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:58:15,653 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:58:15,653 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:58:15,657 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:58:16,751 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '33599#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:58:16,752 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:58:16,752 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:58:16,752 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [45, 46, 46] total 83 [2022-12-14 15:58:16,752 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [780390211] [2022-12-14 15:58:16,752 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:58:16,752 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 83 states [2022-12-14 15:58:16,753 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:58:16,753 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 83 interpolants. [2022-12-14 15:58:16,753 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=236, Invalid=6960, Unknown=134, NotChecked=860, Total=8190 [2022-12-14 15:58:16,753 INFO L87 Difference]: Start difference. First operand 106 states and 107 transitions. Second operand has 83 states, 83 states have (on average 2.2771084337349397) internal successors, (189), 83 states have internal predecessors, (189), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:20,912 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:58:20,912 INFO L93 Difference]: Finished difference Result 170 states and 171 transitions. [2022-12-14 15:58:20,912 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 65 states. [2022-12-14 15:58:20,912 INFO L78 Accepts]: Start accepts. Automaton has has 83 states, 83 states have (on average 2.2771084337349397) internal successors, (189), 83 states have internal predecessors, (189), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 103 [2022-12-14 15:58:20,912 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:58:20,913 INFO L225 Difference]: With dead ends: 170 [2022-12-14 15:58:20,913 INFO L226 Difference]: Without dead ends: 109 [2022-12-14 15:58:20,913 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 413 GetRequests, 270 SyntacticMatches, 12 SemanticMatches, 131 ConstructedPredicates, 5 IntricatePredicates, 2 DeprecatedPredicates, 2331 ImplicationChecksByTransitivity, 5.8s TimeCoverageRelationStatistics Valid=578, Invalid=15563, Unknown=135, NotChecked=1280, Total=17556 [2022-12-14 15:58:20,913 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 124 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 5320 mSolverCounterSat, 20 mSolverCounterUnsat, 138 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 124 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 5850 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 5320 IncrementalHoareTripleChecker+Invalid, 138 IncrementalHoareTripleChecker+Unknown, 372 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:58:20,914 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [124 Valid, 110 Invalid, 5850 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 5320 Invalid, 138 Unknown, 372 Unchecked, 2.0s Time] [2022-12-14 15:58:20,914 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109 states. [2022-12-14 15:58:20,914 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109 to 108. [2022-12-14 15:58:20,915 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 106 states have (on average 1.028301886792453) internal successors, (109), 107 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:20,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 109 transitions. [2022-12-14 15:58:20,915 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 109 transitions. Word has length 103 [2022-12-14 15:58:20,915 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:58:20,915 INFO L495 AbstractCegarLoop]: Abstraction has 108 states and 109 transitions. [2022-12-14 15:58:20,915 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 83 states, 83 states have (on average 2.2771084337349397) internal successors, (189), 83 states have internal predecessors, (189), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:20,915 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 109 transitions. [2022-12-14 15:58:20,916 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 106 [2022-12-14 15:58:20,916 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:58:20,916 INFO L195 NwaCegarLoop]: trace histogram [20, 20, 20, 20, 20, 1, 1, 1, 1, 1] [2022-12-14 15:58:20,926 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (60)] Ended with exit code 0 [2022-12-14 15:58:21,116 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable68,60 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:58:21,117 INFO L420 AbstractCegarLoop]: === Iteration 70 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:58:21,118 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:58:21,118 INFO L85 PathProgramCache]: Analyzing trace with hash 457457473, now seen corresponding path program 39 times [2022-12-14 15:58:21,118 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:58:21,119 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [105908103] [2022-12-14 15:58:21,119 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:58:21,120 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:58:21,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:58:22,369 INFO L134 CoverageAnalysis]: Checked inductivity of 990 backedges. 324 proven. 666 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:22,369 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:58:22,369 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [105908103] [2022-12-14 15:58:22,369 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [105908103] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:58:22,369 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1195054324] [2022-12-14 15:58:22,370 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:58:22,370 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:58:22,370 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:58:22,370 INFO L229 MonitoredProcess]: Starting monitored process 61 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:58:22,371 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (61)] Waiting until timeout for monitored process [2022-12-14 15:58:31,884 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:58:31,884 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:58:31,896 INFO L263 TraceCheckSpWp]: Trace formula consists of 801 conjuncts, 116 conjunts are in the unsatisfiable core [2022-12-14 15:58:31,898 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:58:31,909 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:58:31,909 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:58:32,514 INFO L134 CoverageAnalysis]: Checked inductivity of 990 backedges. 361 proven. 629 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:32,514 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:58:34,653 INFO L134 CoverageAnalysis]: Checked inductivity of 990 backedges. 361 proven. 629 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:34,653 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1195054324] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:58:34,653 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1161564707] [2022-12-14 15:58:34,654 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:58:34,654 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:58:34,654 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:58:34,654 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:58:34,654 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:58:34,671 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:58:34,673 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:58:34,703 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:34,728 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:34,742 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:34,771 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:34,808 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:58:34,828 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:58:34,828 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:58:34,883 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:58:34,884 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:58:34,931 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:58:34,931 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:58:34,939 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:58:36,726 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '34701#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= 0 |#NULL.offset|) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:58:36,726 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:58:36,726 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:58:36,726 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [43, 43, 43] total 107 [2022-12-14 15:58:36,727 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [361971189] [2022-12-14 15:58:36,727 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:58:36,727 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 108 states [2022-12-14 15:58:36,727 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:58:36,728 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 108 interpolants. [2022-12-14 15:58:36,728 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1692, Invalid=11648, Unknown=0, NotChecked=0, Total=13340 [2022-12-14 15:58:36,728 INFO L87 Difference]: Start difference. First operand 108 states and 109 transitions. Second operand has 108 states, 107 states have (on average 2.383177570093458) internal successors, (255), 108 states have internal predecessors, (255), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:38,317 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:58:38,318 INFO L93 Difference]: Finished difference Result 113 states and 114 transitions. [2022-12-14 15:58:38,318 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2022-12-14 15:58:38,318 INFO L78 Accepts]: Start accepts. Automaton has has 108 states, 107 states have (on average 2.383177570093458) internal successors, (255), 108 states have internal predecessors, (255), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 105 [2022-12-14 15:58:38,318 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:58:38,318 INFO L225 Difference]: With dead ends: 113 [2022-12-14 15:58:38,318 INFO L226 Difference]: Without dead ends: 113 [2022-12-14 15:58:38,319 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 379 GetRequests, 242 SyntacticMatches, 0 SemanticMatches, 137 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5707 ImplicationChecksByTransitivity, 4.9s TimeCoverageRelationStatistics Valid=3461, Invalid=15721, Unknown=0, NotChecked=0, Total=19182 [2022-12-14 15:58:38,319 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 718 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 3195 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 718 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 3196 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3195 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:58:38,319 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [718 Valid, 3 Invalid, 3196 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3195 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-12-14 15:58:38,320 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 113 states. [2022-12-14 15:58:38,320 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 113 to 110. [2022-12-14 15:58:38,320 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 108 states have (on average 1.0277777777777777) internal successors, (111), 109 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:38,321 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 111 transitions. [2022-12-14 15:58:38,321 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 111 transitions. Word has length 105 [2022-12-14 15:58:38,321 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:58:38,321 INFO L495 AbstractCegarLoop]: Abstraction has 110 states and 111 transitions. [2022-12-14 15:58:38,321 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 108 states, 107 states have (on average 2.383177570093458) internal successors, (255), 108 states have internal predecessors, (255), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:38,321 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 111 transitions. [2022-12-14 15:58:38,321 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2022-12-14 15:58:38,321 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:58:38,321 INFO L195 NwaCegarLoop]: trace histogram [21, 20, 20, 20, 20, 1, 1, 1, 1, 1] [2022-12-14 15:58:38,332 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (61)] Ended with exit code 0 [2022-12-14 15:58:38,522 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 61 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable69 [2022-12-14 15:58:38,522 INFO L420 AbstractCegarLoop]: === Iteration 71 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:58:38,523 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:58:38,523 INFO L85 PathProgramCache]: Analyzing trace with hash 1296279762, now seen corresponding path program 20 times [2022-12-14 15:58:38,524 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:58:38,524 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1947249691] [2022-12-14 15:58:38,524 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:58:38,524 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:58:38,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:58:40,868 INFO L134 CoverageAnalysis]: Checked inductivity of 1010 backedges. 324 proven. 686 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:40,869 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:58:40,869 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1947249691] [2022-12-14 15:58:40,869 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1947249691] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:58:40,869 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [401246188] [2022-12-14 15:58:40,869 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:58:40,869 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:58:40,869 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:58:40,870 INFO L229 MonitoredProcess]: Starting monitored process 62 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:58:40,870 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (62)] Waiting until timeout for monitored process [2022-12-14 15:58:54,304 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 21 check-sat command(s) [2022-12-14 15:58:54,304 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:58:54,322 INFO L263 TraceCheckSpWp]: Trace formula consists of 807 conjuncts, 116 conjunts are in the unsatisfiable core [2022-12-14 15:58:54,325 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:58:54,377 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:58:54,384 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 15:58:58,473 INFO L134 CoverageAnalysis]: Checked inductivity of 1010 backedges. 343 proven. 667 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:58,474 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:59:02,064 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:59:02,151 INFO L134 CoverageAnalysis]: Checked inductivity of 1010 backedges. 400 proven. 610 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:59:02,151 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [401246188] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:59:02,151 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [810097089] [2022-12-14 15:59:02,152 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:59:02,152 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:59:02,152 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:59:02,152 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:59:02,152 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:59:02,172 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:59:02,174 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:59:02,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:02,226 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:02,241 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:02,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:02,305 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:59:02,329 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:59:02,329 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:59:02,376 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:59:02,377 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:59:02,420 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:59:02,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:59:02,427 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:59:03,927 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '35743#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:59:03,927 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:59:03,927 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:59:03,927 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [44, 45, 44] total 133 [2022-12-14 15:59:03,927 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [226029034] [2022-12-14 15:59:03,927 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:59:03,927 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 135 states [2022-12-14 15:59:03,927 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:59:03,928 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 135 interpolants. [2022-12-14 15:59:03,929 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1747, Invalid=18559, Unknown=0, NotChecked=0, Total=20306 [2022-12-14 15:59:03,929 INFO L87 Difference]: Start difference. First operand 110 states and 111 transitions. Second operand has 135 states, 134 states have (on average 2.373134328358209) internal successors, (318), 134 states have internal predecessors, (318), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:12,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:59:12,843 INFO L93 Difference]: Finished difference Result 112 states and 113 transitions. [2022-12-14 15:59:12,843 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 66 states. [2022-12-14 15:59:12,843 INFO L78 Accepts]: Start accepts. Automaton has has 135 states, 134 states have (on average 2.373134328358209) internal successors, (318), 134 states have internal predecessors, (318), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 106 [2022-12-14 15:59:12,843 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:59:12,843 INFO L225 Difference]: With dead ends: 112 [2022-12-14 15:59:12,843 INFO L226 Difference]: Without dead ends: 112 [2022-12-14 15:59:12,845 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 423 GetRequests, 218 SyntacticMatches, 1 SemanticMatches, 204 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9775 ImplicationChecksByTransitivity, 16.2s TimeCoverageRelationStatistics Valid=6271, Invalid=35959, Unknown=0, NotChecked=0, Total=42230 [2022-12-14 15:59:12,845 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 961 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3424 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 961 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 3447 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 3424 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-12-14 15:59:12,845 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [961 Valid, 0 Invalid, 3447 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 3424 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2022-12-14 15:59:12,845 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 112 states. [2022-12-14 15:59:12,846 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 112 to 111. [2022-12-14 15:59:12,846 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 111 states, 109 states have (on average 1.0275229357798166) internal successors, (112), 110 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:12,846 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 111 states to 111 states and 112 transitions. [2022-12-14 15:59:12,846 INFO L78 Accepts]: Start accepts. Automaton has 111 states and 112 transitions. Word has length 106 [2022-12-14 15:59:12,846 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:59:12,846 INFO L495 AbstractCegarLoop]: Abstraction has 111 states and 112 transitions. [2022-12-14 15:59:12,846 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 135 states, 134 states have (on average 2.373134328358209) internal successors, (318), 134 states have internal predecessors, (318), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:12,846 INFO L276 IsEmpty]: Start isEmpty. Operand 111 states and 112 transitions. [2022-12-14 15:59:12,847 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2022-12-14 15:59:12,847 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:59:12,847 INFO L195 NwaCegarLoop]: trace histogram [21, 21, 21, 20, 20, 1, 1, 1, 1, 1] [2022-12-14 15:59:12,858 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (62)] Ended with exit code 0 [2022-12-14 15:59:13,047 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable70,62 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:59:13,047 INFO L420 AbstractCegarLoop]: === Iteration 72 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:59:13,047 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:59:13,047 INFO L85 PathProgramCache]: Analyzing trace with hash 184335736, now seen corresponding path program 40 times [2022-12-14 15:59:13,047 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:59:13,048 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1215542606] [2022-12-14 15:59:13,048 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:59:13,048 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:59:13,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:59:15,696 INFO L134 CoverageAnalysis]: Checked inductivity of 1051 backedges. 21 proven. 1030 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:59:15,696 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:59:15,697 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1215542606] [2022-12-14 15:59:15,697 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1215542606] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:59:15,697 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [729561119] [2022-12-14 15:59:15,697 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:59:15,697 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:59:15,697 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:59:15,698 INFO L229 MonitoredProcess]: Starting monitored process 63 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:59:15,698 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (63)] Waiting until timeout for monitored process [2022-12-14 15:59:16,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:59:16,016 INFO L263 TraceCheckSpWp]: Trace formula consists of 824 conjuncts, 210 conjunts are in the unsatisfiable core [2022-12-14 15:59:16,020 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:59:16,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:59:16,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:16,892 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 15:59:16,929 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:16,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:16,941 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:16,949 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:16,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:16,961 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:16,968 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:16,975 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:16,981 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:16,988 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:16,994 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:17,001 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:17,009 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:17,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:17,025 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:17,033 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:17,041 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:17,058 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:17,068 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:17,108 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 15:59:17,111 INFO L134 CoverageAnalysis]: Checked inductivity of 1051 backedges. 21 proven. 1030 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:59:17,111 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:59:17,117 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 1)) 0)) is different from false [2022-12-14 15:59:17,122 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-12-14 15:59:17,239 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2022-12-14 15:59:17,367 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 6)) 0)) is different from false [2022-12-14 15:59:17,376 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ 7 |c_ULTIMATE.start_cstrcpy_~from#1.offset|)) 0)) is different from false [2022-12-14 15:59:17,383 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 8)) 0)) is different from false [2022-12-14 15:59:17,511 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 10)) 0)) is different from false [2022-12-14 15:59:17,635 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 12)) 0)) is different from false [2022-12-14 15:59:17,642 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 13)) 0)) is different from false [2022-12-14 15:59:17,648 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 14)) 0)) is different from false [2022-12-14 15:59:18,001 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 18)))) is different from false [2022-12-14 15:59:18,127 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_6476 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_6476) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 20)) 0)) is different from false [2022-12-14 15:59:18,135 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:59:18,136 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 15:59:18,139 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:59:18,139 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 15:59:18,390 INFO L134 CoverageAnalysis]: Checked inductivity of 1051 backedges. 21 proven. 517 refuted. 0 times theorem prover too weak. 0 trivial. 513 not checked. [2022-12-14 15:59:18,391 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [729561119] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:59:18,391 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1407095587] [2022-12-14 15:59:18,392 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:59:18,392 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:59:18,392 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:59:18,392 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:59:18,392 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:59:18,414 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:59:18,415 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:59:18,438 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:59:18,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:18,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:18,527 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:18,553 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:59:18,568 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:59:18,568 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:59:18,635 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:59:18,699 INFO L321 Elim1Store]: treesize reduction 167, result has 22.3 percent of original size [2022-12-14 15:59:18,699 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 212 treesize of output 225 [2022-12-14 15:59:18,864 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:59:18,864 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:59:18,907 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:59:18,907 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:59:18,915 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:59:20,135 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '36836#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:59:20,135 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:59:20,135 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:59:20,135 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [47, 48, 48] total 94 [2022-12-14 15:59:20,136 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1676385025] [2022-12-14 15:59:20,136 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:59:20,136 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 94 states [2022-12-14 15:59:20,136 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:59:20,136 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 94 interpolants. [2022-12-14 15:59:20,137 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=258, Invalid=7628, Unknown=172, NotChecked=2244, Total=10302 [2022-12-14 15:59:20,137 INFO L87 Difference]: Start difference. First operand 111 states and 112 transitions. Second operand has 94 states, 94 states have (on average 2.3297872340425534) internal successors, (219), 94 states have internal predecessors, (219), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:25,926 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:59:25,926 INFO L93 Difference]: Finished difference Result 178 states and 179 transitions. [2022-12-14 15:59:25,927 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 67 states. [2022-12-14 15:59:25,927 INFO L78 Accepts]: Start accepts. Automaton has has 94 states, 94 states have (on average 2.3297872340425534) internal successors, (219), 94 states have internal predecessors, (219), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 108 [2022-12-14 15:59:25,927 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:59:25,928 INFO L225 Difference]: With dead ends: 178 [2022-12-14 15:59:25,928 INFO L226 Difference]: Without dead ends: 114 [2022-12-14 15:59:25,928 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 433 GetRequests, 287 SyntacticMatches, 3 SemanticMatches, 143 ConstructedPredicates, 12 IntricatePredicates, 0 DeprecatedPredicates, 2228 ImplicationChecksByTransitivity, 7.0s TimeCoverageRelationStatistics Valid=603, Invalid=16829, Unknown=172, NotChecked=3276, Total=20880 [2022-12-14 15:59:25,928 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 195 mSDsluCounter, 129 mSDsCounter, 0 mSdLazyCounter, 6004 mSolverCounterSat, 21 mSolverCounterUnsat, 130 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 195 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 7455 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 6004 IncrementalHoareTripleChecker+Invalid, 130 IncrementalHoareTripleChecker+Unknown, 1300 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2022-12-14 15:59:25,929 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [195 Valid, 132 Invalid, 7455 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 6004 Invalid, 130 Unknown, 1300 Unchecked, 2.8s Time] [2022-12-14 15:59:25,929 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114 states. [2022-12-14 15:59:25,929 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114 to 113. [2022-12-14 15:59:25,929 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 113 states, 111 states have (on average 1.027027027027027) internal successors, (114), 112 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:25,930 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 113 states to 113 states and 114 transitions. [2022-12-14 15:59:25,930 INFO L78 Accepts]: Start accepts. Automaton has 113 states and 114 transitions. Word has length 108 [2022-12-14 15:59:25,930 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:59:25,930 INFO L495 AbstractCegarLoop]: Abstraction has 113 states and 114 transitions. [2022-12-14 15:59:25,930 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 94 states, 94 states have (on average 2.3297872340425534) internal successors, (219), 94 states have internal predecessors, (219), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:25,930 INFO L276 IsEmpty]: Start isEmpty. Operand 113 states and 114 transitions. [2022-12-14 15:59:25,930 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2022-12-14 15:59:25,930 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:59:25,930 INFO L195 NwaCegarLoop]: trace histogram [21, 21, 21, 21, 21, 1, 1, 1, 1, 1] [2022-12-14 15:59:25,938 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (63)] Ended with exit code 0 [2022-12-14 15:59:26,131 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable71,63 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:59:26,132 INFO L420 AbstractCegarLoop]: === Iteration 73 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:59:26,132 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:59:26,132 INFO L85 PathProgramCache]: Analyzing trace with hash -1850799358, now seen corresponding path program 41 times [2022-12-14 15:59:26,133 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:59:26,133 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1323671958] [2022-12-14 15:59:26,133 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:59:26,133 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:59:26,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:59:27,754 INFO L134 CoverageAnalysis]: Checked inductivity of 1092 backedges. 361 proven. 731 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:59:27,754 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:59:27,754 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1323671958] [2022-12-14 15:59:27,754 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1323671958] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:59:27,754 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [876527481] [2022-12-14 15:59:27,754 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:59:27,754 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:59:27,754 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:59:27,755 INFO L229 MonitoredProcess]: Starting monitored process 64 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:59:27,756 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (64)] Waiting until timeout for monitored process [2022-12-14 15:59:52,367 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 22 check-sat command(s) [2022-12-14 15:59:52,368 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:59:52,394 INFO L263 TraceCheckSpWp]: Trace formula consists of 837 conjuncts, 97 conjunts are in the unsatisfiable core [2022-12-14 15:59:52,396 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:59:53,992 INFO L134 CoverageAnalysis]: Checked inductivity of 1092 backedges. 400 proven. 692 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:59:53,992 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:59:55,244 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-12-14 15:59:55,737 INFO L134 CoverageAnalysis]: Checked inductivity of 1092 backedges. 400 proven. 692 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:59:55,738 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [876527481] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:59:55,738 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [717082229] [2022-12-14 15:59:55,738 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:59:55,738 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:59:55,738 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:59:55,738 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:59:55,738 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:59:55,755 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:59:55,757 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:59:55,777 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:59:55,801 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:55,824 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:55,862 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:55,879 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:59:55,901 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 15:59:55,901 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 15:59:56,023 INFO L321 Elim1Store]: treesize reduction 161, result has 23.7 percent of original size [2022-12-14 15:59:56,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 207 treesize of output 218 [2022-12-14 15:59:56,217 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:59:56,218 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:59:56,259 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 15:59:56,259 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 15:59:56,269 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:59:57,479 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '37990#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 15:59:57,479 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:59:57,479 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:59:57,479 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [45, 46, 46] total 113 [2022-12-14 15:59:57,479 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1822371968] [2022-12-14 15:59:57,479 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:59:57,480 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 114 states [2022-12-14 15:59:57,480 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:59:57,480 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 114 interpolants. [2022-12-14 15:59:57,481 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=2097, Invalid=12665, Unknown=0, NotChecked=0, Total=14762 [2022-12-14 15:59:57,481 INFO L87 Difference]: Start difference. First operand 113 states and 114 transitions. Second operand has 114 states, 113 states have (on average 2.5132743362831858) internal successors, (284), 114 states have internal predecessors, (284), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:58,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:59:58,676 INFO L93 Difference]: Finished difference Result 118 states and 119 transitions. [2022-12-14 15:59:58,677 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2022-12-14 15:59:58,677 INFO L78 Accepts]: Start accepts. Automaton has has 114 states, 113 states have (on average 2.5132743362831858) internal successors, (284), 114 states have internal predecessors, (284), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 110 [2022-12-14 15:59:58,677 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:59:58,677 INFO L225 Difference]: With dead ends: 118 [2022-12-14 15:59:58,677 INFO L226 Difference]: Without dead ends: 118 [2022-12-14 15:59:58,678 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 397 GetRequests, 231 SyntacticMatches, 22 SemanticMatches, 144 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8535 ImplicationChecksByTransitivity, 5.4s TimeCoverageRelationStatistics Valid=3792, Invalid=17378, Unknown=0, NotChecked=0, Total=21170 [2022-12-14 15:59:58,678 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 303 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 2097 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 303 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 2098 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 2097 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-12-14 15:59:58,678 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [303 Valid, 3 Invalid, 2098 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 2097 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-12-14 15:59:58,678 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 118 states. [2022-12-14 15:59:58,679 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 118 to 115. [2022-12-14 15:59:58,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 115 states, 113 states have (on average 1.0265486725663717) internal successors, (116), 114 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:58,679 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 115 states to 115 states and 116 transitions. [2022-12-14 15:59:58,679 INFO L78 Accepts]: Start accepts. Automaton has 115 states and 116 transitions. Word has length 110 [2022-12-14 15:59:58,680 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:59:58,680 INFO L495 AbstractCegarLoop]: Abstraction has 115 states and 116 transitions. [2022-12-14 15:59:58,680 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 114 states, 113 states have (on average 2.5132743362831858) internal successors, (284), 114 states have internal predecessors, (284), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:58,680 INFO L276 IsEmpty]: Start isEmpty. Operand 115 states and 116 transitions. [2022-12-14 15:59:58,680 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 112 [2022-12-14 15:59:58,680 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:59:58,680 INFO L195 NwaCegarLoop]: trace histogram [22, 21, 21, 21, 21, 1, 1, 1, 1, 1] [2022-12-14 15:59:58,693 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (64)] Forceful destruction successful, exit code 0 [2022-12-14 15:59:58,881 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable72,64 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:59:58,881 INFO L420 AbstractCegarLoop]: === Iteration 74 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 15:59:58,882 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:59:58,882 INFO L85 PathProgramCache]: Analyzing trace with hash -1540205263, now seen corresponding path program 21 times [2022-12-14 15:59:58,882 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:59:58,883 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2084069034] [2022-12-14 15:59:58,883 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:59:58,883 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:59:59,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:00:01,107 INFO L134 CoverageAnalysis]: Checked inductivity of 1113 backedges. 361 proven. 752 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:01,107 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:00:01,107 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2084069034] [2022-12-14 16:00:01,107 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2084069034] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:00:01,107 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1045057671] [2022-12-14 16:00:01,108 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 16:00:01,108 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:00:01,108 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:00:01,108 INFO L229 MonitoredProcess]: Starting monitored process 65 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:00:01,109 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (65)] Waiting until timeout for monitored process [2022-12-14 16:00:04,500 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 16:00:04,500 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:00:04,510 INFO L263 TraceCheckSpWp]: Trace formula consists of 843 conjuncts, 180 conjunts are in the unsatisfiable core [2022-12-14 16:00:04,512 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:00:04,563 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:00:04,564 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 16:00:04,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 16:00:06,982 INFO L134 CoverageAnalysis]: Checked inductivity of 1113 backedges. 400 proven. 713 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:06,982 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:00:09,900 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:00:09,983 INFO L134 CoverageAnalysis]: Checked inductivity of 1113 backedges. 441 proven. 672 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:09,984 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1045057671] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:00:09,984 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1446691453] [2022-12-14 16:00:09,984 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:00:09,985 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:00:09,985 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:00:09,985 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:00:09,985 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:00:10,002 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:00:10,004 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:00:10,028 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:10,059 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:10,078 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:10,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:10,140 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:00:10,162 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 16:00:10,163 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 16:00:10,212 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 16:00:10,212 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 16:00:10,253 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 16:00:10,254 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 16:00:10,259 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:00:11,743 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '39077#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 16:00:11,743 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:00:11,743 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:00:11,744 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [46, 45, 45] total 136 [2022-12-14 16:00:11,744 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1781747333] [2022-12-14 16:00:11,744 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:00:11,744 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 138 states [2022-12-14 16:00:11,744 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:00:11,745 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 138 interpolants. [2022-12-14 16:00:11,745 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1724, Invalid=19446, Unknown=0, NotChecked=0, Total=21170 [2022-12-14 16:00:11,745 INFO L87 Difference]: Start difference. First operand 115 states and 116 transitions. Second operand has 138 states, 137 states have (on average 2.4306569343065694) internal successors, (333), 137 states have internal predecessors, (333), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:15,760 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:00:15,760 INFO L93 Difference]: Finished difference Result 117 states and 118 transitions. [2022-12-14 16:00:15,760 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 48 states. [2022-12-14 16:00:15,760 INFO L78 Accepts]: Start accepts. Automaton has has 138 states, 137 states have (on average 2.4306569343065694) internal successors, (333), 137 states have internal predecessors, (333), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 111 [2022-12-14 16:00:15,760 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:00:15,761 INFO L225 Difference]: With dead ends: 117 [2022-12-14 16:00:15,761 INFO L226 Difference]: Without dead ends: 117 [2022-12-14 16:00:15,762 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 422 GetRequests, 233 SyntacticMatches, 0 SemanticMatches, 189 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8612 ImplicationChecksByTransitivity, 9.4s TimeCoverageRelationStatistics Valid=5196, Invalid=31094, Unknown=0, NotChecked=0, Total=36290 [2022-12-14 16:00:15,762 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 807 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 5596 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 807 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 5597 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 5596 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-12-14 16:00:15,762 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [807 Valid, 0 Invalid, 5597 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 5596 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2022-12-14 16:00:15,763 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117 states. [2022-12-14 16:00:15,763 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117 to 116. [2022-12-14 16:00:15,763 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 116 states, 114 states have (on average 1.0263157894736843) internal successors, (117), 115 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:15,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 116 states to 116 states and 117 transitions. [2022-12-14 16:00:15,764 INFO L78 Accepts]: Start accepts. Automaton has 116 states and 117 transitions. Word has length 111 [2022-12-14 16:00:15,764 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:00:15,764 INFO L495 AbstractCegarLoop]: Abstraction has 116 states and 117 transitions. [2022-12-14 16:00:15,764 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 138 states, 137 states have (on average 2.4306569343065694) internal successors, (333), 137 states have internal predecessors, (333), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:15,764 INFO L276 IsEmpty]: Start isEmpty. Operand 116 states and 117 transitions. [2022-12-14 16:00:15,764 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2022-12-14 16:00:15,765 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:00:15,765 INFO L195 NwaCegarLoop]: trace histogram [22, 22, 22, 21, 21, 1, 1, 1, 1, 1] [2022-12-14 16:00:15,774 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (65)] Ended with exit code 0 [2022-12-14 16:00:15,965 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable73,65 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:00:15,966 INFO L420 AbstractCegarLoop]: === Iteration 75 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 16:00:15,967 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:00:15,968 INFO L85 PathProgramCache]: Analyzing trace with hash 1626459671, now seen corresponding path program 42 times [2022-12-14 16:00:15,968 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:00:15,968 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1373172025] [2022-12-14 16:00:15,968 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:00:15,969 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:00:16,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:00:18,617 INFO L134 CoverageAnalysis]: Checked inductivity of 1156 backedges. 22 proven. 1134 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:18,617 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:00:18,617 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1373172025] [2022-12-14 16:00:18,618 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1373172025] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:00:18,618 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [976017420] [2022-12-14 16:00:18,618 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 16:00:18,618 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:00:18,618 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:00:18,619 INFO L229 MonitoredProcess]: Starting monitored process 66 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:00:18,619 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (66)] Waiting until timeout for monitored process [2022-12-14 16:00:21,536 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 16:00:21,536 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:00:21,547 INFO L263 TraceCheckSpWp]: Trace formula consists of 860 conjuncts, 217 conjunts are in the unsatisfiable core [2022-12-14 16:00:21,551 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:00:21,554 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 16:00:22,604 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:22,715 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 16:00:22,765 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,782 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,791 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,808 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,817 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,826 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,835 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,844 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,853 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,862 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,871 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,880 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,888 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,897 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,905 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,914 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,923 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,932 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:00:22,979 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 16:00:22,981 INFO L134 CoverageAnalysis]: Checked inductivity of 1156 backedges. 22 proven. 1134 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:22,981 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:00:23,080 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-12-14 16:00:23,359 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 6)) 0)) is different from false [2022-12-14 16:00:23,364 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ 7 |c_ULTIMATE.start_cstrcpy_~from#1.offset|)) 0)) is different from false [2022-12-14 16:00:23,463 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 9)) 0)) is different from false [2022-12-14 16:00:23,564 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 11)) 0)) is different from false [2022-12-14 16:00:23,569 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 12)) 0)) is different from false [2022-12-14 16:00:23,575 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 13)) 0)) is different from false [2022-12-14 16:00:23,581 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 14)) 0)) is different from false [2022-12-14 16:00:23,694 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 16)) 0)) is different from false [2022-12-14 16:00:24,058 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 20)) 0)) is different from false [2022-12-14 16:00:24,064 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7054 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7054) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 21)) 0)) is different from false [2022-12-14 16:00:24,071 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 16:00:24,072 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 16:00:24,076 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 16:00:24,076 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 16:00:24,395 INFO L134 CoverageAnalysis]: Checked inductivity of 1156 backedges. 22 proven. 606 refuted. 0 times theorem prover too weak. 0 trivial. 528 not checked. [2022-12-14 16:00:24,395 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [976017420] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:00:24,395 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2032623799] [2022-12-14 16:00:24,395 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:00:24,395 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:00:24,396 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:00:24,396 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:00:24,396 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:00:24,418 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:00:24,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:00:24,443 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:24,467 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:24,482 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:24,514 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:24,542 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:00:24,560 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 16:00:24,560 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 16:00:24,608 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 16:00:24,609 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 16:00:24,642 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 16:00:24,642 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 16:00:24,648 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:00:25,921 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '40178#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 16:00:25,921 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:00:25,921 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:00:25,921 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [49, 50, 50] total 98 [2022-12-14 16:00:25,921 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2097748683] [2022-12-14 16:00:25,921 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:00:25,922 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 98 states [2022-12-14 16:00:25,922 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:00:25,922 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 98 interpolants. [2022-12-14 16:00:25,923 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=269, Invalid=8460, Unknown=245, NotChecked=2156, Total=11130 [2022-12-14 16:00:25,923 INFO L87 Difference]: Start difference. First operand 116 states and 117 transitions. Second operand has 98 states, 98 states have (on average 2.336734693877551) internal successors, (229), 98 states have internal predecessors, (229), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:30,754 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:00:30,754 INFO L93 Difference]: Finished difference Result 186 states and 187 transitions. [2022-12-14 16:00:30,754 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 71 states. [2022-12-14 16:00:30,754 INFO L78 Accepts]: Start accepts. Automaton has has 98 states, 98 states have (on average 2.336734693877551) internal successors, (229), 98 states have internal predecessors, (229), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 113 [2022-12-14 16:00:30,754 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:00:30,754 INFO L225 Difference]: With dead ends: 186 [2022-12-14 16:00:30,754 INFO L226 Difference]: Without dead ends: 119 [2022-12-14 16:00:30,755 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 446 GetRequests, 300 SyntacticMatches, 8 SemanticMatches, 138 ConstructedPredicates, 11 IntricatePredicates, 0 DeprecatedPredicates, 2151 ImplicationChecksByTransitivity, 6.6s TimeCoverageRelationStatistics Valid=506, Invalid=15804, Unknown=246, NotChecked=2904, Total=19460 [2022-12-14 16:00:30,755 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 129 mSDsluCounter, 127 mSDsCounter, 0 mSdLazyCounter, 7224 mSolverCounterSat, 22 mSolverCounterUnsat, 60 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 8547 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 7224 IncrementalHoareTripleChecker+Invalid, 60 IncrementalHoareTripleChecker+Unknown, 1241 IncrementalHoareTripleChecker+Unchecked, 2.6s IncrementalHoareTripleChecker+Time [2022-12-14 16:00:30,755 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [129 Valid, 130 Invalid, 8547 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 7224 Invalid, 60 Unknown, 1241 Unchecked, 2.6s Time] [2022-12-14 16:00:30,756 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 119 states. [2022-12-14 16:00:30,756 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 119 to 118. [2022-12-14 16:00:30,756 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 118 states, 116 states have (on average 1.0258620689655173) internal successors, (119), 117 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:30,757 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 118 states to 118 states and 119 transitions. [2022-12-14 16:00:30,757 INFO L78 Accepts]: Start accepts. Automaton has 118 states and 119 transitions. Word has length 113 [2022-12-14 16:00:30,757 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:00:30,757 INFO L495 AbstractCegarLoop]: Abstraction has 118 states and 119 transitions. [2022-12-14 16:00:30,757 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 98 states, 98 states have (on average 2.336734693877551) internal successors, (229), 98 states have internal predecessors, (229), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:30,757 INFO L276 IsEmpty]: Start isEmpty. Operand 118 states and 119 transitions. [2022-12-14 16:00:30,757 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 116 [2022-12-14 16:00:30,757 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:00:30,757 INFO L195 NwaCegarLoop]: trace histogram [22, 22, 22, 22, 22, 1, 1, 1, 1, 1] [2022-12-14 16:00:30,766 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (66)] Ended with exit code 0 [2022-12-14 16:00:30,958 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 66 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable74 [2022-12-14 16:00:30,958 INFO L420 AbstractCegarLoop]: === Iteration 76 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 16:00:30,959 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:00:30,959 INFO L85 PathProgramCache]: Analyzing trace with hash -1977325875, now seen corresponding path program 43 times [2022-12-14 16:00:30,959 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:00:30,960 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [818898175] [2022-12-14 16:00:30,960 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:00:30,960 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:00:31,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:00:32,719 INFO L134 CoverageAnalysis]: Checked inductivity of 1199 backedges. 400 proven. 799 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:32,719 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:00:32,719 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [818898175] [2022-12-14 16:00:32,719 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [818898175] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:00:32,719 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [654649321] [2022-12-14 16:00:32,719 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 16:00:32,720 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:00:32,720 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:00:32,720 INFO L229 MonitoredProcess]: Starting monitored process 67 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:00:32,721 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (67)] Waiting until timeout for monitored process [2022-12-14 16:00:32,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:00:32,989 INFO L263 TraceCheckSpWp]: Trace formula consists of 873 conjuncts, 122 conjunts are in the unsatisfiable core [2022-12-14 16:00:32,991 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:00:33,874 INFO L134 CoverageAnalysis]: Checked inductivity of 1199 backedges. 441 proven. 758 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:33,874 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:00:35,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 16:00:35,647 INFO L134 CoverageAnalysis]: Checked inductivity of 1199 backedges. 441 proven. 758 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:35,647 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [654649321] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:00:35,647 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1333603571] [2022-12-14 16:00:35,648 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:00:35,648 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:00:35,648 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:00:35,648 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:00:35,648 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:00:35,670 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:00:35,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:00:35,690 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:00:35,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:35,747 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:35,772 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:35,794 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:00:35,806 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 16:00:35,806 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 16:00:35,933 INFO L321 Elim1Store]: treesize reduction 169, result has 22.8 percent of original size [2022-12-14 16:00:35,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 212 treesize of output 223 [2022-12-14 16:00:36,016 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 16:00:36,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 16:00:36,049 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 16:00:36,050 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 16:00:36,057 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:00:37,198 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '41344#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 16:00:37,198 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:00:37,198 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:00:37,198 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [47, 48, 48] total 96 [2022-12-14 16:00:37,198 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1186883913] [2022-12-14 16:00:37,198 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:00:37,199 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 97 states [2022-12-14 16:00:37,199 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:00:37,199 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 97 interpolants. [2022-12-14 16:00:37,199 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1228, Invalid=9692, Unknown=0, NotChecked=0, Total=10920 [2022-12-14 16:00:37,200 INFO L87 Difference]: Start difference. First operand 118 states and 119 transitions. Second operand has 97 states, 96 states have (on average 2.4270833333333335) internal successors, (233), 97 states have internal predecessors, (233), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:39,429 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:00:39,429 INFO L93 Difference]: Finished difference Result 123 states and 124 transitions. [2022-12-14 16:00:39,430 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-12-14 16:00:39,430 INFO L78 Accepts]: Start accepts. Automaton has has 97 states, 96 states have (on average 2.4270833333333335) internal successors, (233), 97 states have internal predecessors, (233), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 115 [2022-12-14 16:00:39,430 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:00:39,430 INFO L225 Difference]: With dead ends: 123 [2022-12-14 16:00:39,430 INFO L226 Difference]: Without dead ends: 123 [2022-12-14 16:00:39,431 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 415 GetRequests, 264 SyntacticMatches, 23 SemanticMatches, 128 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6409 ImplicationChecksByTransitivity, 5.1s TimeCoverageRelationStatistics Valid=2753, Invalid=14017, Unknown=0, NotChecked=0, Total=16770 [2022-12-14 16:00:39,431 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 393 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3838 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 393 SdHoareTripleChecker+Valid, 1 SdHoareTripleChecker+Invalid, 3839 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3838 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-12-14 16:00:39,431 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [393 Valid, 1 Invalid, 3839 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3838 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-12-14 16:00:39,432 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 123 states. [2022-12-14 16:00:39,432 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 123 to 120. [2022-12-14 16:00:39,432 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 120 states, 118 states have (on average 1.0254237288135593) internal successors, (121), 119 states have internal predecessors, (121), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:39,432 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 120 states to 120 states and 121 transitions. [2022-12-14 16:00:39,433 INFO L78 Accepts]: Start accepts. Automaton has 120 states and 121 transitions. Word has length 115 [2022-12-14 16:00:39,433 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:00:39,433 INFO L495 AbstractCegarLoop]: Abstraction has 120 states and 121 transitions. [2022-12-14 16:00:39,433 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 97 states, 96 states have (on average 2.4270833333333335) internal successors, (233), 97 states have internal predecessors, (233), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:39,433 INFO L276 IsEmpty]: Start isEmpty. Operand 120 states and 121 transitions. [2022-12-14 16:00:39,433 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2022-12-14 16:00:39,433 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:00:39,433 INFO L195 NwaCegarLoop]: trace histogram [23, 22, 22, 22, 22, 1, 1, 1, 1, 1] [2022-12-14 16:00:39,439 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (67)] Ended with exit code 0 [2022-12-14 16:00:39,634 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 67 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable75 [2022-12-14 16:00:39,635 INFO L420 AbstractCegarLoop]: === Iteration 77 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 16:00:39,636 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:00:39,636 INFO L85 PathProgramCache]: Analyzing trace with hash -1167559994, now seen corresponding path program 22 times [2022-12-14 16:00:39,637 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:00:39,637 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [865941205] [2022-12-14 16:00:39,637 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:00:39,638 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:00:39,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:00:42,158 INFO L134 CoverageAnalysis]: Checked inductivity of 1221 backedges. 400 proven. 821 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:42,158 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:00:42,158 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [865941205] [2022-12-14 16:00:42,158 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [865941205] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:00:42,158 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [495843078] [2022-12-14 16:00:42,158 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 16:00:42,158 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:00:42,159 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:00:42,159 INFO L229 MonitoredProcess]: Starting monitored process 68 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:00:42,160 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (68)] Waiting until timeout for monitored process [2022-12-14 16:00:42,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:00:42,577 INFO L263 TraceCheckSpWp]: Trace formula consists of 879 conjuncts, 134 conjunts are in the unsatisfiable core [2022-12-14 16:00:42,580 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:00:42,633 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:00:42,633 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-12-14 16:00:42,635 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 16:00:46,679 INFO L134 CoverageAnalysis]: Checked inductivity of 1221 backedges. 441 proven. 780 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:46,679 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:00:50,303 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:00:50,430 INFO L134 CoverageAnalysis]: Checked inductivity of 1221 backedges. 484 proven. 737 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:50,430 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [495843078] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:00:50,430 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1565617697] [2022-12-14 16:00:50,431 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:00:50,431 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:00:50,431 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:00:50,431 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:00:50,431 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:00:50,463 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:00:50,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:00:50,487 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:50,522 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:50,540 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:50,575 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:50,606 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:00:50,624 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 16:00:50,625 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 16:00:50,701 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 16:00:50,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 16:00:50,750 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 16:00:50,750 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 16:00:50,769 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:00:52,930 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '42482#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= 0 |#NULL.offset|) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 16:00:52,930 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:00:52,931 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:00:52,931 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [48, 48, 49] total 145 [2022-12-14 16:00:52,931 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1505956887] [2022-12-14 16:00:52,931 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:00:52,931 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 147 states [2022-12-14 16:00:52,931 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:00:52,932 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 147 interpolants. [2022-12-14 16:00:52,933 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=2223, Invalid=21647, Unknown=0, NotChecked=0, Total=23870 [2022-12-14 16:00:52,933 INFO L87 Difference]: Start difference. First operand 120 states and 121 transitions. Second operand has 147 states, 146 states have (on average 2.3835616438356166) internal successors, (348), 146 states have internal predecessors, (348), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:59,728 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:00:59,728 INFO L93 Difference]: Finished difference Result 122 states and 123 transitions. [2022-12-14 16:00:59,728 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2022-12-14 16:00:59,729 INFO L78 Accepts]: Start accepts. Automaton has has 147 states, 146 states have (on average 2.3835616438356166) internal successors, (348), 146 states have internal predecessors, (348), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 116 [2022-12-14 16:00:59,729 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:00:59,729 INFO L225 Difference]: With dead ends: 122 [2022-12-14 16:00:59,729 INFO L226 Difference]: Without dead ends: 122 [2022-12-14 16:00:59,731 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 442 GetRequests, 241 SyntacticMatches, 0 SemanticMatches, 201 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10347 ImplicationChecksByTransitivity, 14.9s TimeCoverageRelationStatistics Valid=6123, Invalid=34883, Unknown=0, NotChecked=0, Total=41006 [2022-12-14 16:00:59,731 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 850 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 4554 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 850 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 4559 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 4554 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-12-14 16:00:59,731 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [850 Valid, 0 Invalid, 4559 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 4554 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2022-12-14 16:00:59,731 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 122 states. [2022-12-14 16:00:59,732 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 122 to 121. [2022-12-14 16:00:59,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 121 states, 119 states have (on average 1.0252100840336134) internal successors, (122), 120 states have internal predecessors, (122), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:59,732 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 121 states to 121 states and 122 transitions. [2022-12-14 16:00:59,732 INFO L78 Accepts]: Start accepts. Automaton has 121 states and 122 transitions. Word has length 116 [2022-12-14 16:00:59,732 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:00:59,732 INFO L495 AbstractCegarLoop]: Abstraction has 121 states and 122 transitions. [2022-12-14 16:00:59,733 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 147 states, 146 states have (on average 2.3835616438356166) internal successors, (348), 146 states have internal predecessors, (348), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:59,733 INFO L276 IsEmpty]: Start isEmpty. Operand 121 states and 122 transitions. [2022-12-14 16:00:59,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 119 [2022-12-14 16:00:59,733 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:00:59,733 INFO L195 NwaCegarLoop]: trace histogram [23, 23, 23, 22, 22, 1, 1, 1, 1, 1] [2022-12-14 16:00:59,740 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (68)] Ended with exit code 0 [2022-12-14 16:00:59,934 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 68 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable76 [2022-12-14 16:00:59,934 INFO L420 AbstractCegarLoop]: === Iteration 78 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 16:00:59,934 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:00:59,934 INFO L85 PathProgramCache]: Analyzing trace with hash -1038689684, now seen corresponding path program 44 times [2022-12-14 16:00:59,934 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:00:59,934 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [434427176] [2022-12-14 16:00:59,934 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:00:59,934 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:00:59,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:01:02,790 INFO L134 CoverageAnalysis]: Checked inductivity of 1266 backedges. 23 proven. 1243 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:01:02,790 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:01:02,790 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [434427176] [2022-12-14 16:01:02,791 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [434427176] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:01:02,791 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1709329027] [2022-12-14 16:01:02,791 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 16:01:02,791 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:01:02,791 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:01:02,792 INFO L229 MonitoredProcess]: Starting monitored process 69 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:01:02,792 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (69)] Waiting until timeout for monitored process [2022-12-14 16:01:26,164 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 24 check-sat command(s) [2022-12-14 16:01:26,164 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:01:26,185 INFO L263 TraceCheckSpWp]: Trace formula consists of 896 conjuncts, 233 conjunts are in the unsatisfiable core [2022-12-14 16:01:26,190 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:01:26,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 16:01:26,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 16:01:26,523 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:26,574 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:26,627 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:26,679 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:26,734 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:26,786 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:26,842 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:26,905 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:26,958 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:27,013 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:27,070 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:27,124 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:27,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:27,237 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:27,293 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:27,350 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:27,409 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:27,465 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:27,524 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:27,585 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:27,642 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:27,703 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 16:01:27,797 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 16:01:27,800 INFO L134 CoverageAnalysis]: Checked inductivity of 1266 backedges. 23 proven. 1243 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:01:27,800 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:01:27,848 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7657 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7657) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 1)) 0)) is different from false [2022-12-14 16:01:27,852 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7657 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7657) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-12-14 16:01:28,120 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_7657 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_7657) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 6)) 0)) is different from false [2022-12-14 16:01:29,327 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-12-14 16:01:29,328 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 16:01:31,144 INFO L134 CoverageAnalysis]: Checked inductivity of 1266 backedges. 23 proven. 1071 refuted. 3 times theorem prover too weak. 0 trivial. 169 not checked. [2022-12-14 16:01:31,144 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1709329027] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:01:31,144 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [26073406] [2022-12-14 16:01:31,145 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:01:31,145 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:01:31,145 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:01:31,145 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:01:31,145 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:01:31,163 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:01:31,164 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:01:31,188 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:31,211 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:31,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:31,252 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:31,296 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:01:31,316 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 16:01:31,316 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 16:01:31,365 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 16:01:31,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 16:01:31,401 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 16:01:31,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 16:01:31,408 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:01:32,776 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '43645#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 16:01:32,776 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:01:32,776 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:01:32,776 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [51, 52, 52] total 114 [2022-12-14 16:01:32,776 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [347784756] [2022-12-14 16:01:32,776 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:01:32,777 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 114 states [2022-12-14 16:01:32,777 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:01:32,777 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 114 interpolants. [2022-12-14 16:01:32,778 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=334, Invalid=13580, Unknown=140, NotChecked=708, Total=14762 [2022-12-14 16:01:32,778 INFO L87 Difference]: Start difference. First operand 121 states and 122 transitions. Second operand has 114 states, 114 states have (on average 2.3684210526315788) internal successors, (270), 114 states have internal predecessors, (270), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:01:38,910 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:01:38,910 INFO L93 Difference]: Finished difference Result 194 states and 195 transitions. [2022-12-14 16:01:38,911 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 73 states. [2022-12-14 16:01:38,911 INFO L78 Accepts]: Start accepts. Automaton has has 114 states, 114 states have (on average 2.3684210526315788) internal successors, (270), 114 states have internal predecessors, (270), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 118 [2022-12-14 16:01:38,911 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:01:38,911 INFO L225 Difference]: With dead ends: 194 [2022-12-14 16:01:38,912 INFO L226 Difference]: Without dead ends: 124 [2022-12-14 16:01:38,912 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 472 GetRequests, 291 SyntacticMatches, 15 SemanticMatches, 166 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 4868 ImplicationChecksByTransitivity, 9.5s TimeCoverageRelationStatistics Valid=723, Invalid=26207, Unknown=142, NotChecked=984, Total=28056 [2022-12-14 16:01:38,913 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 212 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 8676 mSolverCounterSat, 25 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 212 SdHoareTripleChecker+Valid, 125 SdHoareTripleChecker+Invalid, 8933 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 8676 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 227 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2022-12-14 16:01:38,913 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [212 Valid, 125 Invalid, 8933 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 8676 Invalid, 5 Unknown, 227 Unchecked, 3.0s Time] [2022-12-14 16:01:38,913 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 124 states. [2022-12-14 16:01:38,914 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 124 to 123. [2022-12-14 16:01:38,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 123 states, 121 states have (on average 1.024793388429752) internal successors, (124), 122 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:01:38,914 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 124 transitions. [2022-12-14 16:01:38,914 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 124 transitions. Word has length 118 [2022-12-14 16:01:38,914 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:01:38,914 INFO L495 AbstractCegarLoop]: Abstraction has 123 states and 124 transitions. [2022-12-14 16:01:38,914 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 114 states, 114 states have (on average 2.3684210526315788) internal successors, (270), 114 states have internal predecessors, (270), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:01:38,914 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 124 transitions. [2022-12-14 16:01:38,914 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2022-12-14 16:01:38,915 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:01:38,915 INFO L195 NwaCegarLoop]: trace histogram [23, 23, 23, 23, 23, 1, 1, 1, 1, 1] [2022-12-14 16:01:38,927 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (69)] Ended with exit code 0 [2022-12-14 16:01:39,115 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable77,69 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:01:39,116 INFO L420 AbstractCegarLoop]: === Iteration 79 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 16:01:39,116 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:01:39,116 INFO L85 PathProgramCache]: Analyzing trace with hash 525681526, now seen corresponding path program 45 times [2022-12-14 16:01:39,117 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:01:39,117 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [232938801] [2022-12-14 16:01:39,117 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:01:39,118 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:01:39,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:01:40,898 INFO L134 CoverageAnalysis]: Checked inductivity of 1311 backedges. 441 proven. 870 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:01:40,898 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:01:40,898 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [232938801] [2022-12-14 16:01:40,898 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [232938801] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:01:40,898 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1738841917] [2022-12-14 16:01:40,898 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 16:01:40,898 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:01:40,898 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:01:40,899 INFO L229 MonitoredProcess]: Starting monitored process 70 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:01:40,900 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (70)] Waiting until timeout for monitored process [2022-12-14 16:02:13,080 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 16:02:13,081 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:02:13,105 INFO L263 TraceCheckSpWp]: Trace formula consists of 909 conjuncts, 131 conjunts are in the unsatisfiable core [2022-12-14 16:02:13,108 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:02:13,118 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 16:02:13,118 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 16:02:14,111 INFO L134 CoverageAnalysis]: Checked inductivity of 1311 backedges. 484 proven. 827 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:14,112 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:02:16,905 INFO L134 CoverageAnalysis]: Checked inductivity of 1311 backedges. 484 proven. 827 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:16,905 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1738841917] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:02:16,905 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1450521984] [2022-12-14 16:02:16,906 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:02:16,906 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:02:16,906 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:02:16,906 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:02:16,906 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:02:16,922 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:02:16,923 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:02:16,948 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:02:16,972 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:16,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:17,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:17,042 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:02:17,067 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 16:02:17,068 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 16:02:17,140 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:02:17,202 INFO L321 Elim1Store]: treesize reduction 175, result has 20.1 percent of original size [2022-12-14 16:02:17,202 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 217 treesize of output 226 [2022-12-14 16:02:17,328 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 16:02:17,328 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 16:02:17,363 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 16:02:17,363 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 16:02:17,370 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:02:18,481 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '44900#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 16:02:18,481 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:02:18,482 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:02:18,482 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [49, 49, 49] total 122 [2022-12-14 16:02:18,482 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [151312903] [2022-12-14 16:02:18,482 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:02:18,482 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 123 states [2022-12-14 16:02:18,482 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:02:18,483 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 123 interpolants. [2022-12-14 16:02:18,483 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=2178, Invalid=14852, Unknown=0, NotChecked=0, Total=17030 [2022-12-14 16:02:18,483 INFO L87 Difference]: Start difference. First operand 123 states and 124 transitions. Second operand has 123 states, 122 states have (on average 2.3852459016393444) internal successors, (291), 123 states have internal predecessors, (291), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:20,563 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:02:20,564 INFO L93 Difference]: Finished difference Result 128 states and 129 transitions. [2022-12-14 16:02:20,564 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2022-12-14 16:02:20,564 INFO L78 Accepts]: Start accepts. Automaton has has 123 states, 122 states have (on average 2.3852459016393444) internal successors, (291), 123 states have internal predecessors, (291), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 120 [2022-12-14 16:02:20,564 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:02:20,564 INFO L225 Difference]: With dead ends: 128 [2022-12-14 16:02:20,564 INFO L226 Difference]: Without dead ends: 128 [2022-12-14 16:02:20,565 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 433 GetRequests, 278 SyntacticMatches, 0 SemanticMatches, 155 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7354 ImplicationChecksByTransitivity, 5.8s TimeCoverageRelationStatistics Valid=4451, Invalid=20041, Unknown=0, NotChecked=0, Total=24492 [2022-12-14 16:02:20,565 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 726 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 3785 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 726 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 3786 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 3785 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-12-14 16:02:20,565 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [726 Valid, 3 Invalid, 3786 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 3785 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-12-14 16:02:20,566 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 128 states. [2022-12-14 16:02:20,566 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 128 to 125. [2022-12-14 16:02:20,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125 states, 123 states have (on average 1.024390243902439) internal successors, (126), 124 states have internal predecessors, (126), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:20,567 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 126 transitions. [2022-12-14 16:02:20,567 INFO L78 Accepts]: Start accepts. Automaton has 125 states and 126 transitions. Word has length 120 [2022-12-14 16:02:20,567 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:02:20,567 INFO L495 AbstractCegarLoop]: Abstraction has 125 states and 126 transitions. [2022-12-14 16:02:20,567 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 123 states, 122 states have (on average 2.3852459016393444) internal successors, (291), 123 states have internal predecessors, (291), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:20,567 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 126 transitions. [2022-12-14 16:02:20,567 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2022-12-14 16:02:20,567 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:02:20,567 INFO L195 NwaCegarLoop]: trace histogram [24, 23, 23, 23, 23, 1, 1, 1, 1, 1] [2022-12-14 16:02:20,581 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (70)] Ended with exit code 0 [2022-12-14 16:02:20,768 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable78,70 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:02:20,768 INFO L420 AbstractCegarLoop]: === Iteration 80 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 16:02:20,769 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:02:20,769 INFO L85 PathProgramCache]: Analyzing trace with hash -883741891, now seen corresponding path program 23 times [2022-12-14 16:02:20,770 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:02:20,770 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1841267121] [2022-12-14 16:02:20,770 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:02:20,770 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:02:20,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:23,109 INFO L134 CoverageAnalysis]: Checked inductivity of 1334 backedges. 441 proven. 893 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:23,109 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:02:23,109 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1841267121] [2022-12-14 16:02:23,109 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1841267121] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:02:23,109 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1274256522] [2022-12-14 16:02:23,109 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 16:02:23,109 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:02:23,109 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:02:23,110 INFO L229 MonitoredProcess]: Starting monitored process 71 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:02:23,111 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (71)] Waiting until timeout for monitored process [2022-12-14 16:02:51,420 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 24 check-sat command(s) [2022-12-14 16:02:51,420 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:02:51,442 INFO L263 TraceCheckSpWp]: Trace formula consists of 915 conjuncts, 116 conjunts are in the unsatisfiable core [2022-12-14 16:02:51,445 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:02:51,510 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:02:51,511 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 16:02:51,513 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 16:02:54,433 INFO L134 CoverageAnalysis]: Checked inductivity of 1334 backedges. 463 proven. 871 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:54,433 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:02:58,093 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:02:58,194 INFO L134 CoverageAnalysis]: Checked inductivity of 1334 backedges. 529 proven. 805 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:58,194 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1274256522] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:02:58,194 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1346331199] [2022-12-14 16:02:58,195 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:02:58,195 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:02:58,195 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:02:58,195 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:02:58,195 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:02:58,217 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:02:58,219 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:02:58,247 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:58,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:58,291 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:58,328 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:58,362 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:02:58,381 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 16:02:58,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 16:02:58,442 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 16:02:58,442 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 16:02:58,498 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 16:02:58,499 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 16:02:58,507 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:03:00,378 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '46086#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cstrcpy_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_cstrcpy_~from#1.base|) |ULTIMATE.start_cstrcpy_~from#1.offset|)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |#NULL.offset| 0) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.offset|) (<= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= (select |#valid| |ULTIMATE.start_cstrcpy_~from#1.base|) 1) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (< (select |#length| |ULTIMATE.start_cstrcpy_~to#1.base|) (+ |ULTIMATE.start_cstrcpy_~to#1.offset| 1)) (<= (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|)) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= 0 |#NULL.offset|) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 16:03:00,378 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:03:00,378 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:03:00,378 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [50, 51, 50] total 151 [2022-12-14 16:03:00,378 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [460903792] [2022-12-14 16:03:00,378 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:03:00,378 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 153 states [2022-12-14 16:03:00,378 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:03:00,379 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 153 interpolants. [2022-12-14 16:03:00,380 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=2236, Invalid=23524, Unknown=0, NotChecked=0, Total=25760 [2022-12-14 16:03:00,380 INFO L87 Difference]: Start difference. First operand 125 states and 126 transitions. Second operand has 153 states, 152 states have (on average 2.388157894736842) internal successors, (363), 152 states have internal predecessors, (363), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:08,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:03:08,208 INFO L93 Difference]: Finished difference Result 127 states and 128 transitions. [2022-12-14 16:03:08,208 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 75 states. [2022-12-14 16:03:08,208 INFO L78 Accepts]: Start accepts. Automaton has has 153 states, 152 states have (on average 2.388157894736842) internal successors, (363), 152 states have internal predecessors, (363), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 121 [2022-12-14 16:03:08,208 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:03:08,208 INFO L225 Difference]: With dead ends: 127 [2022-12-14 16:03:08,208 INFO L226 Difference]: Without dead ends: 127 [2022-12-14 16:03:08,210 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 483 GetRequests, 252 SyntacticMatches, 0 SemanticMatches, 231 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12405 ImplicationChecksByTransitivity, 14.6s TimeCoverageRelationStatistics Valid=8089, Invalid=45967, Unknown=0, NotChecked=0, Total=54056 [2022-12-14 16:03:08,210 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 926 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 4961 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 926 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 4986 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 4961 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-12-14 16:03:08,210 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [926 Valid, 0 Invalid, 4986 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 4961 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2022-12-14 16:03:08,211 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 127 states. [2022-12-14 16:03:08,211 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 127 to 126. [2022-12-14 16:03:08,211 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 126 states, 124 states have (on average 1.0241935483870968) internal successors, (127), 125 states have internal predecessors, (127), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:08,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 126 states to 126 states and 127 transitions. [2022-12-14 16:03:08,212 INFO L78 Accepts]: Start accepts. Automaton has 126 states and 127 transitions. Word has length 121 [2022-12-14 16:03:08,212 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:03:08,212 INFO L495 AbstractCegarLoop]: Abstraction has 126 states and 127 transitions. [2022-12-14 16:03:08,212 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 153 states, 152 states have (on average 2.388157894736842) internal successors, (363), 152 states have internal predecessors, (363), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:08,212 INFO L276 IsEmpty]: Start isEmpty. Operand 126 states and 127 transitions. [2022-12-14 16:03:08,212 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2022-12-14 16:03:08,212 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:03:08,212 INFO L195 NwaCegarLoop]: trace histogram [24, 24, 24, 23, 23, 1, 1, 1, 1, 1] [2022-12-14 16:03:08,226 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (71)] Ended with exit code 0 [2022-12-14 16:03:08,413 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable79,71 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:08,413 INFO L420 AbstractCegarLoop]: === Iteration 81 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 16:03:08,414 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:03:08,414 INFO L85 PathProgramCache]: Analyzing trace with hash 1127567651, now seen corresponding path program 46 times [2022-12-14 16:03:08,415 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:03:08,415 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [560217090] [2022-12-14 16:03:08,415 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:03:08,415 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:03:08,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:03:11,833 INFO L134 CoverageAnalysis]: Checked inductivity of 1381 backedges. 24 proven. 1357 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:11,833 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:03:11,833 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [560217090] [2022-12-14 16:03:11,833 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [560217090] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:03:11,833 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2085302228] [2022-12-14 16:03:11,833 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 16:03:11,833 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:11,833 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:03:11,834 INFO L229 MonitoredProcess]: Starting monitored process 72 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:03:11,835 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (72)] Waiting until timeout for monitored process [2022-12-14 16:03:12,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:03:12,170 INFO L263 TraceCheckSpWp]: Trace formula consists of 932 conjuncts, 235 conjunts are in the unsatisfiable core [2022-12-14 16:03:12,173 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:03:12,176 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 16:03:13,188 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:13,276 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 16:03:13,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,327 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,333 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,341 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,347 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,360 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,367 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,373 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,382 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,391 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,399 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,409 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,435 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,452 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,463 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,473 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,484 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:13,538 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 16:03:13,540 INFO L134 CoverageAnalysis]: Checked inductivity of 1381 backedges. 24 proven. 1357 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:13,540 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:03:13,547 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_8286 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_8286) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 1)) 0)) is different from false [2022-12-14 16:03:13,552 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_8286 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_8286) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 2)) 0)) is different from false [2022-12-14 16:03:13,559 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_8286 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_8286) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 3)) 0)) is different from false [2022-12-14 16:03:13,566 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_8286 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_8286) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 4)) 0)) is different from false [2022-12-14 16:03:13,693 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_8286 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_8286) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 6)) 0)) is different from false [2022-12-14 16:03:13,943 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_8286 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_8286) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 9)) 0)) is different from false [2022-12-14 16:03:13,949 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_8286 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_8286) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 10)) 0)) is different from false [2022-12-14 16:03:13,957 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_8286 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcpy_~to#1.base| v_ArrVal_8286) |c_ULTIMATE.start_cstrcpy_~from#1.base|) (+ |c_ULTIMATE.start_cstrcpy_~from#1.offset| 11)) 0)) is different from false [2022-12-14 16:03:15,005 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-12-14 16:03:15,006 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 16:03:15,279 INFO L134 CoverageAnalysis]: Checked inductivity of 1381 backedges. 24 proven. 905 refuted. 0 times theorem prover too weak. 0 trivial. 452 not checked. [2022-12-14 16:03:15,279 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2085302228] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:03:15,280 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2103628793] [2022-12-14 16:03:15,280 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:03:15,280 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:03:15,280 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:03:15,280 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:03:15,281 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:03:15,302 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:03:15,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:03:15,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:03:15,354 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:15,374 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:15,400 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:15,421 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:03:15,434 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 16:03:15,434 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 16:03:15,526 INFO L321 Elim1Store]: treesize reduction 165, result has 13.2 percent of original size [2022-12-14 16:03:15,526 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 217 treesize of output 214 [2022-12-14 16:03:15,602 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 16:03:15,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 16:03:15,633 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 16:03:15,634 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 16:03:15,639 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:03:16,786 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '47318#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 16:03:16,786 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:03:16,786 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:03:16,786 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [53, 54, 54] total 95 [2022-12-14 16:03:16,786 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1510913622] [2022-12-14 16:03:16,786 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:03:16,787 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 95 states [2022-12-14 16:03:16,787 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:03:16,787 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 95 interpolants. [2022-12-14 16:03:16,788 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=261, Invalid=8615, Unknown=86, NotChecked=1544, Total=10506 [2022-12-14 16:03:16,788 INFO L87 Difference]: Start difference. First operand 126 states and 127 transitions. Second operand has 95 states, 95 states have (on average 2.2842105263157895) internal successors, (217), 95 states have internal predecessors, (217), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:22,644 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:03:22,644 INFO L93 Difference]: Finished difference Result 202 states and 203 transitions. [2022-12-14 16:03:22,644 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 76 states. [2022-12-14 16:03:22,644 INFO L78 Accepts]: Start accepts. Automaton has has 95 states, 95 states have (on average 2.2842105263157895) internal successors, (217), 95 states have internal predecessors, (217), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 123 [2022-12-14 16:03:22,644 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:03:22,645 INFO L225 Difference]: With dead ends: 202 [2022-12-14 16:03:22,645 INFO L226 Difference]: Without dead ends: 129 [2022-12-14 16:03:22,646 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 493 GetRequests, 327 SyntacticMatches, 16 SemanticMatches, 150 ConstructedPredicates, 8 IntricatePredicates, 1 DeprecatedPredicates, 2881 ImplicationChecksByTransitivity, 7.8s TimeCoverageRelationStatistics Valid=647, Invalid=19891, Unknown=86, NotChecked=2328, Total=22952 [2022-12-14 16:03:22,646 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 294 mSDsluCounter, 131 mSDsCounter, 0 mSdLazyCounter, 7704 mSolverCounterSat, 24 mSolverCounterUnsat, 118 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 294 SdHoareTripleChecker+Valid, 134 SdHoareTripleChecker+Invalid, 8492 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 7704 IncrementalHoareTripleChecker+Invalid, 118 IncrementalHoareTripleChecker+Unknown, 646 IncrementalHoareTripleChecker+Unchecked, 2.9s IncrementalHoareTripleChecker+Time [2022-12-14 16:03:22,646 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [294 Valid, 134 Invalid, 8492 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 7704 Invalid, 118 Unknown, 646 Unchecked, 2.9s Time] [2022-12-14 16:03:22,646 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 129 states. [2022-12-14 16:03:22,647 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 129 to 128. [2022-12-14 16:03:22,647 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 128 states, 126 states have (on average 1.0238095238095237) internal successors, (129), 127 states have internal predecessors, (129), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:22,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 128 states to 128 states and 129 transitions. [2022-12-14 16:03:22,647 INFO L78 Accepts]: Start accepts. Automaton has 128 states and 129 transitions. Word has length 123 [2022-12-14 16:03:22,648 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:03:22,648 INFO L495 AbstractCegarLoop]: Abstraction has 128 states and 129 transitions. [2022-12-14 16:03:22,648 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 95 states, 95 states have (on average 2.2842105263157895) internal successors, (217), 95 states have internal predecessors, (217), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:22,648 INFO L276 IsEmpty]: Start isEmpty. Operand 128 states and 129 transitions. [2022-12-14 16:03:22,648 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 126 [2022-12-14 16:03:22,648 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:03:22,649 INFO L195 NwaCegarLoop]: trace histogram [24, 24, 24, 24, 24, 1, 1, 1, 1, 1] [2022-12-14 16:03:22,655 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (72)] Ended with exit code 0 [2022-12-14 16:03:22,849 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable80,72 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:22,850 INFO L420 AbstractCegarLoop]: === Iteration 82 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 16:03:22,850 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:03:22,851 INFO L85 PathProgramCache]: Analyzing trace with hash -1163854247, now seen corresponding path program 47 times [2022-12-14 16:03:22,851 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:03:22,851 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [497803517] [2022-12-14 16:03:22,852 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:03:22,852 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:03:22,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:03:24,582 INFO L134 CoverageAnalysis]: Checked inductivity of 1428 backedges. 484 proven. 944 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:24,582 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:03:24,582 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [497803517] [2022-12-14 16:03:24,582 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [497803517] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:03:24,582 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [651352349] [2022-12-14 16:03:24,583 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 16:03:24,583 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:24,583 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:03:24,583 INFO L229 MonitoredProcess]: Starting monitored process 73 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:03:24,584 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (73)] Waiting until timeout for monitored process [2022-12-14 16:03:40,544 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 25 check-sat command(s) [2022-12-14 16:03:40,544 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:03:40,557 INFO L263 TraceCheckSpWp]: Trace formula consists of 945 conjuncts, 110 conjunts are in the unsatisfiable core [2022-12-14 16:03:40,559 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:03:40,570 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 16:03:40,570 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 16:03:42,181 INFO L134 CoverageAnalysis]: Checked inductivity of 1428 backedges. 529 proven. 899 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:42,182 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:03:44,525 INFO L134 CoverageAnalysis]: Checked inductivity of 1428 backedges. 529 proven. 899 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:44,526 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [651352349] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:03:44,526 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [968096927] [2022-12-14 16:03:44,526 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:03:44,526 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:03:44,526 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:03:44,527 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:03:44,527 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:03:44,543 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:03:44,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:03:44,568 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:03:44,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:44,619 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:44,650 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:44,681 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:03:44,695 INFO L321 Elim1Store]: treesize reduction 63, result has 22.2 percent of original size [2022-12-14 16:03:44,695 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 29 treesize of output 31 [2022-12-14 16:03:44,813 INFO L321 Elim1Store]: treesize reduction 169, result has 22.8 percent of original size [2022-12-14 16:03:44,813 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 10 case distinctions, treesize of input 222 treesize of output 233 [2022-12-14 16:03:44,989 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 16:03:44,989 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 16:03:45,023 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 16:03:45,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 16:03:45,039 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:03:46,352 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '48653#(and (<= 0 |ULTIMATE.start_cstrcpy_~from#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_~from#1.offset|) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcpy_~from#1.base|) (+ |ULTIMATE.start_cstrcpy_~from#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.base|) (<= |ULTIMATE.start_cstrcpy_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~to#1.offset|) (<= 0 |ULTIMATE.start_cstrcpy_~save~0#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.base|) (<= |ULTIMATE.start_main_~nondetString~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 0 |ULTIMATE.start_cstrcpy_#in~from#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString~0#1.offset|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_#t~malloc7#1.base|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcpy_~to#1.base|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~from#1.offset| 0) (<= |ULTIMATE.start_cstrcpy_#in~to#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |#NULL.base| 0))' at error location [2022-12-14 16:03:46,352 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:03:46,352 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:03:46,352 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [51, 52, 52] total 153 [2022-12-14 16:03:46,352 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1118317955] [2022-12-14 16:03:46,352 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:03:46,352 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 154 states [2022-12-14 16:03:46,352 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:03:46,353 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 154 interpolants. [2022-12-14 16:03:46,354 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3611, Invalid=22471, Unknown=0, NotChecked=0, Total=26082 [2022-12-14 16:03:46,354 INFO L87 Difference]: Start difference. First operand 128 states and 129 transitions. Second operand has 154 states, 153 states have (on average 2.4379084967320264) internal successors, (373), 154 states have internal predecessors, (373), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:48,331 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:03:48,331 INFO L93 Difference]: Finished difference Result 133 states and 134 transitions. [2022-12-14 16:03:48,331 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2022-12-14 16:03:48,332 INFO L78 Accepts]: Start accepts. Automaton has has 154 states, 153 states have (on average 2.4379084967320264) internal successors, (373), 154 states have internal predecessors, (373), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 125 [2022-12-14 16:03:48,332 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:03:48,332 INFO L225 Difference]: With dead ends: 133 [2022-12-14 16:03:48,332 INFO L226 Difference]: Without dead ends: 133 [2022-12-14 16:03:48,333 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 451 GetRequests, 264 SyntacticMatches, 0 SemanticMatches, 187 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12274 ImplicationChecksByTransitivity, 6.3s TimeCoverageRelationStatistics Valid=6437, Invalid=29095, Unknown=0, NotChecked=0, Total=35532 [2022-12-14 16:03:48,333 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 588 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 2652 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 588 SdHoareTripleChecker+Valid, 3 SdHoareTripleChecker+Invalid, 2653 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 2652 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-12-14 16:03:48,333 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [588 Valid, 3 Invalid, 2653 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 2652 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-12-14 16:03:48,334 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 133 states. [2022-12-14 16:03:48,334 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 133 to 130. [2022-12-14 16:03:48,334 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 130 states, 128 states have (on average 1.0234375) internal successors, (131), 129 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:48,335 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 130 states to 130 states and 131 transitions. [2022-12-14 16:03:48,335 INFO L78 Accepts]: Start accepts. Automaton has 130 states and 131 transitions. Word has length 125 [2022-12-14 16:03:48,335 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:03:48,335 INFO L495 AbstractCegarLoop]: Abstraction has 130 states and 131 transitions. [2022-12-14 16:03:48,335 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 154 states, 153 states have (on average 2.4379084967320264) internal successors, (373), 154 states have internal predecessors, (373), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:48,335 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 131 transitions. [2022-12-14 16:03:48,335 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 127 [2022-12-14 16:03:48,335 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:03:48,335 INFO L195 NwaCegarLoop]: trace histogram [25, 24, 24, 24, 24, 1, 1, 1, 1, 1] [2022-12-14 16:03:48,345 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (73)] Ended with exit code 0 [2022-12-14 16:03:48,536 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable81,73 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:48,536 INFO L420 AbstractCegarLoop]: === Iteration 83 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 6 more)] === [2022-12-14 16:03:48,536 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:03:48,536 INFO L85 PathProgramCache]: Analyzing trace with hash -1719743302, now seen corresponding path program 24 times [2022-12-14 16:03:48,536 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:03:48,536 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [915254312] [2022-12-14 16:03:48,536 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:03:48,536 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:03:48,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:03:51,448 INFO L134 CoverageAnalysis]: Checked inductivity of 1452 backedges. 484 proven. 968 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:51,449 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:03:51,449 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [915254312] [2022-12-14 16:03:51,449 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [915254312] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:03:51,449 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1583269314] [2022-12-14 16:03:51,449 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 16:03:51,449 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:51,449 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:03:51,450 INFO L229 MonitoredProcess]: Starting monitored process 74 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:03:51,450 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2e5df46e-7cd9-412f-966a-ac826e324685/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (74)] Waiting until timeout for monitored process [2022-12-14 16:04:40,861 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 16:04:40,861 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:04:40,894 INFO L263 TraceCheckSpWp]: Trace formula consists of 951 conjuncts, 181 conjunts are in the unsatisfiable core [2022-12-14 16:04:40,897 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:04:40,953 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 16:04:40,958 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13