scripts/cpa.sh -heap 10000M -setprop specification=/home/stahlbau/benchmarking/bench_regression_ea_safe_inproc/LDVErrorLabel.spc -explicitAnalysis -setprop analysis.summaryEdges=true -setprop cpa.callstack.skipRecursion=true -disable-java-assertions -noout -setprop analysis.entryFunction=ldv_main0_sequence_infinite_withcheck_stateful -setprop cpa.explicit.initialPrecisionFile=/home/stahlbau/benchmarking/bench_regression_ea_safe_inproc/precisions/ea.regression.08_1a.gpu--drm--i915--i915.ko.prec -setprop cpa.explicit.precisionFile=/home/stahlbau/benchmarking/bench_regression_ea_safe_inproc/precisions/ea.regression.08_1a.gpu--drm--i915--i915.ko.prec -64 -stats /home/stahlbau/benchmarking/bench_regression_ea_safe_inproc/programs/drivers--gpu--drm--i915--i915.ko/045.bd95e0a.08_1a.cil_safe.i -------------------------------------------------------------------------------- Running JavaVM with special heap size: 10000M CPAchecker 1.2-svn started (CPAchecker.run, INFO) Dead code detected at line 4824: switch (size) (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4825: [!(size == 1U)] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4827: __asm__ volatile ("1:\tmovb %2,%b1\n2:\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorb %b1,%b1\n\tjmp 2b\n.previous\n .section __ex_table,\"a\"\n .balign 8 \n .quad 1b,3b\n .previous\n": "=r" (ret), "=q" (*((u8 *)dst)): "m" (*((struct __large_struct *)src)), "i" (1), "0" (ret)); (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4832: [size == 2U] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4832: [!(size == 2U)] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4834: __asm__ volatile ("1:\tmovw %2,%w1\n2:\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorw %w1,%w1\n\tjmp 2b\n.previous\n .section __ex_table,\"a\"\n .balign 8 \n .quad 1b,3b\n .previous\n": "=r" (ret), "=r" (*((u16 *)dst)): "m" (*((struct __large_struct *)src)), "i" (2), "0" (ret)); (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4839: [size == 4U] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4839: [!(size == 4U)] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4841: __asm__ volatile ("1:\tmovl %2,%k1\n2:\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorl %k1,%k1\n\tjmp 2b\n.previous\n .section __ex_table,\"a\"\n .balign 8 \n .quad 1b,3b\n .previous\n": "=r" (ret), "=r" (*((u32 *)dst)): "m" (*((struct __large_struct *)src)), "i" (4), "0" (ret)); (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4846: [size == 8U] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4846: [!(size == 8U)] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4848: __asm__ volatile ("1:\tmovq %2,%1\n2:\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .section __ex_table,\"a\"\n .balign 8 \n .quad 1b,3b\n .previous\n": "=r" (ret), "=r" (*((u64 *)dst)): "m" (*((struct __large_struct *)src)), "i" (8), "0" (ret)); (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4853: [size == 10U] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4853: [!(size == 10U)] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4855: __asm__ volatile ("1:\tmovq %2,%1\n2:\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .section __ex_table,\"a\"\n .balign 8 \n .quad 1b,3b\n .previous\n": "=r" (ret), "=r" (*((u64 *)dst)): "m" (*((struct __large_struct *)src)), "i" (16), "0" (ret)); (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4861: [!(tmp___0 != 0L)] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4863: return (ret); (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4868: __asm__ volatile ("1:\tmovw %2,%w1\n2:\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorw %w1,%w1\n\tjmp 2b\n.previous\n .section __ex_table,\"a\"\n .balign 8 \n .quad 1b,3b\n .previous\n": "=r" (ret), "=r" (*((u16 *)dst + 8U)): "m" (*((struct __large_struct *)src + 8U)), "i" (2), "0" (ret)); (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4873: [size == 16U] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4873: [!(size == 16U)] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4875: __asm__ volatile ("1:\tmovq %2,%1\n2:\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .section __ex_table,\"a\"\n .balign 8 \n .quad 1b,3b\n .previous\n": "=r" (ret), "=r" (*((u64 *)dst)): "m" (*((struct __large_struct *)src)), "i" (16), "0" (ret)); (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4881: [!(tmp___1 != 0L)] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4883: return (ret); (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4888: __asm__ volatile ("1:\tmovq %2,%1\n2:\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .section __ex_table,\"a\"\n .balign 8 \n .quad 1b,3b\n .previous\n": "=r" (ret), "=r" (*((u64 *)dst + 8U)): "m" (*((struct __large_struct *)src + 8U)), "i" (8), "0" (ret)); (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 4893: switch (size) { case 1U: #line 35 __asm__ volatile ("1:\tmovb %2,%b1\n2:\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorb %b1,%b1\n\tjmp 2b\n.previous\n .section __ex_table,\"a\"\n .balign 8 \n .quad 1b,3b\n .previous\n": "=r" (ret), "=q" (*((u8 *)dst)): "m" (*((struct __large_struct *)src)), "i" (1), "0" (ret)); #line 37 return (ret); case 2U: #line 38 __asm__ volatile ("1:\tmovw %2,%w1\n2:\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorw %w1,%w1\n\tjmp 2b\n.previous\n .section __ex_table,\"a\"\n .balign 8 \n .quad 1b,3b\n .previous\n": "=r" (ret), "=r" (*((u16 *)dst)): "m" (*((struct __large_struct *)src)), "i" (2), "0" (ret)); #line 40 return (ret); case 4U: #line 41 __asm__ volatile ("1:\tmovl %2,%k1\n2:\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorl %k1,%k1\n\tjmp 2b\n.previous\n .section __ex_table,\"a\"\n .balign 8 \n .quad 1b,3b\n .previous\n": "=r" (ret), "=r" (*((u32 *)dst)): "m" (*((struct __large_struct *)src)), "i" (4), "0" (ret)); #line 43 return (ret); case 8U: #line 44 __asm__ volatile ("1:\tmovq %2,%1\n2:\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .section __ex_table,\"a\"\n .balign 8 \n .quad 1b,3b\n .previous\n": "=r" (ret), "=r" (*((u64 *)dst)): "m" (*((struct __large_struct *)src)), "i" (8), "0" (ret)); #line 46 return (ret); case 10U: #line 48 __asm__ volatile ("1:\tmovq %2,%1\n2:\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .section __ex_table,\"a\"\n .balign 8 \n .quad 1b,3b\n .previous\n": "=r" (ret), "=r" (*((u64 *)dst)): "m" (*((struct __large_struct *)src)), "i" (16), "0" (ret)); #line 50 tmp___0 = __builtin_expect(ret != 0, 0L); #line 50 if (tmp___0 != 0L) { #line 51 return (ret); } else { } #line 52 __asm__ volatile ("1:\tmovw %2,%w1\n2:\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorw %w1,%w1\n\tjmp 2b\n.previous\n .section __ex_table,\"a\"\n .balign 8 \n .quad 1b,3b\n .previous\n": "=r" (ret), "=r" (*((u16 *)dst + 8U)): "m" (*((struct __large_struct *)src + 8U)), "i" (2), "0" (ret)); #line 55 return (ret); case 16U: #line 57 __asm__ volatile ("1:\tmovq %2,%1\n2:\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .section __ex_table,\"a\"\n .balign 8 \n .quad 1b,3b\n .previous\n": "=r" (ret), "=r" (*((u64 *)dst)): "m" (*((struct __large_struct *)src)), "i" (16), "0" (ret)); #line 59 tmp___1 = __builtin_expect(ret != 0, 0L); #line 59 if (tmp___1 != 0L) { #line 60 return (ret); } else { } #line 61 __asm__ volatile ("1:\tmovq %2,%1\n2:\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .section __ex_table,\"a\"\n .balign 8 \n .quad 1b,3b\n .previous\n": "=r" (ret), "=r" (*((u64 *)dst + 8U)): "m" (*((struct __large_struct *)src + 8U)), "i" (8), "0" (ret)); #line 64 return (ret); default: #line 66 tmp___2 = copy_user_generic(dst, src, size); #line 66 return ((int )tmp___2); } (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 5476: Goto: ldv_23759 (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 5548: Label ldv_23759 is not reachable. (CFAFunctionBuilder.leave, INFO) Inline assembler ignored, analysis is probably unsound! (CFABuilder.leave, WARNING) Function pointer *fn with type drm_ioctl_compat_t * is called in line 17392, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Analyzing with the following global conditions: timeout (walltime): 900 s (GlobalConditionsCPA., INFO) Starting analysis ... (CPAchecker.runAlgorithm, INFO) Stopping analysis ... (CPAchecker.runAlgorithm, INFO) ExplicitCPA statistics ---------------------- Max. number of variables: 1 Max. number of globals variables: 0 Avg. number of variables: 8.0E-4 Avg. number of global variables: 0.0 AutomatonAnalysis (SVCOMP) statistics ------------------------------------- Number of states: 1 Total time for successor computation: 0.008s OmniscientCompositePrecisionAdjustment Stats statistics ------------------------------------------------------- Total time: 0.390s Total time for composite: 0.012s Total time for abstraction: 0.351s Total time for reached set: 0.001s Total time for path: 0.001s abstractions: 1408 CPA algorithm statistics ------------------------ Number of iterations: 1198 Max size of waitlist: 13 Average size of waitlist: 7 Number of computed successors: 1408 Max successors for one state: 2 Number of times merged: 0 Number of times stopped: 211 Number of times breaked: 0 Total time for CPA algorithm: 0.610s (Max: 0.610s) Time for choose from waitlist: 0.004s Time for precision adjustment: 0.392s Time for transfer relation: 0.161s Time for stop operator: 0.012s Time for adding to reached set: 0.016s Explicit Interpolation-Based Refiner statistics ----------------------------------------------- number of explicit refinements: 0 number of successful explicit refinements: 0 number of explicit interpolations: 0 max. time for singe interpolation: 0.000s total time for interpolation: 0.000s CEGAR algorithm statistics -------------------------- Number of refinements: 0 Counterexample-Check Algorithm statistics ----------------------------------------- Number of counterexample checks: 0 CPAchecker general statistics ----------------------------- Size of reached set: 1198 Number of locations: 656 Avg states per loc.: 1 Max states per loc.: 84 (at node N129) Number of partitions: 1198 Avg size of partitions: 1 Max size of partitions: 1 Number of target states: 0 Number of program locations: 4954 Number of functions: 217 Number of loops: 86 Time for analysis setup: 3.040s Time for loading CPAs: 0.152s Time for loading C parser: 0.221s Time for CFA construction: 2.286s Time for parsing C file: 0.828s Time for AST to CFA: 0.910s Time for CFA sanity check: 0.000s Time for post-processing: 0.432s Time for Analysis: 0.610s CPU time for analysis: 1.440s Total time for CPAchecker: 3.653s Total CPU time for CPAchecker: 5.800s Time for Garbage Collector: 0.051s (in 1 runs) Garbage Collector(s) used: PS MarkSweep, PS Scavenge Used heap memory: 124MB max ( 70MB avg, 148MB peak) Used non-heap memory: 17MB max ( 14MB avg, 17MB peak) Used in PS Old Gen pool: 2MB max ( 0MB avg, 2MB peak) Allocated heap memory: 480MB max ( 480MB avg) Allocated non-heap memory: 23MB max ( 23MB avg) Total process virtual memory: 11934MB max ( 11921MB avg) Verification result: SAFE. No error path found by chosen configuration. More details about the verification run can be found in the directory "./output".