mirror of
https://github.com/AdaCore/why3.git
synced 2026-02-12 12:34:55 -08:00
1164 lines
62 KiB
XML
1164 lines
62 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE why3session PUBLIC "-//Why3//proof session v5//EN"
|
|
"https://www.why3.org/why3session.dtd">
|
|
<why3session shape_version="6">
|
|
<prover id="2" name="CVC5" version="1.1.2" timelimit="5" steplimit="0" memlimit="1000"/>
|
|
<prover id="3" name="CVC4" version="1.8" timelimit="5" steplimit="0" memlimit="1000"/>
|
|
<prover id="4" name="Z3" version="4.13.2" timelimit="5" steplimit="0" memlimit="1000"/>
|
|
<prover id="5" name="Alt-Ergo" version="2.6.0" timelimit="5" steplimit="0" memlimit="1000"/>
|
|
<file format="whyml" proved="true">
|
|
<path name=".."/><path name="verifythis_2018_array_based_queuing_lock_2.mlw"/>
|
|
<theory name="ABQL" proved="true">
|
|
<goal name="tick'vc" expl="VC for tick" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.072021" steps="10855"/></proof>
|
|
</goal>
|
|
<goal name="fetch_and_add'vc" expl="VC for fetch_and_add" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="fetch_and_add'vc.0" expl="assertion" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="fetch_and_add'vc.0.0" expl="assertion" proved="true">
|
|
<transf name="subst" proved="true" arg1="a">
|
|
<goal name="fetch_and_add'vc.0.0.0" expl="assertion" proved="true">
|
|
<transf name="apply" proved="true" arg1="Div_mod">
|
|
<goal name="fetch_and_add'vc.0.0.0.0" expl="apply premises" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.037284" steps="4740"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="fetch_and_add'vc.0.1" expl="VC for fetch_and_add" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.024929" steps="46"/></proof>
|
|
</goal>
|
|
<goal name="fetch_and_add'vc.0.2" expl="VC for fetch_and_add" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.013037" steps="33580"/></proof>
|
|
</goal>
|
|
<goal name="fetch_and_add'vc.0.3" expl="VC for fetch_and_add" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.040230" steps="73"/></proof>
|
|
</goal>
|
|
<goal name="fetch_and_add'vc.0.4" expl="VC for fetch_and_add" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.047514" steps="5387"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="fetch_and_add'vc.1" expl="precondition" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.038837" steps="4414"/></proof>
|
|
</goal>
|
|
<goal name="fetch_and_add'vc.2" expl="precondition" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.009357" steps="6020"/></proof>
|
|
</goal>
|
|
<goal name="fetch_and_add'vc.3" expl="postcondition" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.026909" steps="3325"/></proof>
|
|
</goal>
|
|
<goal name="fetch_and_add'vc.4" expl="postcondition" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.000001" steps="556"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="last_push'vc" expl="VC for last_push" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.089721" steps="16985"/></proof>
|
|
</goal>
|
|
<goal name="consecutive_last_push'vc" expl="VC for consecutive_last_push" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.111337" steps="832"/></proof>
|
|
</goal>
|
|
<goal name="hd_push" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.096688" steps="12944"/></proof>
|
|
</goal>
|
|
<goal name="consecutive_implies_sorted'vc" expl="VC for consecutive_implies_sorted" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.124447" steps="20411"/></proof>
|
|
</goal>
|
|
<goal name="numof_equiv'vc" expl="VC for numof_equiv" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.180605" steps="36452"/></proof>
|
|
</goal>
|
|
<goal name="numof_add'vc" expl="VC for numof_add" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="numof_add'vc.0" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.207774" steps="1079"/></proof>
|
|
</goal>
|
|
<goal name="numof_add'vc.1" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="2.875917" steps="18729"/></proof>
|
|
</goal>
|
|
<goal name="numof_add'vc.2" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.471934" steps="3176"/></proof>
|
|
</goal>
|
|
<goal name="numof_add'vc.3" expl="postcondition" proved="true">
|
|
<proof prover="4"><result status="valid" time="1.021066" steps="893763"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="mod_diff" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="mod_diff.0" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.025241" steps="54927"/></proof>
|
|
</goal>
|
|
<goal name="mod_diff.1" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.020293" steps="55139"/></proof>
|
|
</goal>
|
|
<goal name="mod_diff.2" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.090218" steps="19379"/></proof>
|
|
</goal>
|
|
<goal name="mod_diff.3" proved="true">
|
|
<transf name="remove" proved="true" arg1="zero1,one1,(-),(>),(<=),(>=),abs,get1,set1,([]''),([<-]''),(!),is_none,([]'),numof,([]),singleton,cons,snoc,(++),mem,lt,sorted,consecutive,last,hd,has_ticket,has_lock,Assoc1,Unit_def_l,Unit_def_r,Inv_def_l,Inv_def_r,Comm1,Assoc,Mul_distr_l,Mul_distr_r,Comm,Unitary,NonTrivialRing,Refl,Trans,Antisymm,Total,ZeroLessOne,CompatOrderAdd,CompatOrderMult,Abs_le,Abs_pos,Div_mod,Mod_bound,Div_unique,Div_bound,Mod_1,Div_1,Div_inf,Div_inf_neg,Mod_0,Div_1_left,Div_minus1_left,Mod_1_left,Mod_minus1_left,Div_mult,numof'def,Numof_bounds,Numof_append,Numof_left_no_add,Numof_left_add,Empty,Full,numof_increasing,numof_strictly_increasing,numof_change_any,numof_change_some,numof_change_equiv,is_none'spec,array'invariant,([<-])'spec,make_spec,length_nonnegative,(==)'spec,create'spec,empty'def,set'spec,set'def,([<-])'def,singleton'spec,cons'spec,snoc'spec,([..])'spec,([..])'def,([_..])'def,([.._])'def,(++)'spec,associative,left_neutral,right_neutral,cons_def,snoc_def,double_sub_sequence,cons_back,snoc_back,cat_back,cons_dec,snoc_dec,cat_dec,empty_dec,singleton_dec,mem_append,mem_tail,N_val,K_val,tick'invariant,last_push,consecutive_last_push,hd_push,consecutive_implies_sorted,zero'def,one'def,numof_equiv,numof_add,H3,H2,H1">
|
|
<goal name="mod_diff.3.0" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.025002" steps="16"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="mod_diff.4" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.045829" steps="217"/></proof>
|
|
</goal>
|
|
<goal name="mod_diff.5" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.077645" steps="19802"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc" expl="VC for main" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="main'vc.0" expl="array creation size" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.027750" steps="51247"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.1" expl="index in array bounds" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.020162" steps="56914"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.2" expl="precondition" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.038361" steps="66"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.3" expl="array creation size" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.059230" steps="11191"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.4" expl="array creation size" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.053497" steps="12405"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.5" expl="array creation size" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.025590" steps="77995"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.6" expl="safety" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.035970" steps="102"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.7" expl="loop invariant init" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.100053" steps="24751"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.8" expl="loop invariant init" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.124499" steps="18655"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.9" expl="loop invariant init" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.008963" steps="7872"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.10" expl="loop invariant init" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.031911" steps="66"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.11" expl="loop invariant init" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.056191" steps="301"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.12" expl="loop invariant init" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.052701" steps="12342"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.13" expl="loop invariant init" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.045308" steps="253"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.14" expl="loop invariant init" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.041042" steps="131"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.15" expl="loop invariant init" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.039687" steps="167"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.16" expl="loop invariant init" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.110642" steps="19886"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.17" expl="loop invariant init" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.110935" steps="20191"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.18" expl="loop invariant init" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.046715" steps="148"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.19" expl="loop invariant init" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.046807" steps="123649"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.20" expl="loop invariant init" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.042351" steps="119329"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.21" expl="loop invariant init" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.044868" steps="117684"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.22" expl="loop invariant init" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.057706" steps="387"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.23" expl="loop invariant init" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.096322" steps="29186"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.24" expl="loop invariant init" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.037171" steps="153"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.25" expl="liveness" proved="true">
|
|
<transf name="split_all_full" proved="true" >
|
|
<goal name="main'vc.25.0" expl="liveness" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.071856" steps="160604"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.25.1" expl="liveness" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.040816" steps="186"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.25.2" expl="liveness" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.105832" steps="22820"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.25.3" expl="liveness" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.039882" steps="160"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.26" expl="index in array bounds" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.089794" steps="20409"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.27" expl="index in array bounds" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.096542" steps="20438"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.28" expl="safety" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.322522" steps="57537"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.29" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.066009" steps="17807"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.30" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.158634" steps="27779"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.31" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.077699" steps="830"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.32" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.158988" steps="40100"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.33" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.054947" steps="137208"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.34" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.145168" steps="36994"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.35" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.042400" steps="135238"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.36" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.247657" steps="37272"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.37" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.056130" steps="147880"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.38" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.047362" steps="137549"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.39" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.194970" steps="31504"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.40" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.124276" steps="34307"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.41" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.263333" steps="48732"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.42" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.073125" steps="386"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.43" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.063680" steps="19146"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.44" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.013654" steps="18078"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.45" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.065216" steps="19264"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.46" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.069169" steps="19274"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.47" expl="liveness" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.168538" steps="42133"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48" expl="assertion" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="main'vc.48.0" expl="assertion" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.102081" steps="30977"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48.1" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.062969" steps="17189"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48.2" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.057114" steps="336"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48.3" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.168466" steps="26760"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48.4" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.170073" steps="26845"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48.5" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="1.056662" steps="7766"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48.6" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.066533" steps="458"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48.7" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.064638" steps="492"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48.8" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.109097" steps="1227"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48.9" expl="assertion" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.203779" steps="38739"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48.10" expl="assertion" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.152392" steps="34428"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48.11" expl="assertion" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.223490" steps="44244"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48.12" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.068677" steps="584"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48.13" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.107171" steps="21014"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48.14" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.218757" steps="2731"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48.15" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.084624" steps="556"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48.16" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.082616" steps="607"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48.17" expl="assertion" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.023485" steps="10780"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.48.18" expl="assertion" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.046996" steps="135358"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.49" expl="assertion" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.216655" steps="44163"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.50" expl="index in array bounds" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.157243" steps="26923"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.51" expl="index in array bounds" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.034834" steps="66098"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.52" expl="index in array bounds" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.100034" steps="22343"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.53" expl="assertion" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.194165" steps="41809"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.54" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.053065" steps="256"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.55" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.248775" steps="3308"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.56" expl="assertion" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="main'vc.56.0" expl="assertion" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.045783" steps="165202"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.56.1" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.073681" steps="624"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.56.2" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.086199" steps="807"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.56.3" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.081568" steps="809"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.56.4" expl="assertion" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.061712" steps="166643"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.56.5" expl="assertion" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.057014" steps="166710"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.57" expl="assertion" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="main'vc.57.0" expl="assertion" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.065230" steps="181305"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.57.1" expl="assertion" proved="true">
|
|
<transf name="rewrite" proved="true" arg1="H">
|
|
<goal name="main'vc.57.1.0" expl="assertion" proved="true">
|
|
<transf name="apply" proved="true" arg1="consecutive_last_push">
|
|
<goal name="main'vc.57.1.0.0" expl="apply premises" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.011338" steps="12916"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.57.1.0.1" expl="apply premises" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.106063" steps="24265"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.58" expl="assertion" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.309722" steps="58997"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.59" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.108137" steps="1100"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.60" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.222016" steps="34853"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.61" expl="safety" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.477820" steps="85542"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.62" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.020424" steps="19616"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.63" expl="loop invariant preservation" proved="true">
|
|
<transf name="case" proved="true" arg1="(b = tick.b1)">
|
|
<goal name="main'vc.63.0" expl="true case (loop invariant preservation)" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.130963" steps="26303"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.63.1" expl="false case (loop invariant preservation)" proved="true">
|
|
<transf name="replace" proved="true" arg1="owners[b]'" arg2="owners1[b]'">
|
|
<goal name="main'vc.63.1.0" expl="false case (loop invariant preservation)" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.252559" steps="47777"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.63.1.1" expl="equality hypothesis" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.065571" steps="186987"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.64" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.242398" steps="37100"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.65" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.251647" steps="38292"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.66" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.044111" steps="167881"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.67" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.222764" steps="3145"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.68" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.253009" steps="39115"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.69" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.561459" steps="92767"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.70" expl="loop invariant preservation" proved="true">
|
|
<transf name="split_all_full" proved="true" >
|
|
<goal name="main'vc.70.0" expl="VC for main" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.663603" steps="105875"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.70.1" expl="VC for main" proved="true">
|
|
<proof prover="3"><result status="valid" time="1.052744" steps="124556"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.70.2" expl="VC for main" proved="true">
|
|
<proof prover="3"><result status="valid" time="1.116142" steps="123652"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.71" expl="loop invariant preservation" proved="true">
|
|
<transf name="case" proved="true" arg1="(th=th1)">
|
|
<goal name="main'vc.71.0" expl="true case (loop invariant preservation)" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.071891" steps="197045"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.71.1" expl="false case (loop invariant preservation)" proved="true">
|
|
<transf name="replace" proved="true" arg1="memo[th]'" arg2="memo1[th]'">
|
|
<goal name="main'vc.71.1.0" expl="false case (loop invariant preservation)" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.202497" steps="2658"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.71.1.1" expl="equality hypothesis" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.052445" steps="176946"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.72" expl="loop invariant preservation" proved="true">
|
|
<transf name="split_all_full" proved="true" >
|
|
<goal name="main'vc.72.0" expl="VC for main" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.068078" steps="213236"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.72.1" expl="VC for main" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.156990" steps="580777"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.73" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.078142" steps="22153"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.74" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.079794" steps="708"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.75" expl="loop invariant preservation" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="main'vc.75.0" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.720976" steps="86946"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.75.1" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.601560" steps="97293"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.76" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.074469" steps="209755"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.77" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.014756" steps="21523"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.78" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.129687" steps="27601"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.79" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.079969" steps="206684"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.80" expl="liveness" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.144328" steps="40595"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.81" expl="index in array bounds" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.040455" steps="157"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.82" expl="unreachable point" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.051723" steps="127689"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.83" expl="index in array bounds" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.035805" steps="130672"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.84" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.157188" steps="27172"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.85" expl="index in array bounds" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.030796" steps="69976"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.86" expl="precondition" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.051497" steps="147478"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.87" expl="assertion" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.044052" steps="155374"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.88" expl="fairness" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="main'vc.88.0" expl="fairness" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.047591" steps="140084"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.88.1" expl="fairness" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.048020" steps="139730"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.88.2" expl="fairness" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.050436" steps="146525"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.88.3" expl="fairness" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.050975" steps="140131"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.89" expl="assertion" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="main'vc.89.0" expl="assertion" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.050859" steps="182582"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.89.1" expl="assertion" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.123953" steps="31941"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.89.2" expl="assertion" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.469269" steps="65440"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.89.3" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.070987" steps="496"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.89.4" expl="assertion" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.363669" steps="60783"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.89.5" expl="assertion" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.269187" steps="46052"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.89.6" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.152087" steps="1621"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.89.7" expl="assertion" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.056152" steps="148477"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.89.8" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.367989" steps="4503"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.89.9" expl="assertion" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.151000" steps="35019"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.90" expl="assertion" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="main'vc.90.0" expl="assertion" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.124519" steps="32030"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.90.1" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.056520" steps="223"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.90.2" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.071345" steps="425"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.90.3" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.043803" steps="226"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.90.4" expl="assertion" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.052778" steps="142288"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.90.5" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.222685" steps="2397"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.90.6" expl="assertion" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.059553" steps="154024"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.90.7" expl="assertion" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.055101" steps="155016"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.91" expl="assertion" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.067015" steps="177572"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.92" expl="assertion" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="main'vc.92.0" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.221099" steps="35179"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.92.1" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.061846" steps="417"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.93" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.149515" steps="1770"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.94" expl="assertion" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.485212" steps="72873"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.95" expl="safety" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.072084" steps="167749"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.96" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.043592" steps="140967"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.97" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.052870" steps="145445"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.98" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.259032" steps="48841"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.99" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.127126" steps="23391"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.100" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.046474" steps="151065"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.101" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.163739" steps="38193"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.102" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.053739" steps="149107"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.103" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.227203" steps="44279"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.104" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.052709" steps="150348"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.105" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.164875" steps="2044"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.106" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.183555" steps="31007"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.107" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.773945" steps="96887"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.108" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.261135" steps="50841"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.109" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.059040" steps="161375"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.110" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="1.771897" steps="145767"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.111" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.119162" steps="24556"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.112" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.214614" steps="32605"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.113" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.069260" steps="188441"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.114" expl="liveness" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.065248" steps="303"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.115" expl="safety" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.043804" steps="129993"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.116" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.056367" steps="165"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.117" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.048401" steps="130888"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.118" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.170178" steps="35075"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.119" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.120090" steps="21623"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.120" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.038210" steps="134441"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.121" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.068171" steps="17913"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.122" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.167759" steps="27720"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.123" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.076200" steps="489"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.124" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.045670" steps="133485"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.125" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.093170" steps="804"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.126" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.165874" steps="28806"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.127" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.013354" steps="11484"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.128" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.117456" steps="33360"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.129" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.060295" steps="373"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.130" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.011827" steps="17465"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.131" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.057999" steps="382"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.132" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.013158" steps="11663"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.133" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.047715" steps="177"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.134" expl="liveness" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.089537" steps="794"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.135" expl="index in array bounds" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.040428" steps="157"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.136" expl="safety" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.317131" steps="57708"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.137" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.127262" steps="31943"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.138" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.188004" steps="39102"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.139" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.083109" steps="839"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.140" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.115295" steps="23475"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.141" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.060525" steps="365"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.142" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.051785" steps="143119"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.143" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.099837" steps="882"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.144" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.209953" steps="41692"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.145" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.064953" steps="147886"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.146" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.084802" steps="765"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.147" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.231180" steps="35741"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.148" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.066594" steps="19033"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.149" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.255143" steps="49039"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.150" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.066290" steps="386"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.151" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.056674" steps="395"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.152" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.011642" steps="18076"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.153" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.007475" steps="11999"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.154" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.009293" steps="17754"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.155" expl="liveness" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.192331" steps="42084"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.156" expl="index in array bounds" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.095071" steps="20438"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.157" expl="safety" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.300439" steps="57697"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.158" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.062075" steps="17807"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.159" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.173740" steps="27780"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.160" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.152714" steps="35875"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.161" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.148283" steps="1958"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.162" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.192015" steps="39935"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.163" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.146762" steps="36984"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.164" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.049443" steps="135240"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.165" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.165905" steps="31297"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.166" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.227633" steps="42503"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.167" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.038359" steps="137551"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.168" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.197677" steps="31371"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.169" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.016094" steps="11820"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.170" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.255064" steps="38727"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.171" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.070771" steps="386"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.172" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.066639" steps="19146"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.173" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.065849" steps="19171"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.174" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.160908" steps="38280"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.175" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.016152" steps="17754"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.176" expl="liveness" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.160757" steps="29128"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.177" expl="index in array bounds" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.043848" steps="157"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.178" expl="unreachable point" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.047476" steps="127687"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.179" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.119570" steps="1455"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.180" expl="index in array bounds" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.150771" steps="26520"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.181" expl="index in array bounds" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.086614" steps="20685"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.182" expl="safety" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.322153" steps="59111"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.183" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.104586" steps="32144"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.184" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.042883" steps="135009"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.185" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.053634" steps="162346"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.186" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.510955" steps="99083"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.187" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.141724" steps="1654"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.188" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.046507" steps="146704"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.189" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.055284" steps="138672"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.190" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.227392" steps="43417"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.191" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.051691" steps="160848"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.192" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.047656" steps="141094"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.193" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.220832" steps="33365"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.194" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.052476" steps="232"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.195" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.279073" steps="50640"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.196" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.071659" steps="460"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.197" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.071940" steps="19285"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.198" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.071463" steps="19310"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.199" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.011236" steps="12148"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.200" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.120653" steps="35040"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.201" expl="liveness" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.054462" steps="156558"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.202" expl="index in array bounds" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.087966" steps="20440"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.203" expl="unreachable point" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.196115" steps="37517"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.204" expl="precondition" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.049424" steps="165"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.205" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.114310" steps="1193"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.206" expl="index in array bounds" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.189727" steps="38472"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.207" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.275851" steps="45561"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.208" expl="index in array bounds" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.049781" steps="188"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.209" expl="assertion" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.185039" steps="39811"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.210" expl="index in array bounds" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.060668" steps="490"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.211" expl="index in array bounds" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.026304" steps="72810"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.212" expl="assertion" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="main'vc.212.0" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.112691" steps="1157"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.212.1" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.058741" steps="271"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.212.2" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.078184" steps="725"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.212.3" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.062580" steps="18362"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.212.4" expl="assertion" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.121015" steps="26183"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.213" expl="assertion" proved="true">
|
|
<proof prover="5"><result status="valid" time="1.400786" steps="10407"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.214" expl="assertion" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="main'vc.214.0" expl="assertion" proved="true">
|
|
<transf name="assert" proved="true" arg1="(memo1[th]' <> memo1[th']')">
|
|
<goal name="main'vc.214.0.0" expl="asserted formula" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.231988" steps="33522"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.214.0.1" expl="assertion" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.068423" steps="165424"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.214.1" expl="assertion" proved="true">
|
|
<transf name="replace" proved="true" arg1="memo[th']'" arg2="memo1[th']'" arg3="in" arg4="H">
|
|
<goal name="main'vc.214.1.0" expl="assertion" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.448588" steps="62751"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.214.1.1" expl="equality hypothesis" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.059657" steps="159626"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.214.2" expl="assertion" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.198491" steps="43557"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.214.3" expl="assertion" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.020526" steps="17943"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.215" expl="safety" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.314512" steps="58890"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.216" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.107312" steps="23614"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.217" expl="loop invariant preservation" proved="true">
|
|
<transf name="case" proved="true" arg1="(b = x.b1)">
|
|
<goal name="main'vc.217.0" expl="true case (loop invariant preservation)" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.118863" steps="24380"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.217.1" expl="false case (loop invariant preservation)" proved="true">
|
|
<transf name="replace" proved="true" arg1="owners[b]'" arg2="owners1[b]'">
|
|
<goal name="main'vc.217.1.0" expl="false case (loop invariant preservation)" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="main'vc.217.1.0.0" expl="VC for main" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.174113" steps="2111"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.217.1.0.1" expl="VC for main" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.061884" steps="173183"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.217.1.0.2" expl="VC for main" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.307817" steps="42289"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.217.1.0.3" expl="VC for main" proved="true">
|
|
<transf name="assert" proved="true" arg1="(x1 <> th)">
|
|
<goal name="main'vc.217.1.0.3.0" expl="asserted formula" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.123806" steps="24431"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.217.1.0.3.1" expl="VC for main" proved="true">
|
|
<transf name="replace" proved="true" arg1="memo[x1]'" arg2="memo1[x1]'" arg3="in" arg4="H">
|
|
<goal name="main'vc.217.1.0.3.1.0" expl="VC for main" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.062295" steps="167268"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.217.1.0.3.1.1" expl="equality hypothesis" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.232181" steps="44696"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.217.1.1" expl="equality hypothesis" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.225585" steps="44112"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.218" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.071840" steps="21357"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.219" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.117103" steps="37120"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.220" expl="loop invariant preservation" proved="true">
|
|
<proof prover="5"><result status="valid" time="0.077407" steps="600"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.221" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.014336" steps="18856"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.222" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.241490" steps="37551"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.223" expl="loop invariant preservation" proved="true">
|
|
<transf name="case" proved="true" arg1="(th=th1)">
|
|
<goal name="main'vc.223.0" expl="true case (loop invariant preservation)" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.056451" steps="164285"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.223.1" expl="false case (loop invariant preservation)" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.384604" steps="62814"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.224" expl="loop invariant preservation" proved="true">
|
|
<transf name="split_vc" proved="true" >
|
|
<goal name="main'vc.224.0" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.252070" steps="47110"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.224.1" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.263820" steps="52262"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.224.2" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.263401" steps="39603"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
<goal name="main'vc.225" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.243567" steps="36075"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.226" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.337679" steps="46566"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.227" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.123820" steps="37331"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.228" expl="loop invariant preservation" proved="true">
|
|
<proof prover="3"><result status="valid" time="0.254590" steps="53437"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.229" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.230970" steps="35930"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.230" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.067022" steps="20826"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.231" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.070194" steps="20851"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.232" expl="loop invariant preservation" proved="true">
|
|
<proof prover="4"><result status="valid" time="0.021261" steps="19829"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.233" expl="loop invariant preservation" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.061167" steps="21042"/></proof>
|
|
</goal>
|
|
<goal name="main'vc.234" expl="liveness" proved="true">
|
|
<proof prover="2"><result status="valid" time="0.276549" steps="44610"/></proof>
|
|
</goal>
|
|
</transf>
|
|
</goal>
|
|
</theory>
|
|
</file>
|
|
</why3session>
|