/export/starexec/sandbox2/solver/bin/starexec_run_c /export/starexec/sandbox2/benchmark/theBenchmark.c /export/starexec/sandbox2/output/output_files


--------------------------------------------------------------------------------


YES
proof of /export/starexec/sandbox2/benchmark/theBenchmark.c
# AProVE Commit ID: 48fb2092695e11cc9f56e44b17a92a5f88ffb256 marcel 20180622 unpublished dirty


Termination of the given C Problem could be proven:

(0) C Problem
(1) CToLLVMProof [EQUIVALENT, 176 ms]
(2) LLVM problem
(3) LLVMToTerminationGraphProof [EQUIVALENT, 1908 ms]
(4) LLVM Symbolic Execution Graph
(5) SymbolicExecutionGraphToSCCProof [SOUND, 0 ms]
(6) LLVM Symbolic Execution SCC
(7) SCC2IRS [SOUND, 98 ms]
(8) IntTRS
(9) IRS2T2 [EQUIVALENT, 0 ms]
(10) T2IntSys
(11) T2 [EQUIVALENT, 1282 ms]
(12) YES


----------------------------------------

(0)
Obligation:
c file /export/starexec/sandbox2/benchmark/theBenchmark.c
----------------------------------------

(1) CToLLVMProof (EQUIVALENT)
Compiled c-file /export/starexec/sandbox2/benchmark/theBenchmark.c to LLVM.
----------------------------------------

(2)
Obligation:
LLVM Problem

Aliases:

Data layout:

"e-p:64:64:64-i1:8:8-i8:8:8-i16:16:16-i32:32:32-i64:64:64-f32:32:32-f64:64:64-v64:64:64-v128:128:128-a0:0:64-s0:64:64-f80:128:128-n8:16:32:64-S128"

Machine:

"x86_64-pc-linux-gnu"

Type definitions:

Global variables:

Function declarations and definitions:

*BasicFunctionTypename: "__VERIFIER_nondet_int" returnParam: i32 parameters: () variableLength: true visibilityType: DEFAULT callingConvention: ccc
*BasicFunctionTypename: "main" linkageType: EXTERNALLY_VISIBLE returnParam: i32 parameters: () variableLength: false visibilityType: DEFAULT callingConvention: ccc
	0:
		%1 = alloca i32, align 4
		%x = alloca i32, align 4
		%y = alloca i32, align 4
		%z = alloca i32, align 4
		store 0, %1
		%2 = call i32 (...)* @__VERIFIER_nondet_int()
		store %2, %x
		%3 = call i32 (...)* @__VERIFIER_nondet_int()
		store %3, %y
		%4 = call i32 (...)* @__VERIFIER_nondet_int()
		store %4, %z
		br %5
	5:
		%6 = load %x
		%7 = load %y
		%8 = add %6 %7
		%9 = icmp sge %8 0
		br %9, %10, %14
	10:
		%11 = load %x
		%12 = load %z
		%13 = icmp sle %11 %12
		br %14
	14:
		%15 = phi [0, %5], [%13, %10]
		br %15, %16, %23
	16:
		%17 = load %x
		%18 = mul 2 %17
		%19 = load %y
		%20 = add %18 %19
		store %20, %x
		%21 = load %y
		%22 = add %21 1
		store %22, %y
		br %5
	23:
		ret 0


Analyze Termination of all function calls matching the pattern:
main()
----------------------------------------

(3) LLVMToTerminationGraphProof (EQUIVALENT)
Constructed symbolic execution graph for LLVM program and proved memory safety.
----------------------------------------

(4)
Obligation:
SE Graph
----------------------------------------

(5) SymbolicExecutionGraphToSCCProof (SOUND)
Splitted symbolic execution graph to 1 SCC.
----------------------------------------

(6)
Obligation:
SCC
----------------------------------------

(7) SCC2IRS (SOUND)
Transformed LLVM symbolic execution graph SCC into a rewrite problem. Log: 
Generated rules. Obtained 22 rulesP rules:
f_204(v284, v285, v286, v287, v288, v289, v290, v296, v292, v293, 1, v291, v295, v297, v298, v299, v300, v301, 0, 3, 2, 4) -> f_205(v284, v285, v286, v287, v288, v289, v290, v296, v297, v293, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) :|: 0 = 0
f_205(v284, v285, v286, v287, v288, v289, v290, v296, v297, v293, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) -> f_206(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) :|: v303 = v296 + v297
f_206(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) -> f_207(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) :|: 0 <= v303
f_207(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) -> f_209(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) :|: 0 = 0
f_209(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) -> f_211(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) :|: TRUE
f_211(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) -> f_213(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) :|: 0 = 0
f_213(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) -> f_215(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) :|: 0 = 0
f_215(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) -> f_216(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) :|: v296 <= v290
f_216(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) -> f_218(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) :|: 0 = 0
f_218(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) -> f_220(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) :|: 0 = 0
f_220(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) -> f_222(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) :|: TRUE
f_222(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v291, v295, v292, v298, v299, v300, v301, 0, 3, 2, 4) -> f_224(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v295, v292, v298, v299, v300, v301, 0, 3, 4) :|: 0 = 0
f_224(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v295, v292, v298, v299, v300, v301, 0, 3, 4) -> f_225(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v406, v292, v298, v299, v300, v301, 0, 3, 2, 4) :|: v406 = 2 * v296
f_225(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v406, v292, v298, v299, v300, v301, 0, 3, 2, 4) -> f_226(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v406, v292, v298, v299, v300, v301, 0, 3, 2, 4) :|: 0 = 0
f_226(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v406, v292, v298, v299, v300, v301, 0, 3, 2, 4) -> f_227(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v406, v407, v292, v298, v299, v300, v301, 0, 3, 2, 4) :|: v407 = v406 + v297
f_227(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v406, v407, v292, v298, v299, v300, v301, 0, 3, 2, 4) -> f_228(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v406, v407, v292, v298, v299, v300, v301, 0, 3, 2, 4) :|: TRUE
f_228(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v406, v407, v292, v298, v299, v300, v301, 0, 3, 2, 4) -> f_229(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v406, v407, v298, v299, v300, v301, 0, 3, 2, 4) :|: 0 = 0
f_229(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v406, v407, v298, v299, v300, v301, 0, 3, 2, 4) -> f_230(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v406, v407, v409, v298, v299, v300, v301, 0, 3, 2, 4) :|: v409 = 1 + v297
f_230(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v406, v407, v409, v298, v299, v300, v301, 0, 3, 2, 4) -> f_231(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v406, v407, v409, v298, v299, v300, v301, 0, 3, 2, 4) :|: TRUE
f_231(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v406, v407, v409, v298, v299, v300, v301, 0, 3, 2, 4) -> f_232(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v406, v407, v409, v298, v299, v300, v301, 0, 3, 2, 4) :|: TRUE
f_232(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v406, v407, v409, v298, v299, v300, v301, 0, 3, 2, 4) -> f_203(v284, v285, v286, v287, v288, v289, v290, v296, v297, v303, 1, v406, v407, v409, v298, v299, v300, v301, 0, 3, 2, 4) :|: TRUE
f_203(v284, v285, v286, v287, v288, v289, v290, v291, v292, v293, 1, v295, v296, v297, v298, v299, v300, v301, 0, 3, 2, 4) -> f_204(v284, v285, v286, v287, v288, v289, v290, v296, v292, v293, 1, v291, v295, v297, v298, v299, v300, v301, 0, 3, 2, 4) :|: 0 = 0
Combined rules. Obtained 1 rulesP rules:
f_204(v284:0, v285:0, v286:0, v287:0, v288:0, v289:0, v290:0, v296:0, v292:0, v293:0, 1, v291:0, v295:0, v297:0, v298:0, v299:0, v300:0, v301:0, 0, 3, 2, 4) -> f_204(v284:0, v285:0, v286:0, v287:0, v288:0, v289:0, v290:0, 2 * v296:0 + v297:0, v297:0, v296:0 + v297:0, 1, v296:0, 2 * v296:0, 1 + v297:0, v298:0, v299:0, v300:0, v301:0, 0, 3, 2, 4) :|: v296:0 <= v290:0 && v296:0 + v297:0 > -1
Filtered unneeded arguments:
   f_204(x1, x2, x3, x4, x5, x6, x7, x8, x9, x10, x11, x12, x13, x14, x15, x16, x17, x18, x19, x20, x21, x22) -> f_204(x7, x8, x14)
Removed division, modulo operations, cleaned up constraints. Obtained 1 rules.P rules:
f_204(v290:0, v296:0, v297:0) -> f_204(v290:0, 2 * v296:0 + v297:0, 1 + v297:0) :|: v296:0 <= v290:0 && v296:0 + v297:0 > -1

----------------------------------------

(8)
Obligation:
Rules:
f_204(v290:0, v296:0, v297:0) -> f_204(v290:0, 2 * v296:0 + v297:0, 1 + v297:0) :|: v296:0 <= v290:0 && v296:0 + v297:0 > -1

----------------------------------------

(9) IRS2T2 (EQUIVALENT)
Transformed input IRS into an integer transition system.Used the following mapping from defined symbols to location IDs:

   (f_204_3,1)

----------------------------------------

(10)
Obligation:
START: 0;

FROM: 0;
TO: 1;

FROM: 1;
oldX0 := x0;
oldX1 := x1;
oldX2 := x2;
assume(oldX1 <= oldX0 && oldX1 + oldX2 > -1);
x0 := oldX0;
x1 := 2 * oldX1 + oldX2;
x2 := 1 + oldX2;
TO: 1;


----------------------------------------

(11) T2 (EQUIVALENT)
No proof given by T2
----------------------------------------

(12)
YES