./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/strreplace-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 30e01a73 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/strreplace-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 961e7f6fbd61acd9d4f1771460dcf26fd486b3de35e5e0e3ca8e6e03bda0fabc --- Real Ultimate output --- This is Ultimate 0.2.3-dev-30e01a7 [2023-11-23 21:13:59,771 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-23 21:13:59,846 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2023-11-23 21:13:59,852 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-23 21:13:59,852 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-23 21:13:59,877 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-23 21:13:59,877 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-23 21:13:59,878 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-23 21:13:59,879 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-23 21:13:59,879 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-23 21:13:59,880 INFO L153 SettingsManager]: * User list type=DISABLED [2023-11-23 21:13:59,880 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-11-23 21:13:59,881 INFO L153 SettingsManager]: * Explicit value domain=true [2023-11-23 21:13:59,881 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-11-23 21:13:59,882 INFO L153 SettingsManager]: * Octagon Domain=false [2023-11-23 21:13:59,882 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-11-23 21:13:59,883 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-11-23 21:13:59,883 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-11-23 21:13:59,884 INFO L153 SettingsManager]: * Interval Domain=false [2023-11-23 21:13:59,884 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-11-23 21:13:59,885 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-11-23 21:13:59,887 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-11-23 21:13:59,888 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-23 21:13:59,888 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-23 21:13:59,888 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-23 21:13:59,889 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-23 21:13:59,890 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-23 21:13:59,890 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-23 21:13:59,890 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-23 21:13:59,891 INFO L153 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2023-11-23 21:13:59,892 INFO L153 SettingsManager]: * Bitprecise bitfields=true [2023-11-23 21:13:59,893 INFO L153 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2023-11-23 21:13:59,893 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-23 21:13:59,893 INFO L153 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2023-11-23 21:13:59,894 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2023-11-23 21:13:59,894 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-23 21:13:59,894 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-23 21:13:59,894 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-23 21:13:59,895 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-23 21:13:59,895 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-23 21:13:59,895 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 21:13:59,896 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-23 21:13:59,896 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-23 21:13:59,896 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-11-23 21:13:59,897 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-23 21:13:59,897 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-23 21:13:59,897 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-11-23 21:13:59,897 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-23 21:13:59,897 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 961e7f6fbd61acd9d4f1771460dcf26fd486b3de35e5e0e3ca8e6e03bda0fabc [2023-11-23 21:14:00,161 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-23 21:14:00,190 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-23 21:14:00,194 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-23 21:14:00,195 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-23 21:14:00,196 INFO L274 PluginConnector]: CDTParser initialized [2023-11-23 21:14:00,197 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/../../sv-benchmarks/c/array-memsafety/strreplace-alloca-2.i [2023-11-23 21:14:03,248 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-23 21:14:03,560 INFO L384 CDTParser]: Found 1 translation units. [2023-11-23 21:14:03,561 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/sv-benchmarks/c/array-memsafety/strreplace-alloca-2.i [2023-11-23 21:14:03,577 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/data/338dc5c8e/3590f51480b644ac8b9a52b53283217f/FLAGef0fccecd [2023-11-23 21:14:03,594 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/data/338dc5c8e/3590f51480b644ac8b9a52b53283217f [2023-11-23 21:14:03,597 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-23 21:14:03,599 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-23 21:14:03,600 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-23 21:14:03,601 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-23 21:14:03,607 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-23 21:14:03,607 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:14:03" (1/1) ... [2023-11-23 21:14:03,609 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@73f3a802 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:03, skipping insertion in model container [2023-11-23 21:14:03,609 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:14:03" (1/1) ... [2023-11-23 21:14:03,659 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-23 21:14:04,007 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 21:14:04,019 INFO L202 MainTranslator]: Completed pre-run [2023-11-23 21:14:04,056 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 21:14:04,086 INFO L206 MainTranslator]: Completed translation [2023-11-23 21:14:04,087 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:04 WrapperNode [2023-11-23 21:14:04,087 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-23 21:14:04,088 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-23 21:14:04,089 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-23 21:14:04,089 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-23 21:14:04,097 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:04" (1/1) ... [2023-11-23 21:14:04,110 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:04" (1/1) ... [2023-11-23 21:14:04,133 INFO L138 Inliner]: procedures = 117, calls = 11, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 66 [2023-11-23 21:14:04,134 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-23 21:14:04,134 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-23 21:14:04,135 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-23 21:14:04,135 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-23 21:14:04,144 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:04" (1/1) ... [2023-11-23 21:14:04,144 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:04" (1/1) ... [2023-11-23 21:14:04,148 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:04" (1/1) ... [2023-11-23 21:14:04,148 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:04" (1/1) ... [2023-11-23 21:14:04,154 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:04" (1/1) ... [2023-11-23 21:14:04,158 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:04" (1/1) ... [2023-11-23 21:14:04,159 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:04" (1/1) ... [2023-11-23 21:14:04,160 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:04" (1/1) ... [2023-11-23 21:14:04,163 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-23 21:14:04,164 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-23 21:14:04,164 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-23 21:14:04,164 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-23 21:14:04,165 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:04" (1/1) ... [2023-11-23 21:14:04,172 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 21:14:04,188 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:04,206 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-23 21:14:04,211 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-23 21:14:04,239 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2023-11-23 21:14:04,240 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2023-11-23 21:14:04,240 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2023-11-23 21:14:04,240 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2023-11-23 21:14:04,240 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-23 21:14:04,241 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-23 21:14:04,346 INFO L241 CfgBuilder]: Building ICFG [2023-11-23 21:14:04,350 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-23 21:14:04,533 INFO L282 CfgBuilder]: Performing block encoding [2023-11-23 21:14:04,633 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-23 21:14:04,634 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-23 21:14:04,636 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:14:04 BoogieIcfgContainer [2023-11-23 21:14:04,636 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-23 21:14:04,639 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-23 21:14:04,640 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-23 21:14:04,643 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-23 21:14:04,644 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 09:14:03" (1/3) ... [2023-11-23 21:14:04,645 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@8a1799c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:14:04, skipping insertion in model container [2023-11-23 21:14:04,645 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:14:04" (2/3) ... [2023-11-23 21:14:04,646 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@8a1799c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:14:04, skipping insertion in model container [2023-11-23 21:14:04,646 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:14:04" (3/3) ... [2023-11-23 21:14:04,647 INFO L112 eAbstractionObserver]: Analyzing ICFG strreplace-alloca-2.i [2023-11-23 21:14:04,675 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-23 21:14:04,676 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 11 error locations. [2023-11-23 21:14:04,720 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-23 21:14:04,727 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1efb2263, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-23 21:14:04,728 INFO L358 AbstractCegarLoop]: Starting to check reachability of 11 error locations. [2023-11-23 21:14:04,733 INFO L276 IsEmpty]: Start isEmpty. Operand has 24 states, 12 states have (on average 2.25) internal successors, (27), 23 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:04,740 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2023-11-23 21:14:04,742 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:04,743 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2023-11-23 21:14:04,744 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:04,751 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:04,752 INFO L85 PathProgramCache]: Analyzing trace with hash 106256, now seen corresponding path program 1 times [2023-11-23 21:14:04,769 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:04,769 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [492226290] [2023-11-23 21:14:04,770 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:04,771 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:04,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:05,038 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:05,039 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:05,039 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [492226290] [2023-11-23 21:14:05,040 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [492226290] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:05,041 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:05,041 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2023-11-23 21:14:05,043 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1553329860] [2023-11-23 21:14:05,043 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:05,048 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 21:14:05,048 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:05,097 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 21:14:05,098 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:14:05,101 INFO L87 Difference]: Start difference. First operand has 24 states, 12 states have (on average 2.25) internal successors, (27), 23 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:05,178 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:05,178 INFO L93 Difference]: Finished difference Result 22 states and 24 transitions. [2023-11-23 21:14:05,179 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 21:14:05,181 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2023-11-23 21:14:05,181 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:05,189 INFO L225 Difference]: With dead ends: 22 [2023-11-23 21:14:05,189 INFO L226 Difference]: Without dead ends: 21 [2023-11-23 21:14:05,191 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:14:05,195 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 19 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 10 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:05,197 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [19 Valid, 10 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:14:05,215 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21 states. [2023-11-23 21:14:05,229 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21 to 21. [2023-11-23 21:14:05,231 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21 states, 12 states have (on average 1.9166666666666667) internal successors, (23), 20 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:05,250 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 23 transitions. [2023-11-23 21:14:05,251 INFO L78 Accepts]: Start accepts. Automaton has 21 states and 23 transitions. Word has length 3 [2023-11-23 21:14:05,251 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:05,251 INFO L495 AbstractCegarLoop]: Abstraction has 21 states and 23 transitions. [2023-11-23 21:14:05,252 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:05,252 INFO L276 IsEmpty]: Start isEmpty. Operand 21 states and 23 transitions. [2023-11-23 21:14:05,252 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2023-11-23 21:14:05,252 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:05,253 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2023-11-23 21:14:05,253 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-23 21:14:05,253 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:05,254 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:05,255 INFO L85 PathProgramCache]: Analyzing trace with hash 106257, now seen corresponding path program 1 times [2023-11-23 21:14:05,255 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:05,255 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [679232647] [2023-11-23 21:14:05,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:05,256 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:05,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:05,565 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:05,565 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:05,565 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [679232647] [2023-11-23 21:14:05,565 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [679232647] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:05,566 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:05,566 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-23 21:14:05,566 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1379670851] [2023-11-23 21:14:05,566 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:05,567 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-23 21:14:05,568 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:05,568 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-23 21:14:05,568 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-23 21:14:05,569 INFO L87 Difference]: Start difference. First operand 21 states and 23 transitions. Second operand has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:05,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:05,677 INFO L93 Difference]: Finished difference Result 20 states and 22 transitions. [2023-11-23 21:14:05,677 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-23 21:14:05,677 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2023-11-23 21:14:05,678 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:05,678 INFO L225 Difference]: With dead ends: 20 [2023-11-23 21:14:05,678 INFO L226 Difference]: Without dead ends: 20 [2023-11-23 21:14:05,679 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-23 21:14:05,680 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 1 mSDsluCounter, 18 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 33 SdHoareTripleChecker+Invalid, 30 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:05,681 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 33 Invalid, 30 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:14:05,682 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20 states. [2023-11-23 21:14:05,684 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20 to 20. [2023-11-23 21:14:05,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20 states, 12 states have (on average 1.8333333333333333) internal successors, (22), 19 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:05,685 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 22 transitions. [2023-11-23 21:14:05,685 INFO L78 Accepts]: Start accepts. Automaton has 20 states and 22 transitions. Word has length 3 [2023-11-23 21:14:05,685 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:05,685 INFO L495 AbstractCegarLoop]: Abstraction has 20 states and 22 transitions. [2023-11-23 21:14:05,686 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:05,686 INFO L276 IsEmpty]: Start isEmpty. Operand 20 states and 22 transitions. [2023-11-23 21:14:05,686 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2023-11-23 21:14:05,686 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:05,686 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2023-11-23 21:14:05,687 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-23 21:14:05,687 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:05,688 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:05,688 INFO L85 PathProgramCache]: Analyzing trace with hash 108096, now seen corresponding path program 1 times [2023-11-23 21:14:05,688 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:05,691 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1643685188] [2023-11-23 21:14:05,691 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:05,693 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:05,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:05,985 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:05,985 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:05,985 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1643685188] [2023-11-23 21:14:05,985 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1643685188] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:05,986 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:05,986 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-23 21:14:05,986 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1645101717] [2023-11-23 21:14:05,986 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:05,987 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-23 21:14:05,987 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:05,987 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-23 21:14:05,988 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2023-11-23 21:14:05,988 INFO L87 Difference]: Start difference. First operand 20 states and 22 transitions. Second operand has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:06,014 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:06,014 INFO L93 Difference]: Finished difference Result 19 states and 21 transitions. [2023-11-23 21:14:06,015 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 21:14:06,015 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2023-11-23 21:14:06,015 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:06,017 INFO L225 Difference]: With dead ends: 19 [2023-11-23 21:14:06,020 INFO L226 Difference]: Without dead ends: 19 [2023-11-23 21:14:06,021 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2023-11-23 21:14:06,029 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 19 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 9 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:06,031 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [19 Valid, 9 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:14:06,032 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2023-11-23 21:14:06,036 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 19. [2023-11-23 21:14:06,038 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 12 states have (on average 1.75) internal successors, (21), 18 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:06,039 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 21 transitions. [2023-11-23 21:14:06,040 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 21 transitions. Word has length 3 [2023-11-23 21:14:06,045 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:06,045 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 21 transitions. [2023-11-23 21:14:06,046 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:06,046 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 21 transitions. [2023-11-23 21:14:06,046 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2023-11-23 21:14:06,047 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:06,047 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2023-11-23 21:14:06,048 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-23 21:14:06,048 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr4REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:06,049 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:06,049 INFO L85 PathProgramCache]: Analyzing trace with hash 3352377, now seen corresponding path program 1 times [2023-11-23 21:14:06,049 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:06,049 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [706886270] [2023-11-23 21:14:06,049 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:06,049 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:06,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:06,112 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:06,113 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:06,113 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [706886270] [2023-11-23 21:14:06,113 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [706886270] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:06,113 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:06,113 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-23 21:14:06,114 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [49301896] [2023-11-23 21:14:06,114 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:06,114 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 21:14:06,114 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:06,115 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 21:14:06,115 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:14:06,115 INFO L87 Difference]: Start difference. First operand 19 states and 21 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:06,141 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:06,141 INFO L93 Difference]: Finished difference Result 16 states and 18 transitions. [2023-11-23 21:14:06,141 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 21:14:06,142 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2023-11-23 21:14:06,142 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:06,142 INFO L225 Difference]: With dead ends: 16 [2023-11-23 21:14:06,142 INFO L226 Difference]: Without dead ends: 16 [2023-11-23 21:14:06,143 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:14:06,144 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 10 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 7 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:06,145 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 7 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:14:06,145 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16 states. [2023-11-23 21:14:06,147 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16 to 16. [2023-11-23 21:14:06,147 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16 states, 12 states have (on average 1.5) internal successors, (18), 15 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:06,148 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 18 transitions. [2023-11-23 21:14:06,148 INFO L78 Accepts]: Start accepts. Automaton has 16 states and 18 transitions. Word has length 4 [2023-11-23 21:14:06,148 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:06,148 INFO L495 AbstractCegarLoop]: Abstraction has 16 states and 18 transitions. [2023-11-23 21:14:06,149 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:06,149 INFO L276 IsEmpty]: Start isEmpty. Operand 16 states and 18 transitions. [2023-11-23 21:14:06,149 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2023-11-23 21:14:06,149 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:06,149 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2023-11-23 21:14:06,150 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-23 21:14:06,150 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:06,150 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:06,151 INFO L85 PathProgramCache]: Analyzing trace with hash 3352378, now seen corresponding path program 1 times [2023-11-23 21:14:06,151 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:06,151 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [6123263] [2023-11-23 21:14:06,151 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:06,151 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:06,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:06,277 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:06,277 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:06,277 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [6123263] [2023-11-23 21:14:06,278 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [6123263] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:06,278 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:06,278 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-23 21:14:06,278 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [935348500] [2023-11-23 21:14:06,278 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:06,279 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-23 21:14:06,279 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:06,280 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-23 21:14:06,281 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-23 21:14:06,281 INFO L87 Difference]: Start difference. First operand 16 states and 18 transitions. Second operand has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:06,339 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:06,339 INFO L93 Difference]: Finished difference Result 23 states and 27 transitions. [2023-11-23 21:14:06,340 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-23 21:14:06,340 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2023-11-23 21:14:06,340 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:06,341 INFO L225 Difference]: With dead ends: 23 [2023-11-23 21:14:06,341 INFO L226 Difference]: Without dead ends: 23 [2023-11-23 21:14:06,342 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-23 21:14:06,343 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 32 mSDsluCounter, 6 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 15 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:06,343 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 15 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:14:06,344 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23 states. [2023-11-23 21:14:06,346 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23 to 21. [2023-11-23 21:14:06,347 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21 states, 17 states have (on average 1.4705882352941178) internal successors, (25), 20 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:06,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 25 transitions. [2023-11-23 21:14:06,348 INFO L78 Accepts]: Start accepts. Automaton has 21 states and 25 transitions. Word has length 4 [2023-11-23 21:14:06,348 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:06,348 INFO L495 AbstractCegarLoop]: Abstraction has 21 states and 25 transitions. [2023-11-23 21:14:06,349 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:06,349 INFO L276 IsEmpty]: Start isEmpty. Operand 21 states and 25 transitions. [2023-11-23 21:14:06,349 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2023-11-23 21:14:06,349 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:06,350 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:06,350 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-23 21:14:06,350 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr10ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:06,351 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:06,351 INFO L85 PathProgramCache]: Analyzing trace with hash 1086427337, now seen corresponding path program 1 times [2023-11-23 21:14:06,351 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:06,351 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1921811951] [2023-11-23 21:14:06,351 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:06,352 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:06,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:06,444 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:06,444 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:06,444 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1921811951] [2023-11-23 21:14:06,445 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1921811951] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:06,445 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:06,445 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-23 21:14:06,445 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1672370564] [2023-11-23 21:14:06,445 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:06,446 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-23 21:14:06,446 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:06,447 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-23 21:14:06,447 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-23 21:14:06,447 INFO L87 Difference]: Start difference. First operand 21 states and 25 transitions. Second operand has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:06,479 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:06,479 INFO L93 Difference]: Finished difference Result 20 states and 24 transitions. [2023-11-23 21:14:06,480 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-23 21:14:06,480 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2023-11-23 21:14:06,480 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:06,482 INFO L225 Difference]: With dead ends: 20 [2023-11-23 21:14:06,482 INFO L226 Difference]: Without dead ends: 18 [2023-11-23 21:14:06,483 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-23 21:14:06,484 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 11 mSDsluCounter, 9 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:06,484 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 18 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:14:06,485 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18 states. [2023-11-23 21:14:06,487 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18 to 18. [2023-11-23 21:14:06,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18 states, 15 states have (on average 1.4) internal successors, (21), 17 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:06,489 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 21 transitions. [2023-11-23 21:14:06,489 INFO L78 Accepts]: Start accepts. Automaton has 18 states and 21 transitions. Word has length 7 [2023-11-23 21:14:06,489 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:06,489 INFO L495 AbstractCegarLoop]: Abstraction has 18 states and 21 transitions. [2023-11-23 21:14:06,490 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:06,490 INFO L276 IsEmpty]: Start isEmpty. Operand 18 states and 21 transitions. [2023-11-23 21:14:06,490 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2023-11-23 21:14:06,490 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:06,491 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:06,491 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-23 21:14:06,491 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:06,492 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:06,492 INFO L85 PathProgramCache]: Analyzing trace with hash 380593227, now seen corresponding path program 1 times [2023-11-23 21:14:06,492 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:06,492 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [647415556] [2023-11-23 21:14:06,492 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:06,493 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:06,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:06,744 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:06,745 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:06,745 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [647415556] [2023-11-23 21:14:06,745 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [647415556] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:14:06,745 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:14:06,745 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-23 21:14:06,746 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1394797393] [2023-11-23 21:14:06,746 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:14:06,746 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-23 21:14:06,747 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:06,748 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-23 21:14:06,748 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-23 21:14:06,748 INFO L87 Difference]: Start difference. First operand 18 states and 21 transitions. Second operand has 6 states, 6 states have (on average 1.5) internal successors, (9), 5 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:06,836 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:06,836 INFO L93 Difference]: Finished difference Result 23 states and 26 transitions. [2023-11-23 21:14:06,837 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-23 21:14:06,837 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 1.5) internal successors, (9), 5 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2023-11-23 21:14:06,837 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:06,838 INFO L225 Difference]: With dead ends: 23 [2023-11-23 21:14:06,838 INFO L226 Difference]: Without dead ends: 20 [2023-11-23 21:14:06,840 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-23 21:14:06,844 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 4 mSDsluCounter, 28 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4 SdHoareTripleChecker+Valid, 36 SdHoareTripleChecker+Invalid, 38 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:06,844 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [4 Valid, 36 Invalid, 38 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 38 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-23 21:14:06,846 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20 states. [2023-11-23 21:14:06,849 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20 to 19. [2023-11-23 21:14:06,851 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 16 states have (on average 1.375) internal successors, (22), 18 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:06,852 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 22 transitions. [2023-11-23 21:14:06,852 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 22 transitions. Word has length 9 [2023-11-23 21:14:06,852 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:06,852 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 22 transitions. [2023-11-23 21:14:06,852 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 1.5) internal successors, (9), 5 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:06,853 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 22 transitions. [2023-11-23 21:14:06,853 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2023-11-23 21:14:06,853 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:06,853 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:06,854 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-23 21:14:06,854 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:06,856 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:06,856 INFO L85 PathProgramCache]: Analyzing trace with hash 1202469922, now seen corresponding path program 1 times [2023-11-23 21:14:06,856 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:06,857 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1608993951] [2023-11-23 21:14:06,857 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:06,857 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:06,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:07,153 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:07,154 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:07,154 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1608993951] [2023-11-23 21:14:07,154 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1608993951] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:07,154 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [625633237] [2023-11-23 21:14:07,154 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:07,155 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:07,155 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:07,160 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:07,192 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-23 21:14:07,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:07,260 INFO L262 TraceCheckSpWp]: Trace formula consists of 94 conjuncts, 20 conjunts are in the unsatisfiable core [2023-11-23 21:14:07,269 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:07,389 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:07,389 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:07,517 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2023-11-23 21:14:07,539 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:07,539 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [625633237] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:07,539 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1759707974] [2023-11-23 21:14:07,559 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2023-11-23 21:14:07,559 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:07,563 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:07,569 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:07,569 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:08,774 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:09,157 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '413#(and (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 2 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 2 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|) |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (<= 2 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 2 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)))' at error location [2023-11-23 21:14:09,158 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:09,158 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:09,158 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 5, 5] total 11 [2023-11-23 21:14:09,159 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1051279120] [2023-11-23 21:14:09,159 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:09,161 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2023-11-23 21:14:09,161 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:09,162 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2023-11-23 21:14:09,163 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=65, Invalid=277, Unknown=0, NotChecked=0, Total=342 [2023-11-23 21:14:09,163 INFO L87 Difference]: Start difference. First operand 19 states and 22 transitions. Second operand has 13 states, 12 states have (on average 2.3333333333333335) internal successors, (28), 12 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:09,294 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:09,295 INFO L93 Difference]: Finished difference Result 24 states and 28 transitions. [2023-11-23 21:14:09,295 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-23 21:14:09,295 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 2.3333333333333335) internal successors, (28), 12 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2023-11-23 21:14:09,296 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:09,296 INFO L225 Difference]: With dead ends: 24 [2023-11-23 21:14:09,296 INFO L226 Difference]: Without dead ends: 24 [2023-11-23 21:14:09,297 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 16 SyntacticMatches, 2 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 124 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=95, Invalid=411, Unknown=0, NotChecked=0, Total=506 [2023-11-23 21:14:09,298 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 65 mSDsluCounter, 13 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 20 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:09,298 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 20 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:14:09,299 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24 states. [2023-11-23 21:14:09,301 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24 to 19. [2023-11-23 21:14:09,301 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 18 states have (on average 1.2222222222222223) internal successors, (22), 18 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:09,302 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 22 transitions. [2023-11-23 21:14:09,302 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 22 transitions. Word has length 11 [2023-11-23 21:14:09,302 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:09,302 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 22 transitions. [2023-11-23 21:14:09,303 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 2.3333333333333335) internal successors, (28), 12 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:09,316 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 22 transitions. [2023-11-23 21:14:09,316 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-11-23 21:14:09,316 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:09,317 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2023-11-23 21:14:09,338 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-23 21:14:09,529 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:09,530 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:09,530 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:09,530 INFO L85 PathProgramCache]: Analyzing trace with hash 1067917411, now seen corresponding path program 2 times [2023-11-23 21:14:09,531 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:09,531 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1402695109] [2023-11-23 21:14:09,531 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:09,531 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:09,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:09,964 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 5 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:09,965 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:09,965 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1402695109] [2023-11-23 21:14:09,965 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1402695109] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:09,965 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1364844394] [2023-11-23 21:14:09,966 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-11-23 21:14:09,966 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:09,966 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:09,967 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:09,984 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-23 21:14:10,056 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2023-11-23 21:14:10,057 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-11-23 21:14:10,058 INFO L262 TraceCheckSpWp]: Trace formula consists of 112 conjuncts, 28 conjunts are in the unsatisfiable core [2023-11-23 21:14:10,060 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:10,122 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2023-11-23 21:14:10,180 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 5 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:10,180 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:10,203 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2023-11-23 21:14:10,207 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2023-11-23 21:14:10,254 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 5 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:10,255 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1364844394] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:10,255 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1015973720] [2023-11-23 21:14:10,260 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2023-11-23 21:14:10,261 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:10,261 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:10,262 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:10,262 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:10,990 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:11,418 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '578#(and (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 2 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 2 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|) |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (<= 2 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 2 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)))' at error location [2023-11-23 21:14:11,418 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:11,418 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:11,418 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 8] total 17 [2023-11-23 21:14:11,419 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1108470142] [2023-11-23 21:14:11,419 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:11,419 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2023-11-23 21:14:11,419 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:11,420 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2023-11-23 21:14:11,420 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=75, Invalid=477, Unknown=0, NotChecked=0, Total=552 [2023-11-23 21:14:11,421 INFO L87 Difference]: Start difference. First operand 19 states and 22 transitions. Second operand has 18 states, 18 states have (on average 1.7222222222222223) internal successors, (31), 17 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:11,606 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:11,606 INFO L93 Difference]: Finished difference Result 31 states and 35 transitions. [2023-11-23 21:14:11,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-11-23 21:14:11,607 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 1.7222222222222223) internal successors, (31), 17 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2023-11-23 21:14:11,607 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:11,608 INFO L225 Difference]: With dead ends: 31 [2023-11-23 21:14:11,608 INFO L226 Difference]: Without dead ends: 22 [2023-11-23 21:14:11,609 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 181 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=132, Invalid=738, Unknown=0, NotChecked=0, Total=870 [2023-11-23 21:14:11,609 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 42 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 42 SdHoareTripleChecker+Invalid, 115 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:11,609 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 42 Invalid, 115 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:14:11,610 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22 states. [2023-11-23 21:14:11,612 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22 to 21. [2023-11-23 21:14:11,612 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21 states, 20 states have (on average 1.2) internal successors, (24), 20 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:11,613 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 24 transitions. [2023-11-23 21:14:11,613 INFO L78 Accepts]: Start accepts. Automaton has 21 states and 24 transitions. Word has length 16 [2023-11-23 21:14:11,613 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:11,613 INFO L495 AbstractCegarLoop]: Abstraction has 21 states and 24 transitions. [2023-11-23 21:14:11,613 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 1.7222222222222223) internal successors, (31), 17 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:11,613 INFO L276 IsEmpty]: Start isEmpty. Operand 21 states and 24 transitions. [2023-11-23 21:14:11,614 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-11-23 21:14:11,614 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:11,614 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1] [2023-11-23 21:14:11,639 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-23 21:14:11,824 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:11,825 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:11,825 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:11,825 INFO L85 PathProgramCache]: Analyzing trace with hash -1778968404, now seen corresponding path program 3 times [2023-11-23 21:14:11,825 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:11,826 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1372934292] [2023-11-23 21:14:11,826 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:11,826 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:11,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:12,120 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 1 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:12,121 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:12,121 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1372934292] [2023-11-23 21:14:12,121 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1372934292] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:12,121 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [355558165] [2023-11-23 21:14:12,121 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2023-11-23 21:14:12,121 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:12,122 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:12,123 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:12,140 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-23 21:14:12,196 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2023-11-23 21:14:12,197 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-11-23 21:14:12,198 INFO L262 TraceCheckSpWp]: Trace formula consists of 125 conjuncts, 26 conjunts are in the unsatisfiable core [2023-11-23 21:14:12,200 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:12,205 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2023-11-23 21:14:12,322 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 1 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:12,322 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:12,548 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 1 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:12,548 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [355558165] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:12,548 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [657613418] [2023-11-23 21:14:12,551 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2023-11-23 21:14:12,551 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:12,552 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:12,552 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:12,552 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:13,171 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:13,552 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '770#(and (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 2 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 2 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|) |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (<= 2 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 2 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)))' at error location [2023-11-23 21:14:13,553 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:13,553 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:13,553 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 7, 7] total 18 [2023-11-23 21:14:13,553 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [80526493] [2023-11-23 21:14:13,553 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:13,554 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2023-11-23 21:14:13,554 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:13,554 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2023-11-23 21:14:13,555 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=94, Invalid=556, Unknown=0, NotChecked=0, Total=650 [2023-11-23 21:14:13,555 INFO L87 Difference]: Start difference. First operand 21 states and 24 transitions. Second operand has 20 states, 19 states have (on average 2.526315789473684) internal successors, (48), 19 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:13,792 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:13,792 INFO L93 Difference]: Finished difference Result 32 states and 37 transitions. [2023-11-23 21:14:13,792 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-11-23 21:14:13,793 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 2.526315789473684) internal successors, (48), 19 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2023-11-23 21:14:13,793 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:13,793 INFO L225 Difference]: With dead ends: 32 [2023-11-23 21:14:13,793 INFO L226 Difference]: Without dead ends: 32 [2023-11-23 21:14:13,794 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 34 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 243 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=141, Invalid=789, Unknown=0, NotChecked=0, Total=930 [2023-11-23 21:14:13,795 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 60 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 132 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 45 SdHoareTripleChecker+Invalid, 133 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 132 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:13,795 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 45 Invalid, 133 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 132 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:14:13,796 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32 states. [2023-11-23 21:14:13,798 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32 to 27. [2023-11-23 21:14:13,798 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 26 states have (on average 1.1923076923076923) internal successors, (31), 26 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:13,799 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 31 transitions. [2023-11-23 21:14:13,799 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 31 transitions. Word has length 18 [2023-11-23 21:14:13,799 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:13,799 INFO L495 AbstractCegarLoop]: Abstraction has 27 states and 31 transitions. [2023-11-23 21:14:13,799 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 2.526315789473684) internal successors, (48), 19 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:13,800 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 31 transitions. [2023-11-23 21:14:13,800 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-23 21:14:13,801 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:13,801 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1] [2023-11-23 21:14:13,824 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-23 21:14:14,016 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-23 21:14:14,017 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:14,017 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:14,017 INFO L85 PathProgramCache]: Analyzing trace with hash -1522365927, now seen corresponding path program 4 times [2023-11-23 21:14:14,017 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:14,017 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [498673840] [2023-11-23 21:14:14,018 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:14,018 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:14,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:14,370 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:14,370 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:14,370 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [498673840] [2023-11-23 21:14:14,370 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [498673840] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:14,370 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1793804645] [2023-11-23 21:14:14,371 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2023-11-23 21:14:14,371 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:14,371 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:14,372 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:14,396 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-11-23 21:14:14,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:14,457 INFO L262 TraceCheckSpWp]: Trace formula consists of 143 conjuncts, 34 conjunts are in the unsatisfiable core [2023-11-23 21:14:14,460 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:14,550 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2023-11-23 21:14:14,590 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:14,591 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:14,620 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2023-11-23 21:14:14,622 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2023-11-23 21:14:14,675 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:14,675 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1793804645] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:14,675 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1311884914] [2023-11-23 21:14:14,678 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2023-11-23 21:14:14,678 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:14,678 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:14,679 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:14,679 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:15,371 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:15,743 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '996#(and (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 2 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 2 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|) |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (<= 2 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 2 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)))' at error location [2023-11-23 21:14:15,743 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:15,743 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:15,743 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 18 [2023-11-23 21:14:15,743 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [996240648] [2023-11-23 21:14:15,744 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:15,744 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2023-11-23 21:14:15,744 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:15,745 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2023-11-23 21:14:15,745 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=75, Invalid=525, Unknown=0, NotChecked=0, Total=600 [2023-11-23 21:14:15,745 INFO L87 Difference]: Start difference. First operand 27 states and 31 transitions. Second operand has 19 states, 19 states have (on average 2.0) internal successors, (38), 18 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:16,014 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:16,015 INFO L93 Difference]: Finished difference Result 45 states and 51 transitions. [2023-11-23 21:14:16,015 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-11-23 21:14:16,016 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 19 states have (on average 2.0) internal successors, (38), 18 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2023-11-23 21:14:16,016 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:16,016 INFO L225 Difference]: With dead ends: 45 [2023-11-23 21:14:16,016 INFO L226 Difference]: Without dead ends: 30 [2023-11-23 21:14:16,017 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 83 GetRequests, 54 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 139 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=121, Invalid=809, Unknown=0, NotChecked=0, Total=930 [2023-11-23 21:14:16,018 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 22 mSDsluCounter, 82 mSDsCounter, 0 mSdLazyCounter, 200 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 22 SdHoareTripleChecker+Valid, 89 SdHoareTripleChecker+Invalid, 205 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 200 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:16,018 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [22 Valid, 89 Invalid, 205 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 200 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-23 21:14:16,019 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30 states. [2023-11-23 21:14:16,024 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30 to 29. [2023-11-23 21:14:16,025 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 28 states have (on average 1.1785714285714286) internal successors, (33), 28 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:16,025 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 33 transitions. [2023-11-23 21:14:16,026 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 33 transitions. Word has length 23 [2023-11-23 21:14:16,026 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:16,026 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 33 transitions. [2023-11-23 21:14:16,027 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 19 states have (on average 2.0) internal successors, (38), 18 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:16,027 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2023-11-23 21:14:16,028 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-23 21:14:16,028 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:16,028 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1] [2023-11-23 21:14:16,055 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2023-11-23 21:14:16,229 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:16,229 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:16,230 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:16,230 INFO L85 PathProgramCache]: Analyzing trace with hash 717315504, now seen corresponding path program 5 times [2023-11-23 21:14:16,230 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:16,230 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1087898717] [2023-11-23 21:14:16,230 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:16,230 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:16,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:16,557 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:16,557 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:16,557 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1087898717] [2023-11-23 21:14:16,557 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1087898717] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:16,558 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1109310297] [2023-11-23 21:14:16,558 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-11-23 21:14:16,558 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:16,558 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:16,561 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:16,580 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2023-11-23 21:14:16,652 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2023-11-23 21:14:16,652 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-11-23 21:14:16,654 INFO L262 TraceCheckSpWp]: Trace formula consists of 156 conjuncts, 28 conjunts are in the unsatisfiable core [2023-11-23 21:14:16,656 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:16,859 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:16,859 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:17,061 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2023-11-23 21:14:17,110 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:17,110 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1109310297] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:17,111 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1473374326] [2023-11-23 21:14:17,113 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2023-11-23 21:14:17,113 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:17,113 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:17,114 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:17,114 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:17,673 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:18,064 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1256#(and (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 2 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 2 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|) |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (<= 2 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 2 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)))' at error location [2023-11-23 21:14:18,064 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:18,064 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:18,064 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 9] total 22 [2023-11-23 21:14:18,065 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1332266672] [2023-11-23 21:14:18,065 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:18,065 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2023-11-23 21:14:18,065 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:18,066 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2023-11-23 21:14:18,066 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=127, Invalid=743, Unknown=0, NotChecked=0, Total=870 [2023-11-23 21:14:18,067 INFO L87 Difference]: Start difference. First operand 29 states and 33 transitions. Second operand has 24 states, 23 states have (on average 2.9130434782608696) internal successors, (67), 23 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:18,315 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:18,315 INFO L93 Difference]: Finished difference Result 40 states and 46 transitions. [2023-11-23 21:14:18,315 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2023-11-23 21:14:18,316 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 23 states have (on average 2.9130434782608696) internal successors, (67), 23 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2023-11-23 21:14:18,316 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:18,318 INFO L225 Difference]: With dead ends: 40 [2023-11-23 21:14:18,318 INFO L226 Difference]: Without dead ends: 40 [2023-11-23 21:14:18,319 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 87 GetRequests, 49 SyntacticMatches, 4 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 423 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=191, Invalid=1069, Unknown=0, NotChecked=0, Total=1260 [2023-11-23 21:14:18,320 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 118 mSDsluCounter, 94 mSDsCounter, 0 mSdLazyCounter, 233 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 118 SdHoareTripleChecker+Valid, 107 SdHoareTripleChecker+Invalid, 234 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 233 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:18,320 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [118 Valid, 107 Invalid, 234 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 233 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-23 21:14:18,321 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40 states. [2023-11-23 21:14:18,323 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40 to 35. [2023-11-23 21:14:18,323 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 34 states have (on average 1.1764705882352942) internal successors, (40), 34 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:18,323 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 40 transitions. [2023-11-23 21:14:18,324 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 40 transitions. Word has length 25 [2023-11-23 21:14:18,324 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:18,324 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 40 transitions. [2023-11-23 21:14:18,324 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 23 states have (on average 2.9130434782608696) internal successors, (67), 23 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:18,327 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 40 transitions. [2023-11-23 21:14:18,327 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-11-23 21:14:18,328 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:18,328 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1] [2023-11-23 21:14:18,354 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2023-11-23 21:14:18,528 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2023-11-23 21:14:18,529 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:18,529 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:18,529 INFO L85 PathProgramCache]: Analyzing trace with hash 1139722133, now seen corresponding path program 6 times [2023-11-23 21:14:18,529 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:18,529 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [238808396] [2023-11-23 21:14:18,529 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:18,529 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:18,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:18,974 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 13 proven. 30 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:18,975 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:18,975 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [238808396] [2023-11-23 21:14:18,975 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [238808396] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:18,975 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [944557568] [2023-11-23 21:14:18,975 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2023-11-23 21:14:18,975 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:18,975 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:18,977 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:19,001 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2023-11-23 21:14:19,069 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2023-11-23 21:14:19,070 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-11-23 21:14:19,071 INFO L262 TraceCheckSpWp]: Trace formula consists of 174 conjuncts, 44 conjunts are in the unsatisfiable core [2023-11-23 21:14:19,074 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:19,181 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2023-11-23 21:14:19,255 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 13 proven. 30 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:19,256 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:19,304 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2023-11-23 21:14:19,307 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2023-11-23 21:14:19,371 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 13 proven. 30 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:19,372 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [944557568] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:19,372 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [871538222] [2023-11-23 21:14:19,374 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2023-11-23 21:14:19,374 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:19,375 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:19,375 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:19,375 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:19,924 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:20,359 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1546#(and (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 2 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 2 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|) |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (<= 2 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 2 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)))' at error location [2023-11-23 21:14:20,359 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:20,359 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:20,359 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 22 [2023-11-23 21:14:20,360 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1977496234] [2023-11-23 21:14:20,360 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:20,360 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2023-11-23 21:14:20,360 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:20,361 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2023-11-23 21:14:20,361 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=86, Invalid=726, Unknown=0, NotChecked=0, Total=812 [2023-11-23 21:14:20,362 INFO L87 Difference]: Start difference. First operand 35 states and 40 transitions. Second operand has 23 states, 23 states have (on average 2.130434782608696) internal successors, (49), 22 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:20,723 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:20,723 INFO L93 Difference]: Finished difference Result 59 states and 67 transitions. [2023-11-23 21:14:20,723 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2023-11-23 21:14:20,723 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 2.130434782608696) internal successors, (49), 22 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2023-11-23 21:14:20,724 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:20,724 INFO L225 Difference]: With dead ends: 59 [2023-11-23 21:14:20,724 INFO L226 Difference]: Without dead ends: 38 [2023-11-23 21:14:20,725 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 108 GetRequests, 73 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 199 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=145, Invalid=1187, Unknown=0, NotChecked=0, Total=1332 [2023-11-23 21:14:20,726 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 52 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 293 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 300 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 293 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:20,726 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 128 Invalid, 300 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 293 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-23 21:14:20,727 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2023-11-23 21:14:20,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 37. [2023-11-23 21:14:20,729 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 36 states have (on average 1.1666666666666667) internal successors, (42), 36 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:20,730 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 42 transitions. [2023-11-23 21:14:20,730 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 42 transitions. Word has length 30 [2023-11-23 21:14:20,730 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:20,730 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 42 transitions. [2023-11-23 21:14:20,730 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 2.130434782608696) internal successors, (49), 22 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:20,731 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 42 transitions. [2023-11-23 21:14:20,731 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-23 21:14:20,732 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:20,732 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1] [2023-11-23 21:14:20,756 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2023-11-23 21:14:20,944 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2023-11-23 21:14:20,945 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:20,945 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:20,945 INFO L85 PathProgramCache]: Analyzing trace with hash 310250526, now seen corresponding path program 7 times [2023-11-23 21:14:20,945 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:20,945 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [950787409] [2023-11-23 21:14:20,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:20,946 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:20,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:21,379 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 9 proven. 41 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:21,379 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:21,379 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [950787409] [2023-11-23 21:14:21,379 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [950787409] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:21,379 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1750917242] [2023-11-23 21:14:21,379 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2023-11-23 21:14:21,379 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:21,380 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:21,381 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:21,404 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2023-11-23 21:14:21,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:21,474 INFO L262 TraceCheckSpWp]: Trace formula consists of 187 conjuncts, 35 conjunts are in the unsatisfiable core [2023-11-23 21:14:21,478 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:21,665 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 9 proven. 41 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:21,665 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:21,875 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2023-11-23 21:14:21,962 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 9 proven. 41 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:21,962 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1750917242] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:21,962 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [664061252] [2023-11-23 21:14:21,966 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2023-11-23 21:14:21,966 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:21,967 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:21,967 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:21,967 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:22,508 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:22,888 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1875#(and (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 2 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 2 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|) |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (<= 2 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 2 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)))' at error location [2023-11-23 21:14:22,888 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:22,888 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:22,889 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 23 [2023-11-23 21:14:22,889 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1710304570] [2023-11-23 21:14:22,889 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:22,890 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2023-11-23 21:14:22,890 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:22,890 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2023-11-23 21:14:22,891 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=809, Unknown=0, NotChecked=0, Total=930 [2023-11-23 21:14:22,891 INFO L87 Difference]: Start difference. First operand 37 states and 42 transitions. Second operand has 25 states, 24 states have (on average 2.9166666666666665) internal successors, (70), 24 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:23,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:23,261 INFO L93 Difference]: Finished difference Result 48 states and 55 transitions. [2023-11-23 21:14:23,264 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2023-11-23 21:14:23,265 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 24 states have (on average 2.9166666666666665) internal successors, (70), 24 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2023-11-23 21:14:23,265 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:23,265 INFO L225 Difference]: With dead ends: 48 [2023-11-23 21:14:23,266 INFO L226 Difference]: Without dead ends: 48 [2023-11-23 21:14:23,266 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 111 GetRequests, 70 SyntacticMatches, 5 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 476 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=186, Invalid=1220, Unknown=0, NotChecked=0, Total=1406 [2023-11-23 21:14:23,267 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 140 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 282 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 140 SdHoareTripleChecker+Valid, 123 SdHoareTripleChecker+Invalid, 283 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 282 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:23,267 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [140 Valid, 123 Invalid, 283 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 282 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-23 21:14:23,268 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48 states. [2023-11-23 21:14:23,270 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48 to 43. [2023-11-23 21:14:23,270 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 42 states have (on average 1.1666666666666667) internal successors, (49), 42 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:23,271 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 49 transitions. [2023-11-23 21:14:23,271 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 49 transitions. Word has length 32 [2023-11-23 21:14:23,271 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:23,271 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 49 transitions. [2023-11-23 21:14:23,271 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 24 states have (on average 2.9166666666666665) internal successors, (70), 24 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:23,271 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 49 transitions. [2023-11-23 21:14:23,272 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2023-11-23 21:14:23,278 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:23,278 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 4, 4, 1, 1, 1, 1] [2023-11-23 21:14:23,298 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2023-11-23 21:14:23,492 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:23,493 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:23,493 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:23,493 INFO L85 PathProgramCache]: Analyzing trace with hash 2024009191, now seen corresponding path program 8 times [2023-11-23 21:14:23,494 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:23,494 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1272344340] [2023-11-23 21:14:23,494 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:23,494 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:23,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:23,954 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 17 proven. 54 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:23,954 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:23,954 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1272344340] [2023-11-23 21:14:23,954 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1272344340] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:23,955 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1364550106] [2023-11-23 21:14:23,955 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-11-23 21:14:23,955 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:23,955 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:23,957 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:23,965 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2023-11-23 21:14:24,072 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2023-11-23 21:14:24,072 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-11-23 21:14:24,074 INFO L262 TraceCheckSpWp]: Trace formula consists of 205 conjuncts, 46 conjunts are in the unsatisfiable core [2023-11-23 21:14:24,076 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:24,213 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2023-11-23 21:14:24,294 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 17 proven. 54 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:24,294 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:24,343 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2023-11-23 21:14:24,345 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2023-11-23 21:14:24,416 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 17 proven. 54 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:24,417 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1364550106] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:24,417 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [222770314] [2023-11-23 21:14:24,419 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2023-11-23 21:14:24,419 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:24,419 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:24,419 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:24,419 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:24,908 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:25,331 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2227#(and (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 2 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 2 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|) |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (<= 2 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 2 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)))' at error location [2023-11-23 21:14:25,331 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:25,331 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:25,332 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 14, 14] total 24 [2023-11-23 21:14:25,332 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [18251524] [2023-11-23 21:14:25,332 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:25,332 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2023-11-23 21:14:25,333 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:25,333 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2023-11-23 21:14:25,334 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=89, Invalid=841, Unknown=0, NotChecked=0, Total=930 [2023-11-23 21:14:25,334 INFO L87 Difference]: Start difference. First operand 43 states and 49 transitions. Second operand has 25 states, 25 states have (on average 2.24) internal successors, (56), 24 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:25,832 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:25,832 INFO L93 Difference]: Finished difference Result 73 states and 83 transitions. [2023-11-23 21:14:25,833 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2023-11-23 21:14:25,833 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 2.24) internal successors, (56), 24 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2023-11-23 21:14:25,833 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:25,833 INFO L225 Difference]: With dead ends: 73 [2023-11-23 21:14:25,834 INFO L226 Difference]: Without dead ends: 46 [2023-11-23 21:14:25,834 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 94 SyntacticMatches, 0 SemanticMatches, 39 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 218 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=159, Invalid=1481, Unknown=0, NotChecked=0, Total=1640 [2023-11-23 21:14:25,835 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 98 mSDsluCounter, 206 mSDsCounter, 0 mSdLazyCounter, 504 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 98 SdHoareTripleChecker+Valid, 219 SdHoareTripleChecker+Invalid, 512 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 504 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:25,836 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [98 Valid, 219 Invalid, 512 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 504 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-23 21:14:25,836 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2023-11-23 21:14:25,839 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 45. [2023-11-23 21:14:25,839 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 44 states have (on average 1.1590909090909092) internal successors, (51), 44 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:25,839 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 51 transitions. [2023-11-23 21:14:25,840 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 51 transitions. Word has length 37 [2023-11-23 21:14:25,840 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:25,840 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 51 transitions. [2023-11-23 21:14:25,840 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 2.24) internal successors, (56), 24 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:25,840 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 51 transitions. [2023-11-23 21:14:25,841 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2023-11-23 21:14:25,842 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:25,842 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 1, 1, 1, 1] [2023-11-23 21:14:25,868 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2023-11-23 21:14:26,052 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2023-11-23 21:14:26,053 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:26,053 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:26,053 INFO L85 PathProgramCache]: Analyzing trace with hash 1654730046, now seen corresponding path program 9 times [2023-11-23 21:14:26,053 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:26,053 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1184992956] [2023-11-23 21:14:26,053 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:26,053 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:26,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:26,624 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 16 proven. 64 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:26,624 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:26,624 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1184992956] [2023-11-23 21:14:26,624 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1184992956] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:26,624 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1195961909] [2023-11-23 21:14:26,624 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2023-11-23 21:14:26,624 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:26,625 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:26,626 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:26,629 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2023-11-23 21:14:26,725 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2023-11-23 21:14:26,725 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-11-23 21:14:26,727 INFO L262 TraceCheckSpWp]: Trace formula consists of 218 conjuncts, 45 conjunts are in the unsatisfiable core [2023-11-23 21:14:26,731 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:26,736 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2023-11-23 21:14:27,079 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 16 proven. 64 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:27,080 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:27,592 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 16 proven. 64 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:27,592 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1195961909] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:27,592 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1916234889] [2023-11-23 21:14:27,594 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2023-11-23 21:14:27,594 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:27,595 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:27,595 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:27,595 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:27,999 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:28,407 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2632#(and (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 2 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 2 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|) |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (<= 2 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 2 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)))' at error location [2023-11-23 21:14:28,407 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:28,407 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:28,407 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 31 [2023-11-23 21:14:28,408 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1026743546] [2023-11-23 21:14:28,408 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:28,408 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2023-11-23 21:14:28,409 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:28,409 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2023-11-23 21:14:28,410 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=194, Invalid=1288, Unknown=0, NotChecked=0, Total=1482 [2023-11-23 21:14:28,410 INFO L87 Difference]: Start difference. First operand 45 states and 51 transitions. Second operand has 33 states, 32 states have (on average 3.0) internal successors, (96), 32 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:29,022 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:29,022 INFO L93 Difference]: Finished difference Result 56 states and 64 transitions. [2023-11-23 21:14:29,023 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2023-11-23 21:14:29,023 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 32 states have (on average 3.0) internal successors, (96), 32 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2023-11-23 21:14:29,023 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:29,024 INFO L225 Difference]: With dead ends: 56 [2023-11-23 21:14:29,024 INFO L226 Difference]: Without dead ends: 56 [2023-11-23 21:14:29,025 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 136 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 635 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=337, Invalid=1919, Unknown=0, NotChecked=0, Total=2256 [2023-11-23 21:14:29,026 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 295 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 396 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 295 SdHoareTripleChecker+Valid, 183 SdHoareTripleChecker+Invalid, 400 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 396 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:29,026 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [295 Valid, 183 Invalid, 400 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 396 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-23 21:14:29,027 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2023-11-23 21:14:29,029 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 51. [2023-11-23 21:14:29,030 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 50 states have (on average 1.16) internal successors, (58), 50 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:29,030 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 58 transitions. [2023-11-23 21:14:29,030 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 58 transitions. Word has length 39 [2023-11-23 21:14:29,031 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:29,031 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 58 transitions. [2023-11-23 21:14:29,031 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 32 states have (on average 3.0) internal successors, (96), 32 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:29,031 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 58 transitions. [2023-11-23 21:14:29,032 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-23 21:14:29,033 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:29,033 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 5, 5, 1, 1, 1, 1] [2023-11-23 21:14:29,056 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2023-11-23 21:14:29,233 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2023-11-23 21:14:29,233 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:29,234 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:29,234 INFO L85 PathProgramCache]: Analyzing trace with hash 1290305735, now seen corresponding path program 10 times [2023-11-23 21:14:29,234 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:29,234 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1610063123] [2023-11-23 21:14:29,234 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:29,234 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:29,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:29,828 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 21 proven. 85 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:29,828 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:29,828 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1610063123] [2023-11-23 21:14:29,829 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1610063123] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:29,829 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1623099561] [2023-11-23 21:14:29,829 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2023-11-23 21:14:29,829 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:29,829 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:29,830 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:29,852 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2023-11-23 21:14:29,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:29,948 INFO L262 TraceCheckSpWp]: Trace formula consists of 236 conjuncts, 52 conjunts are in the unsatisfiable core [2023-11-23 21:14:29,955 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:30,136 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2023-11-23 21:14:30,223 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 21 proven. 85 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:30,223 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:30,281 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2023-11-23 21:14:30,284 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2023-11-23 21:14:30,358 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 21 proven. 85 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:30,358 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1623099561] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:30,359 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [985892892] [2023-11-23 21:14:30,360 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2023-11-23 21:14:30,361 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:30,361 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:30,361 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:30,361 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:30,811 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:31,254 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3049#(and (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 2 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 2 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|) |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (<= 2 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 2 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)))' at error location [2023-11-23 21:14:31,254 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:31,255 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:31,255 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16, 16] total 27 [2023-11-23 21:14:31,255 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [862725946] [2023-11-23 21:14:31,255 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:31,256 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2023-11-23 21:14:31,256 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:31,256 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2023-11-23 21:14:31,257 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=96, Invalid=1026, Unknown=0, NotChecked=0, Total=1122 [2023-11-23 21:14:31,257 INFO L87 Difference]: Start difference. First operand 51 states and 58 transitions. Second operand has 28 states, 28 states have (on average 2.3214285714285716) internal successors, (65), 27 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:31,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:31,786 INFO L93 Difference]: Finished difference Result 87 states and 99 transitions. [2023-11-23 21:14:31,786 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2023-11-23 21:14:31,786 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 2.3214285714285716) internal successors, (65), 27 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 44 [2023-11-23 21:14:31,787 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:31,787 INFO L225 Difference]: With dead ends: 87 [2023-11-23 21:14:31,787 INFO L226 Difference]: Without dead ends: 54 [2023-11-23 21:14:31,788 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 158 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 265 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=178, Invalid=1892, Unknown=0, NotChecked=0, Total=2070 [2023-11-23 21:14:31,789 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 122 mSDsluCounter, 229 mSDsCounter, 0 mSdLazyCounter, 545 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 122 SdHoareTripleChecker+Valid, 245 SdHoareTripleChecker+Invalid, 556 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 545 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:31,789 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [122 Valid, 245 Invalid, 556 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 545 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-23 21:14:31,790 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2023-11-23 21:14:31,793 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 53. [2023-11-23 21:14:31,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 52 states have (on average 1.1538461538461537) internal successors, (60), 52 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:31,794 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 60 transitions. [2023-11-23 21:14:31,794 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 60 transitions. Word has length 44 [2023-11-23 21:14:31,794 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:31,794 INFO L495 AbstractCegarLoop]: Abstraction has 53 states and 60 transitions. [2023-11-23 21:14:31,794 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 2.3214285714285716) internal successors, (65), 27 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:31,795 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 60 transitions. [2023-11-23 21:14:31,796 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2023-11-23 21:14:31,796 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:31,796 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 1, 1, 1, 1] [2023-11-23 21:14:31,814 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2023-11-23 21:14:32,000 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2023-11-23 21:14:32,001 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:32,001 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:32,001 INFO L85 PathProgramCache]: Analyzing trace with hash 1406968208, now seen corresponding path program 11 times [2023-11-23 21:14:32,001 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:32,001 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1014869504] [2023-11-23 21:14:32,001 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:32,001 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:32,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:32,617 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 25 proven. 92 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:32,618 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:32,618 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1014869504] [2023-11-23 21:14:32,618 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1014869504] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:32,618 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [408609159] [2023-11-23 21:14:32,618 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-11-23 21:14:32,618 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:32,618 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:32,619 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:32,651 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2023-11-23 21:14:32,751 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2023-11-23 21:14:32,751 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-11-23 21:14:32,754 INFO L262 TraceCheckSpWp]: Trace formula consists of 249 conjuncts, 40 conjunts are in the unsatisfiable core [2023-11-23 21:14:32,756 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:33,112 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 25 proven. 92 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:33,112 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:33,494 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2023-11-23 21:14:33,624 INFO L134 CoverageAnalysis]: Checked inductivity of 117 backedges. 25 proven. 92 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:33,624 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [408609159] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:33,624 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1779357013] [2023-11-23 21:14:33,626 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2023-11-23 21:14:33,626 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:33,626 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:33,626 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:33,626 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:34,131 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:34,547 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3528#(and (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 2 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 2 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|) |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (<= 2 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 2 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)))' at error location [2023-11-23 21:14:34,547 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:34,547 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:34,547 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 15] total 37 [2023-11-23 21:14:34,548 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [408687103] [2023-11-23 21:14:34,548 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:34,548 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2023-11-23 21:14:34,549 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:34,549 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2023-11-23 21:14:34,550 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=275, Invalid=1705, Unknown=0, NotChecked=0, Total=1980 [2023-11-23 21:14:34,551 INFO L87 Difference]: Start difference. First operand 53 states and 60 transitions. Second operand has 39 states, 38 states have (on average 3.263157894736842) internal successors, (124), 38 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:35,055 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:35,055 INFO L93 Difference]: Finished difference Result 64 states and 73 transitions. [2023-11-23 21:14:35,056 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2023-11-23 21:14:35,056 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 38 states have (on average 3.263157894736842) internal successors, (124), 38 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 46 [2023-11-23 21:14:35,056 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:35,057 INFO L225 Difference]: With dead ends: 64 [2023-11-23 21:14:35,057 INFO L226 Difference]: Without dead ends: 64 [2023-11-23 21:14:35,058 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 159 GetRequests, 100 SyntacticMatches, 7 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1119 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=405, Invalid=2457, Unknown=0, NotChecked=0, Total=2862 [2023-11-23 21:14:35,059 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 192 mSDsluCounter, 186 mSDsCounter, 0 mSdLazyCounter, 469 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 192 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 470 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 469 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:35,059 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [192 Valid, 207 Invalid, 470 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 469 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-23 21:14:35,060 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2023-11-23 21:14:35,070 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 59. [2023-11-23 21:14:35,076 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 58 states have (on average 1.1551724137931034) internal successors, (67), 58 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:35,077 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 67 transitions. [2023-11-23 21:14:35,077 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 67 transitions. Word has length 46 [2023-11-23 21:14:35,077 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:35,077 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 67 transitions. [2023-11-23 21:14:35,078 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 38 states have (on average 3.263157894736842) internal successors, (124), 38 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:35,078 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 67 transitions. [2023-11-23 21:14:35,079 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-11-23 21:14:35,079 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:35,080 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 7, 7, 6, 6, 1, 1, 1, 1] [2023-11-23 21:14:35,099 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2023-11-23 21:14:35,294 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2023-11-23 21:14:35,294 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:35,294 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:35,294 INFO L85 PathProgramCache]: Analyzing trace with hash 1721954229, now seen corresponding path program 12 times [2023-11-23 21:14:35,294 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:35,294 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1262808488] [2023-11-23 21:14:35,294 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:35,295 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:35,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:35,976 INFO L134 CoverageAnalysis]: Checked inductivity of 148 backedges. 25 proven. 123 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:35,976 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:35,976 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1262808488] [2023-11-23 21:14:35,976 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1262808488] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:35,976 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [272389867] [2023-11-23 21:14:35,976 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2023-11-23 21:14:35,976 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:35,977 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:35,978 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:36,006 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2023-11-23 21:14:36,115 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2023-11-23 21:14:36,115 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-11-23 21:14:36,118 INFO L262 TraceCheckSpWp]: Trace formula consists of 267 conjuncts, 56 conjunts are in the unsatisfiable core [2023-11-23 21:14:36,120 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:36,334 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2023-11-23 21:14:36,418 INFO L134 CoverageAnalysis]: Checked inductivity of 148 backedges. 25 proven. 123 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:36,418 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:36,483 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2023-11-23 21:14:36,494 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2023-11-23 21:14:36,581 INFO L134 CoverageAnalysis]: Checked inductivity of 148 backedges. 25 proven. 123 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:36,581 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [272389867] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:36,581 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1901782483] [2023-11-23 21:14:36,582 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2023-11-23 21:14:36,583 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:36,583 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:36,583 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:36,583 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:37,087 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:37,584 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4006#(and (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 2 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 2 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|) |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (<= 2 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 2 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)))' at error location [2023-11-23 21:14:37,584 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:37,584 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:37,584 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 18, 18] total 30 [2023-11-23 21:14:37,585 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [873081671] [2023-11-23 21:14:37,585 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:37,585 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2023-11-23 21:14:37,585 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:37,586 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2023-11-23 21:14:37,587 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=103, Invalid=1229, Unknown=0, NotChecked=0, Total=1332 [2023-11-23 21:14:37,587 INFO L87 Difference]: Start difference. First operand 59 states and 67 transitions. Second operand has 31 states, 31 states have (on average 2.3870967741935485) internal successors, (74), 30 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:38,284 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:38,285 INFO L93 Difference]: Finished difference Result 101 states and 115 transitions. [2023-11-23 21:14:38,285 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2023-11-23 21:14:38,285 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 2.3870967741935485) internal successors, (74), 30 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2023-11-23 21:14:38,285 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:38,286 INFO L225 Difference]: With dead ends: 101 [2023-11-23 21:14:38,286 INFO L226 Difference]: Without dead ends: 62 [2023-11-23 21:14:38,287 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 134 SyntacticMatches, 0 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 317 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=197, Invalid=2353, Unknown=0, NotChecked=0, Total=2550 [2023-11-23 21:14:38,288 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 99 mSDsluCounter, 297 mSDsCounter, 0 mSdLazyCounter, 715 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 99 SdHoareTripleChecker+Valid, 316 SdHoareTripleChecker+Invalid, 728 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 715 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:38,288 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [99 Valid, 316 Invalid, 728 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 715 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-23 21:14:38,289 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2023-11-23 21:14:38,291 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 61. [2023-11-23 21:14:38,292 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 60 states have (on average 1.15) internal successors, (69), 60 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:38,292 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 69 transitions. [2023-11-23 21:14:38,292 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 69 transitions. Word has length 51 [2023-11-23 21:14:38,293 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:38,293 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 69 transitions. [2023-11-23 21:14:38,293 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 2.3870967741935485) internal successors, (74), 30 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:38,293 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 69 transitions. [2023-11-23 21:14:38,294 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2023-11-23 21:14:38,294 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:38,294 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 7, 7, 7, 7, 1, 1, 1, 1] [2023-11-23 21:14:38,312 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2023-11-23 21:14:38,508 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:38,509 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:38,509 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:38,509 INFO L85 PathProgramCache]: Analyzing trace with hash 446106316, now seen corresponding path program 13 times [2023-11-23 21:14:38,509 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:38,509 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [978035827] [2023-11-23 21:14:38,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:38,509 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:38,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:39,228 INFO L134 CoverageAnalysis]: Checked inductivity of 161 backedges. 36 proven. 125 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:39,228 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:39,228 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [978035827] [2023-11-23 21:14:39,228 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [978035827] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:39,229 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1249001262] [2023-11-23 21:14:39,229 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2023-11-23 21:14:39,229 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:39,229 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:39,230 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:39,232 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2023-11-23 21:14:39,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:39,331 INFO L262 TraceCheckSpWp]: Trace formula consists of 280 conjuncts, 50 conjunts are in the unsatisfiable core [2023-11-23 21:14:39,334 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:39,670 INFO L134 CoverageAnalysis]: Checked inductivity of 161 backedges. 36 proven. 125 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:39,670 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:40,034 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2023-11-23 21:14:40,176 INFO L134 CoverageAnalysis]: Checked inductivity of 161 backedges. 36 proven. 125 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:40,176 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1249001262] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:40,177 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1668763605] [2023-11-23 21:14:40,178 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2023-11-23 21:14:40,178 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:40,179 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:40,179 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:40,179 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:40,637 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:41,076 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4551#(and (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 2 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 2 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|) |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (<= 2 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 2 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)))' at error location [2023-11-23 21:14:41,076 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:41,076 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:41,076 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 17, 17] total 35 [2023-11-23 21:14:41,076 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [568880527] [2023-11-23 21:14:41,077 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:41,077 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2023-11-23 21:14:41,077 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:41,078 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2023-11-23 21:14:41,079 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=217, Invalid=1589, Unknown=0, NotChecked=0, Total=1806 [2023-11-23 21:14:41,079 INFO L87 Difference]: Start difference. First operand 61 states and 69 transitions. Second operand has 37 states, 36 states have (on average 3.111111111111111) internal successors, (112), 36 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:41,731 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:14:41,731 INFO L93 Difference]: Finished difference Result 72 states and 82 transitions. [2023-11-23 21:14:41,731 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2023-11-23 21:14:41,731 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 36 states have (on average 3.111111111111111) internal successors, (112), 36 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2023-11-23 21:14:41,732 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:14:41,732 INFO L225 Difference]: With dead ends: 72 [2023-11-23 21:14:41,732 INFO L226 Difference]: Without dead ends: 72 [2023-11-23 21:14:41,733 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 124 SyntacticMatches, 8 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1058 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=327, Invalid=2429, Unknown=0, NotChecked=0, Total=2756 [2023-11-23 21:14:41,734 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 139 mSDsluCounter, 300 mSDsCounter, 0 mSdLazyCounter, 676 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 139 SdHoareTripleChecker+Valid, 324 SdHoareTripleChecker+Invalid, 677 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 676 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-23 21:14:41,734 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [139 Valid, 324 Invalid, 677 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 676 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-23 21:14:41,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2023-11-23 21:14:41,737 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 67. [2023-11-23 21:14:41,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 66 states have (on average 1.1515151515151516) internal successors, (76), 66 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:41,738 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 76 transitions. [2023-11-23 21:14:41,738 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 76 transitions. Word has length 53 [2023-11-23 21:14:41,738 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:14:41,738 INFO L495 AbstractCegarLoop]: Abstraction has 67 states and 76 transitions. [2023-11-23 21:14:41,739 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 36 states have (on average 3.111111111111111) internal successors, (112), 36 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-23 21:14:41,739 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 76 transitions. [2023-11-23 21:14:41,740 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2023-11-23 21:14:41,740 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:14:41,740 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 8, 8, 7, 7, 1, 1, 1, 1] [2023-11-23 21:14:41,765 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2023-11-23 21:14:41,940 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:41,940 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 8 more)] === [2023-11-23 21:14:41,941 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:14:41,941 INFO L85 PathProgramCache]: Analyzing trace with hash 1466231801, now seen corresponding path program 14 times [2023-11-23 21:14:41,941 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2023-11-23 21:14:41,941 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1334002520] [2023-11-23 21:14:41,941 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:14:41,941 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-23 21:14:41,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:14:42,765 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 29 proven. 168 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:42,766 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2023-11-23 21:14:42,766 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1334002520] [2023-11-23 21:14:42,766 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1334002520] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:14:42,766 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [670260149] [2023-11-23 21:14:42,766 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2023-11-23 21:14:42,766 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:14:42,766 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:14:42,767 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:14:42,792 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_856f55f3-113c-49ab-b51d-a2612da3c5d9/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2023-11-23 21:14:42,954 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 9 check-sat command(s) [2023-11-23 21:14:42,954 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2023-11-23 21:14:42,957 INFO L262 TraceCheckSpWp]: Trace formula consists of 298 conjuncts, 52 conjunts are in the unsatisfiable core [2023-11-23 21:14:42,960 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:14:43,174 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2023-11-23 21:14:46,253 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-11-23 21:14:46,253 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2023-11-23 21:14:46,507 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 36 proven. 156 refuted. 5 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:46,507 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:14:47,997 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2023-11-23 21:14:48,006 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2023-11-23 21:14:48,012 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2023-11-23 21:14:48,202 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 36 proven. 161 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:14:48,202 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [670260149] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:14:48,202 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [484660072] [2023-11-23 21:14:48,204 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2023-11-23 21:14:48,204 INFO L166 IcfgInterpreter]: Building call graph [2023-11-23 21:14:48,204 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2023-11-23 21:14:48,204 INFO L176 IcfgInterpreter]: Starting interpretation [2023-11-23 21:14:48,205 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2023-11-23 21:14:48,675 INFO L180 IcfgInterpreter]: Interpretation finished [2023-11-23 21:14:49,221 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5111#(and (<= 1 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_#t~malloc7#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 2 |ULTIMATE.start_cstrreplace_~s#1.base|) (<= |ULTIMATE.start_main_#t~nondet10#1| 2147483647) (<= 2 |ULTIMATE.start_cstrreplace_#in~s#1.base|) (= |ULTIMATE.start_cstrreplace_~numReplaced~0#1| 0) (= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet11#1| 2147483647) (= |ULTIMATE.start_cstrreplace_#in~s#1.offset| 0) (<= (select |#length| |ULTIMATE.start_cstrreplace_~p~0#1.base|) |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (<= 0 |ULTIMATE.start_cstrreplace_~p~0#1.offset|) (= |ULTIMATE.start_main_#t~malloc7#1.offset| 0) (= |ULTIMATE.start_cstrreplace_~s#1.offset| 0) (<= 2 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet11#1|)) (<= 2 |ULTIMATE.start_cstrreplace_~p~0#1.base|) (<= 0 (+ 2147483648 |ULTIMATE.start_main_#t~nondet10#1|)))' at error location [2023-11-23 21:14:49,221 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2023-11-23 21:14:49,222 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:14:49,222 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 20] total 52 [2023-11-23 21:14:49,222 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1466890918] [2023-11-23 21:14:49,222 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:14:49,223 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 53 states [2023-11-23 21:14:49,223 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2023-11-23 21:14:49,226 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 53 interpolants. [2023-11-23 21:14:49,227 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=321, Invalid=3100, Unknown=1, NotChecked=0, Total=3422 [2023-11-23 21:14:49,227 INFO L87 Difference]: Start difference. First operand 67 states and 76 transitions. Second operand has 53 states, 53 states have (on average 2.981132075471698) internal successors, (158), 52 states have internal predecessors, (158), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)