[ 0:01] compiling /home/xrockai/src/divine/nightly/test/svcomp/memsafety/test-0232_false-valid-free.c
[ 0:01] compiling /dios/lib/config/seqklee.bc
[ 0:01] setting up pass: functionmeta, options = 
[ 0:02] setting up pass: fuse-ctors, options = 
[ 0:02] KLEE: output directory is "/var/obj/divine-nightly/semidbg/test/__test_work_dir.4/_klee_out"
[ 0:04] KLEE: Using Z3 solver backend
[ 0:04] WARNING: this target does not support the llvm.stacksave intrinsic.
[ 0:04] warning: Linking two modules of different target triples: klee_div_zero_check.bc' is 'x86_64-unknown-linux-gnu' whereas 'klee.bc' is 'x86_64-unknown-none-elf'
[ 0:04] 
[ 0:04] KLEE: WARNING: undefined reference to function: __dios_tainted_init
[ 0:07] KLEE: WARNING: undefined reference to function: klee_free
[ 0:07] KLEE: WARNING: undefined reference to function: klee_malloc
[ 0:07] i:1
[ 0:07] KLEE: WARNING ONCE: Alignment of memory from call "klee_malloc" is not modelled. Using alignment of 8.
[ 0:07] about to __boot:0
[ 0:07] about to run the scheduler:0
[ 0:07] KLEE: WARNING ONCE: calling external: __dios_tainted_init() at /dios/libc/sys/start.cpp:49 5
[ 0:07] KLEE: ERROR: /dios/libc/sys/start.cpp:87: failed external call: __dios_tainted_init
[ 0:07] KLEE: NOTE: now ignoring this error at this location
[ 0:07] KLEE: ERROR: EXITING ON ERROR:
[ 0:07] Error: failed external call: __dios_tainted_init
[ 0:07] File: /dios/libc/sys/start.cpp
[ 0:07] Line: 87
[ 0:07] assembly.ll line: 34110
[ 0:07] Stack: 
[ 0:07] 	#000034110 in __dios_start (l=0, argc=1, argv=94207386464776, envp=94207386533896) at /dios/libc/sys/start.cpp:87
[ 0:07] 	#100010136 in _ZN6__dios10sched_nullINS_5ClockINS_10NondetKleeINS_4BaseEEEEEE13run_schedulerINS_7ContextEEEvv () at /dios/sys/sched_null.hpp:163
[ 0:07] 	#200042460 in klee_boot (argc=2, argv=94207361407744) at /dios/arch/klee/boot.c:41
[ 0:07] 
[ 0:07] 
[ 0:07]      1	/* TAGS: error sym c */
[ 0:07]      2	/* VERIFY_OPTS: --symbolic -o nofail:malloc */
[ 0:07]      3	extern void __VERIFIER_error() __attribute__ ((__noreturn__));
[ 0:07]      4	
[ 0:07]      5	#include <stdlib.h>
[ 0:07]      6	
[ 0:07]      7	extern int __VERIFIER_nondet_int(void);
[ 0:07]      8	
[ 0:07]      9	struct item {
[ 0:07]     10	    struct item *next;
[ 0:07]     11	    struct item *data;
[ 0:07]     12	};
[ 0:07]     13	
[ 0:07]     14	static void append(struct item **plist)
[ 0:07]     15	{
[ 0:07]     16	    struct item *item = malloc(sizeof *item);
[ 0:07]     17	    item->next = *plist;
[ 0:07]     18	
[ 0:07]     19	    // shared data
[ 0:07]     20	    item->data = (item->next)
[ 0:07]     21	        ? item->next->data
[ 0:07]     22	        : malloc(sizeof *item);
[ 0:07]     23	
[ 0:07]     24	    *plist = item;
[ 0:07]     25	}
[ 0:07]     26	
[ 0:07]     27	int main()
[ 0:07]     28	{
[ 0:07]     29	    struct item *list = NULL;
[ 0:07]     30	
[ 0:07]     31	    // create a long singly-linked list
[ 0:07]     32	    do
[ 0:07]     33	        append(&list);
[ 0:07]     34	    while (__VERIFIER_nondet_int());
[ 0:07]     35	
[ 0:07]     36	    // remove the first item
[ 0:07]     37	    if (list) {
[ 0:07]     38	        struct item *next = list->next;
[ 0:07]     39	
[ 0:07]     40	        // free shared data
[ 0:07]     41	        free(list->data);
[ 0:07]     42	
[ 0:07]     43	        free(list);
[ 0:07]     44	        list = next;
[ 0:07]     45	    }
[ 0:07]     46	
[ 0:07]     47	    // shared data is already freed when entering the loop
[ 0:07]     48	
[ 0:07]     49	    while (list) {
[ 0:07]     50	        struct item *next = list->next;
[ 0:07]     51	        if (!next)
[ 0:07]     52	            // this causes a double free
[ 0:07]     53	            free(list->data); /* ERROR */
[ 0:07]     54	
[ 0:07]     55	        free(list);
[ 0:07]     56	        list = next;
[ 0:07]     57	    }
[ 0:07]     58	
[ 0:07]     59	    return 0;
[ 0:07]     60	}
[ 0:07] # expected error to be found at /home/xrockai/src/divine/nightly/test/svcomp/memsafety/test-0232_false-valid-free.c:53, but it was not