[ 0:00] | load /var/obj/divine-nightly/semidbg/test/_expand/svcomp/array/sanfoundry_24_false-valid-deref.pkg.c/v.10.c v.10.c [ 0:00] | expect --result error --location v.10.c:38 [ 0:00] | expect --trace FAULT: --trace-count 1 [ 0:00] | cc -o testcase.bc -DSIZE=10 v.10.c [ 0:00] | verify --max-memory 4GiB --max-time 600 --threads 2 --report-filename verify.out --solver stp --symbolic --sequential -o nofail:malloc -o ignore:control testcase.bc [ 0:00] compiling v.10.c [ 0:00] loading bitcode … DiOS … LART … RR … constants … done [ 0:11] booting … done [ 0:11] states per second: 1.65172 [ 0:19] state count: 14 [ 0:19] mips: 0.26 [ 0:19] symbolic: 1 [ 0:28] [ 0:28] error found: yes [ 0:28] error trace: | [ 0:28] ASSUME (bvslt #x00000000 var_1) [ 0:28] ASSUME (and (bvslt #x00000000 var_1) (bvslt #x00000001 var_1)) [ 0:28] ASSUME (and (and (bvslt #x00000000 var_1) (bvslt #x00000001 var_1)) (bvslt #x00000002 var_1)) [ 0:28] ASSUME (and (and (and (bvslt #x00000000 var_1) (bvslt #x00000001 var_1)) (bvslt #x00000002 var_1)) (bvslt #x00000003 var_1)) [ 0:28] ASSUME (and (and (and (and (bvslt #x00000000 var_1) (bvslt #x00000001 var_1)) (bvslt #x00000002 var_1)) (bvslt #x00000003 var_1)) (bvslt #x00000004 var_1)) [ 0:28] ASSUME (and (and (and (and (and (bvslt #x00000000 var_1) (bvslt #x00000001 var_1)) (bvslt #x00000002 var_1)) (bvslt #x00000003 var_1)) (bvslt #x00000004 var_1)) (bvslt #x00000005 var_1)) [ 0:28] ASSUME (and (and (and (and (and (and (bvslt #x00000000 var_1) (bvslt #x00000001 var_1)) (bvslt #x00000002 var_1)) (bvslt #x00000003 var_1)) (bvslt #x00000004 var_1)) (bvslt #x00000005 var_1)) (bvslt #x00000006 var_1)) [ 0:28] ASSUME (and (and (and (and (and (and (and (bvslt #x00000000 var_1) (bvslt #x00000001 var_1)) (bvslt #x00000002 var_1)) (bvslt #x00000003 var_1)) (bvslt #x00000004 var_1)) (bvslt #x00000005 var_1)) (bvslt #x00000006 var_1)) (bvslt #x00000007 var_1)) [ 0:28] ASSUME (and (and (and (and (and (and (and (and (bvslt #x00000000 var_1) (bvslt #x00000001 var_1)) (bvslt #x00000002 var_1)) (bvslt #x00000003 var_1)) (bvslt #x00000004 var_1)) (bvslt #x00000005 var_1)) (bvslt #x00000006 var_1)) (bvslt #x00000007 var_1)) (bvslt #x00000008 var_1)) [ 0:28] ASSUME (and (and (and (and (and (and (and (and (and (bvslt #x00000000 var_1) (bvslt #x00000001 var_1)) (bvslt #x00000002 var_1)) (bvslt #x00000003 var_1)) (bvslt #x00000004 var_1)) (bvslt #x00000005 var_1)) (bvslt #x00000006 var_1)) (bvslt #x00000007 var_1)) (bvslt #x00000008 var_1)) (bvslt #x00000009 var_1)) [ 0:28] ASSUME (and (and (and (and (and (and (and (and (and (and (bvslt #x00000000 var_1) (bvslt #x00000001 var_1)) (bvslt #x00000002 var_1)) (bvslt #x00000003 var_1)) (bvslt #x00000004 var_1)) (bvslt #x00000005 var_1)) (bvslt #x00000006 var_1)) (bvslt #x00000007 var_1)) (bvslt #x00000008 var_1)) (bvslt #x00000009 var_1)) (bvslt #x0000000a var_1)) [ 0:28] FAULT: access of size 4 at [alloca* c99b44c 28h ddp] is 4 bytes out of bounds [ 0:28] [0] FATAL: memory error in userspace [ 0:28] [ 0:28] active stack: [ 0:28] - symbol: void __dios::FaultBase::handler<__dios::Context>(_VM_Fault, _VM_Frame*, void (*)()) [ 0:29] location: /dios/sys/fault.hpp:118 [ 0:29] - symbol: main [ 0:29] location: v.10.c:38 [ 0:29] - symbol: __dios_start [ 0:29] location: /dios/libc/sys/start.cpp:94 [ 0:29] + divine sim --batch --skip-init --load-report verify.out [ 0:29] [ 0:40] ^ —————. —.— . . —.— . . .————— . . [ 0:40] ——— | | | | | | |\ | | | | [ 0:40] —(o)— | | | | | | | \ | |———— '————| [ 0:40] ——————— | | | \ / | | \| | | [ 0:40] ————————— —————' —'— ' —'— ' ' '————— ' [ 0:40] [ 0:40] Welcome to 'divine sim', an interactive debugger. Type 'help' to get started. [ 0:40] traced states: [ 0:40] ▶ state #1 [new] -- active threads: [0:0] -- [ 0:41] T: FAULT: access of size 4 at [alloca* c99b44c 28h ddp] is 4 bytes out of bounds [ 0:41] # executing void __dios::FaultBase::handler<{Context}>(_VM_Fault, _VM_Frame*, void (*)()) at /dios/sys/fault.hpp:118 [ 0:41] # NOTE: $frame in main [ 0:41] > backtrace [ 0:41] void __dios::FaultBase::handler<{Context}>(_VM_Fault, _VM_Frame*, void (*)()) at /dios/sys/fault.hpp:118 [ 0:41] main at v.10.c:38 [ 0:41] __dios_start at /dios/libc/sys/start.cpp:94 [ 0:41] # executing void __dios::FaultBase::handler<{Context}>(_VM_Fault, _VM_Frame*, void (*)()) at /dios/sys/fault.hpp:118 [ 0:41] # NOTE: $frame in main