[ 0:00] | load /home/xrockai/src/divine/nightly/test/svcomp/product-lines/elevator_spec3_product20_false.cil.c elevator_spec3_product20_false.cil.c [ 0:00] | expect --result error --location elevator_spec3_product20_false.cil.c:2815 [ 0:00] | expect --trace FAULT: --trace-count 1 [ 0:00] | cc -o testcase.bc elevator_spec3_product20_false.cil.c [ 0:00] | verify --max-memory 4GiB --max-time 600 --threads 2 --report-filename verify.out --solver z3 --symbolic -o nofail:malloc testcase.bc [ 0:00] compiling elevator_spec3_product20_false.cil.c [ 0:00] elevator_spec3_product20_false.cil.c:2047:10: warning: format string is not a string literal (potentially insecure) [ 0:00] printf(__cil_tmp6); [ 0:00] ^~~~~~~~~~ [ 0:00] elevator_spec3_product20_false.cil.c:2047:10: note: treat the string as an argument to avoid this [ 0:00] printf(__cil_tmp6); [ 0:00] ^ [ 0:00] "%s", [ 0:00] elevator_spec3_product20_false.cil.c:2052:12: warning: format string is not a string literal (potentially insecure) [ 0:00] printf(__cil_tmp7); [ 0:00] ^~~~~~~~~~ [ 0:00] elevator_spec3_product20_false.cil.c:2052:12: note: treat the string as an argument to avoid this [ 0:00] printf(__cil_tmp7); [ 0:00] ^ [ 0:00] "%s", [ 0:00] elevator_spec3_product20_false.cil.c:2057:12: warning: format string is not a string literal (potentially insecure) [ 0:00] printf(__cil_tmp8); [ 0:00] ^~~~~~~~~~ [ 0:00] elevator_spec3_product20_false.cil.c:2057:12: note: treat the string as an argument to avoid this [ 0:00] printf(__cil_tmp8); [ 0:00] ^ [ 0:00] "%s", [ 0:00] elevator_spec3_product20_false.cil.c:2062:10: warning: format string is not a string literal (potentially insecure) [ 0:00] printf(__cil_tmp9); [ 0:00] ^~~~~~~~~~ [ 0:00] elevator_spec3_product20_false.cil.c:2062:10: note: treat the string as an argument to avoid this [ 0:00] printf(__cil_tmp9); [ 0:00] ^ [ 0:00] "%s", [ 0:00] elevator_spec3_product20_false.cil.c:2066:10: warning: format string is not a string literal (potentially insecure) [ 0:00] printf(__cil_tmp11); [ 0:00] ^~~~~~~~~~~ [ 0:00] elevator_spec3_product20_false.cil.c:2066:10: note: treat the string as an argument to avoid this [ 0:00] printf(__cil_tmp11); [ 0:00] ^ [ 0:00] "%s", [ 0:00] elevator_spec3_product20_false.cil.c:2071:12: warning: format string is not a string literal (potentially insecure) [ 0:00] printf(__cil_tmp12); [ 0:00] ^~~~~~~~~~~ [ 0:00] elevator_spec3_product20_false.cil.c:2071:12: note: treat the string as an argument to avoid this [ 0:00] printf(__cil_tmp12); [ 0:00] ^ [ 0:00] "%s", [ 0:00] elevator_spec3_product20_false.cil.c:2076:12: warning: format string is not a string literal (potentially insecure) [ 0:00] printf(__cil_tmp13); [ 0:00] ^~~~~~~~~~~ [ 0:00] elevator_spec3_product20_false.cil.c:2076:12: note: treat the string as an argument to avoid this [ 0:00] printf(__cil_tmp13); [ 0:00] ^ [ 0:00] "%s", [ 0:00] elevator_spec3_product20_false.cil.c:2081:10: warning: format string is not a string literal (potentially insecure) [ 0:00] printf(__cil_tmp14); [ 0:00] ^~~~~~~~~~~ [ 0:00] elevator_spec3_product20_false.cil.c:2081:10: note: treat the string as an argument to avoid this [ 0:00] printf(__cil_tmp14); [ 0:00] ^ [ 0:00] "%s", [ 0:00] elevator_spec3_product20_false.cil.c:2125:10: warning: format string is not a string literal (potentially insecure) [ 0:00] printf(__cil_tmp20); [ 0:00] ^~~~~~~~~~~ [ 0:00] elevator_spec3_product20_false.cil.c:2125:10: note: treat the string as an argument to avoid this [ 0:00] printf(__cil_tmp20); [ 0:00] ^ [ 0:00] "%s", [ 0:00] elevator_spec3_product20_false.cil.c:2182:10: warning: format string is not a string literal (potentially insecure) [ 0:01] printf(__cil_tmp26); [ 0:01] ^~~~~~~~~~~ [ 0:01] elevator_spec3_product20_false.cil.c:2182:10: note: treat the string as an argument to avoid this [ 0:01] printf(__cil_tmp26); [ 0:01] ^ [ 0:01] "%s", [ 0:01] elevator_spec3_product20_false.cil.c:2198:12: warning: format string is not a string literal (potentially insecure) [ 0:01] printf(__cil_tmp2); [ 0:01] ^~~~~~~~~~ [ 0:01] elevator_spec3_product20_false.cil.c:2198:12: note: treat the string as an argument to avoid this [ 0:01] printf(__cil_tmp2); [ 0:01] ^ [ 0:01] "%s", [ 0:01] elevator_spec3_product20_false.cil.c:2393:44: warning: incompatible redeclaration of library function 'malloc' [ 0:01] extern __attribute__((__nothrow__)) void *malloc(size_t __size ) __attribute__((__malloc__)) ; [ 0:01] ^ [ 0:01] elevator_spec3_product20_false.cil.c:2393:44: note: 'malloc' is a builtin with type 'void *(unsigned long)' [ 0:01] 12 warnings generated. [ 0:01] loading bitcode … DiOS … LART … RR … constants … done [ 0:13] booting … done [ 0:13] states per second: 28.9855 [ 0:13] state count: 2 [ 0:13] mips: 0.19 [ 0:13] symbolic: 1 [ 0:13] [ 0:13] error found: yes [ 0:13] error trace: | [ 0:13] FAULT: verifier error called [ 0:13] [0] FATAL: dios assertion violation in userspace [ 0:13] [ 0:13] active stack: [ 0:14] - symbol: void __dios::FaultBase::handler<__dios::Context>(_VM_Fault, _VM_Frame*, void (*)()) [ 0:14] location: /dios/sys/fault.hpp:118 [ 0:14] - symbol: __dios_fault [ 0:14] location: /dios/arch/divm/fault.c:12 [ 0:14] - symbol: __VERIFIER_error [ 0:14] location: /dios/libc/svcomp/svcomp-error.cpp:5 [ 0:14] - symbol: __automaton_fail [ 0:14] location: elevator_spec3_product20_false.cil.c:2815 [ 0:14] - symbol: __utac_acc__Specification3_spec__2 [ 0:14] location: elevator_spec3_product20_false.cil.c:3446 [ 0:14] - symbol: timeShift [ 0:14] location: elevator_spec3_product20_false.cil.c:2011 [ 0:14] - symbol: cleanup [ 0:14] location: elevator_spec3_product20_false.cil.c:2959 [ 0:14] - symbol: test [ 0:14] location: elevator_spec3_product20_false.cil.c:2767 [ 0:14] - symbol: runTest [ 0:14] location: elevator_spec3_product20_false.cil.c:3139 [ 0:14] - symbol: main [ 0:14] location: elevator_spec3_product20_false.cil.c:3157 [ 0:14] + divine sim --batch --skip-init --load-report verify.out [ 0:14] [ 0:25] ^ —————. —.— . . —.— . . .————— . . [ 0:25] ——— | | | | | | |\ | | | | [ 0:25] —(o)— | | | | | | | \ | |———— '————| [ 0:25] ——————— | | | \ / | | \| | | [ 0:25] ————————— —————' —'— ' —'— ' ' '————— ' [ 0:25] [ 0:25] Welcome to 'divine sim', an interactive debugger. Type 'help' to get started. [ 0:25] traced states: [ 0:25] ▶ state #1 [new] -- active threads: [0:0] -- [ 0:25] T: FAULT: verifier error called [ 0:25] # executing void __dios::FaultBase::handler<{Context}>(_VM_Fault, _VM_Frame*, void (*)()) at /dios/sys/fault.hpp:118 [ 0:25] # NOTE: $frame in __dios_fault [ 0:25] > backtrace [ 0:25] void __dios::FaultBase::handler<{Context}>(_VM_Fault, _VM_Frame*, void (*)()) at /dios/sys/fault.hpp:118 [ 0:25] __dios_fault at /dios/arch/divm/fault.c:12 [ 0:25] __VERIFIER_error at /dios/libc/svcomp/svcomp-error.cpp:5 [ 0:25] __automaton_fail at elevator_spec3_product20_false.cil.c:2815 [ 0:25] __utac_acc__Specification3_spec__2 at elevator_spec3_product20_false.cil.c:3446 [ 0:25] timeShift at elevator_spec3_product20_false.cil.c:2011 [ 0:25] cleanup at elevator_spec3_product20_false.cil.c:2959 [ 0:25] test at elevator_spec3_product20_false.cil.c:2767 [ 0:25] runTest at elevator_spec3_product20_false.cil.c:3139 [ 0:25] main at elevator_spec3_product20_false.cil.c:3157 [ 0:25] __dios_start at /dios/libc/sys/start.cpp:94 [ 0:25] # executing void __dios::FaultBase::handler<{Context}>(_VM_Fault, _VM_Frame*, void (*)()) at /dios/sys/fault.hpp:118 [ 0:25] # NOTE: $frame in __dios_fault