[ 0:00] | load /home/xrockai/src/divine/nightly/test/refine/pointers/mem-layout-a.c mem-layout-a.c [ 0:00] | expect --result error --location mem-layout-a.c:21 [ 0:00] | expect --trace FAULT: --trace-count 1 [ 0:00] | cc -o testcase.bc mem-layout-a.c [ 0:00] | refine -o nofail:malloc --refinement pointers --output testcase.bc testcase.bc [ 0:00] | verify --max-memory 4GiB --max-time 600 --threads 2 --report-filename verify.out --solver smtlib:z3 -o nofail:malloc --lamp pointers --symbolic testcase.bc [ 0:00] compiling mem-layout-a.c [ 0:00] loading bitcode … DiOS … LART … RR … constants … done [ 0:45] booting … done [ 0:45] states per second: 1.68848 [ 0:48] state count: 4 [ 0:48] mips: 0.19 [ 0:48] symbolic: 1 [ 0:49] [ 0:49] error found: yes [ 0:49] error trace: | [ 0:49] ASSUME (not (= var_1 #x0000000000000000)) [ 0:49] ASSUME (not (= var_2 #x0000000000000000)) [ 0:49] ASSUME (and (not (= var_2 #x0000000000000000)) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) [ 0:49] ASSUME (and (not (= var_1 #x0000000000000000)) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001))) [ 0:49] ASSUME (and (and (and (not (= var_2 #x0000000000000000)) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_2 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_2))) (and (not (= var_1 #x0000000000000000)) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) [ 0:49] ASSUME (not (= var_3 #x0000000000000000)) [ 0:49] ASSUME (and (not (= var_3 #x0000000000000000)) (bvult var_3 (bvsub #xffffffffffffffff #x0000000000000001))) [ 0:49] ASSUME (and (and (and (and (not (= var_2 #x0000000000000000)) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_2 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_2))) (and (not (= var_1 #x0000000000000000)) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001))) [ 0:49] ASSUME (and (and (and (not (= var_3 #x0000000000000000)) (bvult var_3 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_3 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_3))) (and (and (and (and (not (= var_2 #x0000000000000000)) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_2 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_2))) (and (not (= var_1 #x0000000000000000)) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) [ 0:49] ASSUME (and (and (and (and (not (= var_3 #x0000000000000000)) (bvult var_3 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_3 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_3))) (and (and (and (and (not (= var_2 #x0000000000000000)) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_2 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_2))) (and (not (= var_1 #x0000000000000000)) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) (bvult var_3 (bvsub #xffffffffffffffff #x0000000000000001))) [ 0:49] ASSUME (and (and (and (and (and (not (= var_3 #x0000000000000000)) (bvult var_3 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_3 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_3))) (and (and (and (and (not (= var_2 #x0000000000000000)) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_2 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_2))) (and (not (= var_1 #x0000000000000000)) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) (bvult var_3 (bvsub #xffffffffffffffff #x0000000000000001))) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) [ 0:49] ASSUME (and (and (and (and (and (and (not (= var_3 #x0000000000000000)) (bvult var_3 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_3 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_3))) (and (and (and (and (not (= var_2 #x0000000000000000)) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_2 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_2))) (and (not (= var_1 #x0000000000000000)) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) (bvult var_3 (bvsub #xffffffffffffffff #x0000000000000001))) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_3 #x0000000000000001) var_2) (bvule (bvadd var_2 #x0000000000000001) var_3))) [ 0:49] ASSUME (and (and (and (and (and (and (and (not (= var_3 #x0000000000000000)) (bvult var_3 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_3 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_3))) (and (and (and (and (not (= var_2 #x0000000000000000)) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_2 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_2))) (and (not (= var_1 #x0000000000000000)) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) (bvult var_3 (bvsub #xffffffffffffffff #x0000000000000001))) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_3 #x0000000000000001) var_2) (bvule (bvadd var_2 #x0000000000000001) var_3))) (bvult var_2 var_1)) [ 0:49] ASSUME (and (and (and (and (and (and (and (and (not (= var_3 #x0000000000000000)) (bvult var_3 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_3 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_3))) (and (and (and (and (not (= var_2 #x0000000000000000)) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_2 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_2))) (and (not (= var_1 #x0000000000000000)) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) (bvult var_3 (bvsub #xffffffffffffffff #x0000000000000001))) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_3 #x0000000000000001) var_2) (bvule (bvadd var_2 #x0000000000000001) var_3))) (bvult var_2 var_1)) (bvugt var_3 var_1)) [ 0:49] ASSUME (and (and (and (and (and (and (and (and (and (not (= var_3 #x0000000000000000)) (bvult var_3 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_3 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_3))) (and (and (and (and (not (= var_2 #x0000000000000000)) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_2 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_2))) (and (not (= var_1 #x0000000000000000)) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) (bvult var_3 (bvsub #xffffffffffffffff #x0000000000000001))) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_3 #x0000000000000001) var_2) (bvule (bvadd var_2 #x0000000000000001) var_3))) (bvult var_2 var_1)) (bvugt var_3 var_1)) (not (bvugt var_2 var_3))) [ 0:49] FAULT: mem-layout-a.c:21: int main(): assertion 'xi > yi' failed [ 0:49] [0] FATAL: assertion failure in userspace [ 0:49] [ 0:49] active stack: [ 0:51] - symbol: void __dios::FaultBase::handler<__dios::Context>(_VM_Fault, _VM_Frame*, void (*)()) [ 0:52] location: /dios/sys/fault.hpp:118 [ 0:52] - symbol: __dios_fault [ 0:52] location: /dios/arch/divm/fault.c:12 [ 0:52] - symbol: lart.__assert_fail [ 0:52] location: /dios/libc/_PDCLIB/assert.c:24 [ 0:52] - symbol: main [ 0:52] location: mem-layout-a.c:21 [ 0:52] - symbol: __dios_start [ 0:52] location: /dios/libc/sys/start.cpp:94 [ 0:52] + divine sim --batch --skip-init --load-report verify.out [ 0:52] [ 1:02] ^ —————. —.— . . —.— . . .————— . . [ 1:02] ——— | | | | | | |\ | | | | [ 1:02] —(o)— | | | | | | | \ | |———— '————| [ 1:02] ——————— | | | \ / | | \| | | [ 1:02] ————————— —————' —'— ' —'— ' ' '————— ' [ 1:02] [ 1:02] Welcome to 'divine sim', an interactive debugger. Type 'help' to get started. [ 1:02] traced states: [ 1:02] ▶ state #1 [new] -- active threads: [0:0] -- [ 1:02] T: FAULT: mem-layout-a.c:21: int main(): assertion 'xi > yi' failed [ 1:04] # executing void __dios::FaultBase::handler<{Context}>(_VM_Fault, _VM_Frame*, void (*)()) at /dios/sys/fault.hpp:118 [ 1:04] # NOTE: $frame in __dios_fault [ 1:04] > backtrace [ 1:04] void __dios::FaultBase::handler<{Context}>(_VM_Fault, _VM_Frame*, void (*)()) at /dios/sys/fault.hpp:118 [ 1:04] __dios_fault at /dios/arch/divm/fault.c:12 [ 1:04] lart.__assert_fail at /dios/libc/_PDCLIB/assert.c:24 [ 1:04] main at mem-layout-a.c:21 [ 1:04] __dios_start at /dios/libc/sys/start.cpp:94 [ 1:04] # executing void __dios::FaultBase::handler<{Context}>(_VM_Fault, _VM_Frame*, void (*)()) at /dios/sys/fault.hpp:118 [ 1:04] # NOTE: $frame in __dios_fault