[ 0:01] | load /home/xrockai/src/divine/nightly/test/svcomp/product-lines/elevator_spec2_product28_false.cil.c elevator_spec2_product28_false.cil.c [ 0:01] | expect --result error --location elevator_spec2_product28_false.cil.c:1699 [ 0:01] | expect --trace FAULT: --trace-count 1 [ 0:01] | cc -o testcase.bc elevator_spec2_product28_false.cil.c [ 0:01] | verify --max-memory 4GiB --max-time 600 --threads 2 --report-filename verify.out --solver z3 --symbolic -o nofail:malloc testcase.bc [ 0:01] compiling elevator_spec2_product28_false.cil.c [ 0:01] elevator_spec2_product28_false.cil.c:1315:10: warning: format string is not a string literal (potentially insecure) [ 0:01] printf(__cil_tmp6); [ 0:01] ^~~~~~~~~~ [ 0:01] elevator_spec2_product28_false.cil.c:1315:10: note: treat the string as an argument to avoid this [ 0:01] printf(__cil_tmp6); [ 0:01] ^ [ 0:01] "%s", [ 0:01] elevator_spec2_product28_false.cil.c:1320:12: warning: format string is not a string literal (potentially insecure) [ 0:01] printf(__cil_tmp7); [ 0:01] ^~~~~~~~~~ [ 0:01] elevator_spec2_product28_false.cil.c:1320:12: note: treat the string as an argument to avoid this [ 0:01] printf(__cil_tmp7); [ 0:01] ^ [ 0:01] "%s", [ 0:01] elevator_spec2_product28_false.cil.c:1325:12: warning: format string is not a string literal (potentially insecure) [ 0:01] printf(__cil_tmp8); [ 0:01] ^~~~~~~~~~ [ 0:01] elevator_spec2_product28_false.cil.c:1325:12: note: treat the string as an argument to avoid this [ 0:01] printf(__cil_tmp8); [ 0:01] ^ [ 0:01] "%s", [ 0:01] elevator_spec2_product28_false.cil.c:1330:10: warning: format string is not a string literal (potentially insecure) [ 0:01] printf(__cil_tmp9); [ 0:01] ^~~~~~~~~~ [ 0:01] elevator_spec2_product28_false.cil.c:1330:10: note: treat the string as an argument to avoid this [ 0:01] printf(__cil_tmp9); [ 0:01] ^ [ 0:01] "%s", [ 0:01] elevator_spec2_product28_false.cil.c:1334:10: warning: format string is not a string literal (potentially insecure) [ 0:01] printf(__cil_tmp11); [ 0:01] ^~~~~~~~~~~ [ 0:01] elevator_spec2_product28_false.cil.c:1334:10: note: treat the string as an argument to avoid this [ 0:01] printf(__cil_tmp11); [ 0:01] ^ [ 0:01] "%s", [ 0:01] elevator_spec2_product28_false.cil.c:1339:12: warning: format string is not a string literal (potentially insecure) [ 0:01] printf(__cil_tmp12); [ 0:01] ^~~~~~~~~~~ [ 0:01] elevator_spec2_product28_false.cil.c:1339:12: note: treat the string as an argument to avoid this [ 0:01] printf(__cil_tmp12); [ 0:01] ^ [ 0:01] "%s", [ 0:01] elevator_spec2_product28_false.cil.c:1344:12: warning: format string is not a string literal (potentially insecure) [ 0:01] printf(__cil_tmp13); [ 0:01] ^~~~~~~~~~~ [ 0:01] elevator_spec2_product28_false.cil.c:1344:12: note: treat the string as an argument to avoid this [ 0:01] printf(__cil_tmp13); [ 0:01] ^ [ 0:01] "%s", [ 0:01] elevator_spec2_product28_false.cil.c:1349:10: warning: format string is not a string literal (potentially insecure) [ 0:01] printf(__cil_tmp14); [ 0:01] ^~~~~~~~~~~ [ 0:01] elevator_spec2_product28_false.cil.c:1349:10: note: treat the string as an argument to avoid this [ 0:01] printf(__cil_tmp14); [ 0:01] ^ [ 0:01] "%s", [ 0:01] elevator_spec2_product28_false.cil.c:1393:10: warning: format string is not a string literal (potentially insecure) [ 0:01] printf(__cil_tmp20); [ 0:01] ^~~~~~~~~~~ [ 0:01] elevator_spec2_product28_false.cil.c:1393:10: note: treat the string as an argument to avoid this [ 0:01] printf(__cil_tmp20); [ 0:01] ^ [ 0:01] "%s", [ 0:01] elevator_spec2_product28_false.cil.c:1450:10: warning: format string is not a string literal (potentially insecure) [ 0:01] printf(__cil_tmp26); [ 0:01] ^~~~~~~~~~~ [ 0:01] elevator_spec2_product28_false.cil.c:1450:10: note: treat the string as an argument to avoid this [ 0:01] printf(__cil_tmp26); [ 0:01] ^ [ 0:01] "%s", [ 0:01] elevator_spec2_product28_false.cil.c:1466:12: warning: format string is not a string literal (potentially insecure) [ 0:01] printf(__cil_tmp2); [ 0:01] ^~~~~~~~~~ [ 0:01] elevator_spec2_product28_false.cil.c:1466:12: note: treat the string as an argument to avoid this [ 0:01] printf(__cil_tmp2); [ 0:01] ^ [ 0:01] "%s", [ 0:01] elevator_spec2_product28_false.cil.c:2856:44: warning: incompatible redeclaration of library function 'malloc' [ 0:01] extern __attribute__((__nothrow__)) void *malloc(size_t __size ) __attribute__((__malloc__)) ; [ 0:01] ^ [ 0:01] elevator_spec2_product28_false.cil.c:2856:44: note: 'malloc' is a builtin with type 'void *(unsigned long)' [ 0:01] 12 warnings generated. [ 0:01] loading bitcode … DiOS … LART … RR … constants … done [ 0:14] booting … done [ 0:14] states per second: 83.3333 [ 0:14] state count: 3 [ 0:14] mips: 0.28 [ 0:14] symbolic: 1 [ 0:14] [ 0:14] error found: yes [ 0:14] error trace: | [ 0:14] FAULT: verifier error called [ 0:14] [0] FATAL: dios assertion violation in userspace [ 0:14] [ 0:14] active stack: [ 0:14] - symbol: void __dios::FaultBase::handler<__dios::Context>(_VM_Fault, _VM_Frame*, void (*)()) [ 0:15] location: /dios/sys/fault.hpp:118 [ 0:15] - symbol: __dios_fault [ 0:15] location: /dios/arch/divm/fault.c:12 [ 0:15] - symbol: __VERIFIER_error [ 0:15] location: /dios/libc/svcomp/svcomp-error.cpp:5 [ 0:15] - symbol: __automaton_fail [ 0:15] location: elevator_spec2_product28_false.cil.c:1699 [ 0:15] - symbol: __utac_acc__Specification2_spec__4 [ 0:15] location: elevator_spec2_product28_false.cil.c:3472 [ 0:15] - symbol: runTest [ 0:15] location: elevator_spec2_product28_false.cil.c:2823 [ 0:15] - symbol: main [ 0:15] location: elevator_spec2_product28_false.cil.c:2841 [ 0:15] - symbol: __dios_start [ 0:15] location: /dios/libc/sys/start.cpp:94 [ 0:15] + divine sim --batch --skip-init --load-report verify.out [ 0:15] [ 0:26] ^ —————. —.— . . —.— . . .————— . . [ 0:26] ——— | | | | | | |\ | | | | [ 0:26] —(o)— | | | | | | | \ | |———— '————| [ 0:26] ——————— | | | \ / | | \| | | [ 0:26] ————————— —————' —'— ' —'— ' ' '————— ' [ 0:26] [ 0:26] Welcome to 'divine sim', an interactive debugger. Type 'help' to get started. [ 0:26] traced states: [ 0:26] ▶ state #2 [new] -- active threads: [0:0] -- [ 0:26] T: FAULT: verifier error called [ 0:26] # executing void __dios::FaultBase::handler<{Context}>(_VM_Fault, _VM_Frame*, void (*)()) at /dios/sys/fault.hpp:118 [ 0:26] # NOTE: $frame in __dios_fault [ 0:26] > backtrace [ 0:26] void __dios::FaultBase::handler<{Context}>(_VM_Fault, _VM_Frame*, void (*)()) at /dios/sys/fault.hpp:118 [ 0:26] __dios_fault at /dios/arch/divm/fault.c:12 [ 0:26] __VERIFIER_error at /dios/libc/svcomp/svcomp-error.cpp:5 [ 0:26] __automaton_fail at elevator_spec2_product28_false.cil.c:1699 [ 0:26] __utac_acc__Specification2_spec__4 at elevator_spec2_product28_false.cil.c:3472 [ 0:26] runTest at elevator_spec2_product28_false.cil.c:2823 [ 0:26] main at elevator_spec2_product28_false.cil.c:2841 [ 0:26] __dios_start at /dios/libc/sys/start.cpp:94 [ 0:26] # executing void __dios::FaultBase::handler<{Context}>(_VM_Fault, _VM_Frame*, void (*)()) at /dios/sys/fault.hpp:118 [ 0:26] # NOTE: $frame in __dios_fault