[ 0:00] | load /home/xrockai/src/divine/nightly/test/svcomp/memsafety/test-0232_false-valid-free.c test-0232_false-valid-free.c [ 0:00] | expect --result error --location test-0232_false-valid-free.c:53 [ 0:00] | expect --trace FAULT: --trace-count 1 [ 0:00] | cc -o testcase.bc test-0232_false-valid-free.c [ 0:00] | verify --max-memory 4GiB --max-time 600 --threads 2 --report-filename verify.out --solver z3 --symbolic -o nofail:malloc testcase.bc [ 0:00] compiling test-0232_false-valid-free.c [ 0:00] loading bitcode … DiOS … LART … RR … constants … done [ 0:12] booting … done [ 0:12] states per second: 19.2308 [ 0:12] state count: 3 [ 0:12] mips: 0.16 [ 0:12] symbolic: 1 [ 0:13] [ 0:13] error found: yes [ 0:13] error trace: | [ 0:13] ASSUME (not (= var_1 #x00000000)) [ 0:13] ASSUME (not (not (= var_2 #x00000000))) [ 0:13] FAULT: invalid pointer passed to __vm_obj_free [ 0:13] [0] FATAL: memory error in userspace [ 0:13] [ 0:13] active stack: [ 0:13] - symbol: void __dios::FaultBase::handler<__dios::Context>(_VM_Fault, _VM_Frame*, void (*)()) [ 0:13] location: /dios/sys/fault.hpp:118 [ 0:13] - symbol: free [ 0:13] location: /dios/libc/_PDCLIB/glue.c:73 [ 0:13] - symbol: main [ 0:13] location: test-0232_false-valid-free.c:53 [ 0:13] - symbol: __dios_start [ 0:13] location: /dios/libc/sys/start.cpp:94 [ 0:13] + divine sim --batch --skip-init --load-report verify.out [ 0:13] [ 0:25] ^ —————. —.— . . —.— . . .————— . . [ 0:25] ——— | | | | | | |\ | | | | [ 0:25] —(o)— | | | | | | | \ | |———— '————| [ 0:25] ——————— | | | \ / | | \| | | [ 0:25] ————————— —————' —'— ' —'— ' ' '————— ' [ 0:25] [ 0:25] Welcome to 'divine sim', an interactive debugger. Type 'help' to get started. [ 0:25] traced states: [ 0:26] ▶ state #1 [new] -- active threads: [0:0] -- [ 0:26] T: FAULT: invalid pointer passed to __vm_obj_free [ 0:26] # executing void __dios::FaultBase::handler<{Context}>(_VM_Fault, _VM_Frame*, void (*)()) at /dios/sys/fault.hpp:118 [ 0:26] # NOTE: $frame in free [ 0:26] > backtrace [ 0:26] void __dios::FaultBase::handler<{Context}>(_VM_Fault, _VM_Frame*, void (*)()) at /dios/sys/fault.hpp:118 [ 0:26] free at /dios/libc/_PDCLIB/glue.c:73 [ 0:26] main at test-0232_false-valid-free.c:53 [ 0:26] __dios_start at /dios/libc/sys/start.cpp:94 [ 0:26] # executing void __dios::FaultBase::handler<{Context}>(_VM_Fault, _VM_Frame*, void (*)()) at /dios/sys/fault.hpp:118 [ 0:26] # NOTE: $frame in free