[ 0:01] | load /home/xrockai/src/divine/nightly/test/refine/pointers/shatter-a.c shatter-a.c [ 0:01] | expect --result error --location shatter-a.c:39 [ 0:01] | expect --trace FAULT: --trace-count 1 [ 0:01] | cc -o testcase.bc shatter-a.c [ 0:01] | refine -o nofail:malloc --refinement pointers --output testcase.bc testcase.bc [ 0:01] | verify --max-memory 4GiB --max-time 600 --threads 2 --report-filename verify.out --solver smtlib:z3 -o nofail:malloc --lamp pointers --symbolic testcase.bc [ 0:01] compiling shatter-a.c [ 0:01] loading bitcode … DiOS … LART … RR … constants … done [ 0:44] booting … done [ 0:44] states per second: 17.094 [ 0:45] state count: 20 [ 0:45] mips: 0.15 [ 0:45] symbolic: 1 [ 0:48] [ 0:48] error found: yes [ 0:48] error trace: | [ 0:48] ASSUME (not (= var_1 #x0000000000000000)) [ 0:48] ASSUME (not (= var_2 #x0000000000000000)) [ 0:48] ASSUME (and (not (= var_2 #x0000000000000000)) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) [ 0:48] ASSUME (and (not (= var_1 #x0000000000000000)) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001))) [ 0:48] ASSUME (and (and (and (not (= var_2 #x0000000000000000)) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_2 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_2))) (and (not (= var_1 #x0000000000000000)) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) [ 0:48] ASSUME (and (and (and (and (not (= var_2 #x0000000000000000)) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_2 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_2))) (and (not (= var_1 #x0000000000000000)) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) (not (bvult var_1 var_2))) [ 0:48] ASSUME (and (and (and (and (and (not (= var_2 #x0000000000000000)) (bvult var_2 (bvsub #xffffffffffffffff #x0000000000000001))) (or (bvule (bvadd var_2 #x0000000000000001) var_1) (bvule (bvadd var_1 #x0000000000000001) var_2))) (and (not (= var_1 #x0000000000000000)) (bvult var_1 (bvsub #xffffffffffffffff #x0000000000000001)))) (not (bvult var_1 var_2))) (not (bvult (concat ((_ extract 63 56) var_1) (concat ((_ extract 55 48) var_1) (concat ((_ extract 47 40) var_1) (concat ((_ extract 39 32) var_1) (concat ((_ extract 31 24) var_1) (concat ((_ extract 23 16) var_1) (concat ((_ extract 15 8) var_1) ((_ extract 7 0) var_1)))))))) (concat ((_ extract 63 56) var_2) (concat ((_ extract 55 48) var_2) (concat ((_ extract 47 40) var_2) (concat ((_ extract 39 32) var_2) (concat ((_ extract 31 24) var_2) (concat ((_ extract 23 16) var_2) (concat ((_ extract 15 8) var_2) ((_ extract 7 0) var_2))))))))))) [ 0:48] FAULT: shatter-a.c:39: int main(): assertion 'build( a_frag ) < build( b_frag )' failed [ 0:48] [0] FATAL: assertion failure in userspace [ 0:48] [ 0:48] active stack: [ 0:49] - symbol: void __dios::FaultBase::handler<__dios::Context>(_VM_Fault, _VM_Frame*, void (*)()) [ 0:50] location: /dios/sys/fault.hpp:118 [ 0:50] - symbol: __dios_fault [ 0:50] location: /dios/arch/divm/fault.c:12 [ 0:50] - symbol: lart.__assert_fail [ 0:50] location: /dios/libc/_PDCLIB/assert.c:24 [ 0:50] - symbol: main [ 0:50] location: shatter-a.c:39 [ 0:50] - symbol: __dios_start [ 0:50] location: /dios/libc/sys/start.cpp:94 [ 0:50] + divine sim --batch --skip-init --load-report verify.out [ 0:50] [ 1:00] ^ —————. —.— . . —.— . . .————— . . [ 1:00] ——— | | | | | | |\ | | | | [ 1:00] —(o)— | | | | | | | \ | |———— '————| [ 1:00] ——————— | | | \ / | | \| | | [ 1:00] ————————— —————' —'— ' —'— ' ' '————— ' [ 1:00] [ 1:00] Welcome to 'divine sim', an interactive debugger. Type 'help' to get started. [ 1:00] traced states: [ 1:01] ▶ state #17 [new] -- active threads: [0:0] -- [ 1:02] T: FAULT: shatter-a.c:39: int main(): assertion 'build( a_frag ) < build( b_frag )' failed [ 1:02] # executing void __dios::FaultBase::handler<{Context}>(_VM_Fault, _VM_Frame*, void (*)()) at /dios/sys/fault.hpp:118 [ 1:02] # NOTE: $frame in __dios_fault [ 1:02] > backtrace [ 1:02] void __dios::FaultBase::handler<{Context}>(_VM_Fault, _VM_Frame*, void (*)()) at /dios/sys/fault.hpp:118 [ 1:02] __dios_fault at /dios/arch/divm/fault.c:12 [ 1:02] lart.__assert_fail at /dios/libc/_PDCLIB/assert.c:24 [ 1:02] main at shatter-a.c:39 [ 1:02] __dios_start at /dios/libc/sys/start.cpp:94 [ 1:02] # executing void __dios::FaultBase::handler<{Context}>(_VM_Fault, _VM_Frame*, void (*)()) at /dios/sys/fault.hpp:118 [ 1:02] # NOTE: $frame in __dios_fault