scripts/cpa.sh -heap 10000M -setprop specification=/home/stahlbau/benchmarking/bench_regression_ea_safe_inproc/LDVErrorLabel.spc -explicitAnalysis -setprop analysis.summaryEdges=true -setprop cpa.callstack.skipRecursion=true -disable-java-assertions -noout -setprop analysis.entryFunction=ldv_main0_sequence_infinite_withcheck_stateful -64 -stats /home/stahlbau/benchmarking/bench_regression_ea_safe_inproc/programs/drivers--media--video--cx231xx--cx231xx-dvb.ko/011.ede676c.39_7a.cil_safe.i -------------------------------------------------------------------------------- Running JavaVM with special heap size: 10000M CPAchecker 1.2-svn started (CPAchecker.run, INFO) Dead code detected at line 7613: [size > 8192UL] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 7613: [!(size > 8192UL)] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 7615: tmp = kmalloc_large(size, flags); (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 7622: [(flags & 1U) == 0U] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 7622: [!((flags & 1U) == 0U)] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 7624: tmp___0 = kmalloc_slab(size); (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 7628: [!(((unsigned long)s) == ((unsigned long)((struct kmem_cache *)0)))] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 7630: return (16); (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 7635: ret = kmem_cache_alloc_notrace(s, flags); (CFACreationUtils.addEdgeToCFA, INFO) Function pointer *((void (*)(void *, unsigned long, const void *, size_t , size_t , gfp_t ))it_func) with type void (*)(void *, unsigned long int, const void *, size_t , size_t , gfp_t ) is called in line 7350, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a with type struct dvb_frontend * (*)(const struct s5h1432_config *, struct i2c_adapter *) is called in line 8658, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___1 with type struct dvb_frontend * (*)(const struct s5h1411_config *, struct i2c_adapter *) is called in line 8771, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___3 with type struct dvb_frontend * (*)(const struct s5h1432_config *, struct i2c_adapter *) is called in line 8884, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___5 with type struct dvb_frontend * (*)(const struct s5h1411_config *, struct i2c_adapter *) is called in line 8999, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___7 with type struct dvb_frontend * (*)(const struct lgdt3305_config *, struct i2c_adapter *) is called in line 9118, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___9 with type struct dvb_frontend * (*)(const struct mb86a20s_config *, struct i2c_adapter *) is called in line 9228, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___0 with type struct dvb_frontend * (*)(struct dvb_frontend *, struct i2c_adapter *, const struct xc5000_config *) is called in line 8717, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___2 with type struct dvb_frontend * (*)(struct dvb_frontend *, struct i2c_adapter *, const struct xc5000_config *) is called in line 8831, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___4 with type struct dvb_frontend * (*)(struct dvb_frontend *, u8 , struct i2c_adapter *, struct tda18271_config *) is called in line 8946, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___6 with type struct dvb_frontend * (*)(struct dvb_frontend *, u8 , struct i2c_adapter *, struct tda18271_config *) is called in line 9061, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___8 with type struct dvb_frontend * (*)(struct dvb_frontend *, u8 , struct i2c_adapter *, struct tda18271_config *) is called in line 9180, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___10 with type struct dvb_frontend * (*)(struct dvb_frontend *, u8 , struct i2c_adapter *, struct tda18271_config *) is called in line 9289, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Analyzing with the following global conditions: timeout (walltime): 900 s (GlobalConditionsCPA., INFO) Starting analysis ... (CPAchecker.runAlgorithm, INFO) Ignoring call via function pointer dvb_init::__a___9 for which no suitable target was found in line 9228: tmp___67 = (*__a___9)(&pv_mb86a20s_config, &(((dev->i2c_bus)[(int)(dev->board.demod_i2c_master)]).i2c_adap)); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___10 for which no suitable target was found in line 9289: tmp___73 = (*__a___10)(dev->dvb->frontend, 96, &(((dev->i2c_bus)[(int)(dev->board.tuner_i2c_master)]).i2c_adap), &pv_tda18271_config); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___7 for which no suitable target was found in line 9118: tmp___54 = (*__a___7)((const struct lgdt3305_config *)(&hcw_lgdt3305_config), &(((dev->i2c_bus)[(int)(dev->board.tuner_i2c_master)]).i2c_adap)); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___8 for which no suitable target was found in line 9180: tmp___60 = (*__a___8)(dev->dvb->frontend, 96, &(((dev->i2c_bus)[(int)(dev->board.tuner_i2c_master)]).i2c_adap), &hcw_tda18271_config); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___5 for which no suitable target was found in line 8999: tmp___41 = (*__a___5)((const struct s5h1411_config *)(&tda18271_s5h1411_config), &(((dev->i2c_bus)[(int)(dev->board.demod_i2c_master)]).i2c_adap)); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___6 for which no suitable target was found in line 9061: tmp___47 = (*__a___6)(dev->dvb->frontend, 96, &(((dev->i2c_bus)[(int)(dev->board.tuner_i2c_master)]).i2c_adap), &cnxt_rde253s_tunerconfig); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___3 for which no suitable target was found in line 8884: tmp___29 = (*__a___3)((const struct s5h1432_config *)(&dvico_s5h1432_config), &(((dev->i2c_bus)[(int)(dev->board.demod_i2c_master)]).i2c_adap)); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___4 for which no suitable target was found in line 8946: tmp___35 = (*__a___4)(dev->dvb->frontend, 96, &(((dev->i2c_bus)[(int)(dev->board.tuner_i2c_master)]).i2c_adap), &cnxt_rde253s_tunerconfig); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___1 for which no suitable target was found in line 8771: tmp___17 = (*__a___1)((const struct s5h1411_config *)(&xc5000_s5h1411_config), &(((dev->i2c_bus)[(int)(dev->board.demod_i2c_master)]).i2c_adap)); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___2 for which no suitable target was found in line 8831: tmp___23 = (*__a___2)(dev->dvb->frontend, &(((dev->i2c_bus)[(int)(dev->board.tuner_i2c_master)]).i2c_adap), (const struct xc5000_config *)(&cnxt_rdu250_tunerconfig)); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a for which no suitable target was found in line 8658: tmp___5 = (*__a)((const struct s5h1432_config *)(&dvico_s5h1432_config), &(((dev->i2c_bus)[(int)(dev->board.demod_i2c_master)]).i2c_adap)); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___0 for which no suitable target was found in line 8717: tmp___11 = (*__a___0)(dev->dvb->frontend, &(((dev->i2c_bus)[(int)(dev->board.tuner_i2c_master)]).i2c_adap), (const struct xc5000_config *)(&cnxt_rde250_tunerconfig)); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Stopping analysis ... (CPAchecker.runAlgorithm, INFO) ExplicitCPA statistics ---------------------- Max. number of variables: 10 Max. number of globals variables: 0 Avg. number of variables: 0.0078 Avg. number of global variables: 0.0 AutomatonAnalysis (SVCOMP) statistics ------------------------------------- Number of states: 1 Total time for successor computation: 0.062s OmniscientCompositePrecisionAdjustment Stats statistics ------------------------------------------------------- Total time: 0.297s Total time for composite: 0.042s Total time for abstraction: 0.195s Total time for reached set: 0.008s Total time for path: 0.010s abstractions: 18382 CPA algorithm statistics ------------------------ Number of iterations: 13896 Max size of waitlist: 31 Average size of waitlist: 17 Number of computed successors: 18382 Max successors for one state: 2 Number of times merged: 0 Number of times stopped: 4477 Number of times breaked: 10 Total time for CPA algorithm: 1.095s (Max: 0.293s) Time for choose from waitlist: 0.026s Time for precision adjustment: 0.320s Time for transfer relation: 0.511s Time for stop operator: 0.067s Time for adding to reached set: 0.052s Explicit Interpolation-Based Refiner statistics ----------------------------------------------- number of explicit refinements: 10 number of successful explicit refinements: 10 number of explicit interpolations: 465 max. time for singe interpolation: 0.017s total time for interpolation: 0.080s CEGAR algorithm statistics -------------------------- Number of refinements: 10 Number of successful refinements: 10 Number of failed refinements: 0 Max. size of reached set before ref.: 1275 Max. size of reached set after ref.: 3 Avg. size of reached set before ref.: 1266.00 Avg. size of reached set after ref.: 3.00 Total time for CEGAR algorithm: 1.681s Time for refinements: 0.586s Average time for refinement: 0.058s Max time for refinement: 0.217s Counterexample-Check Algorithm statistics ----------------------------------------- Number of counterexample checks: 0 CPAchecker general statistics ----------------------------- Size of reached set: 1276 Number of locations: 450 Avg states per loc.: 2 Max states per loc.: 21 (at node N262) Number of partitions: 1276 Avg size of partitions: 1 Max size of partitions: 1 Number of target states: 0 Number of program locations: 1536 Number of functions: 114 Number of loops: 5 Time for analysis setup: 3.409s Time for loading CPAs: 0.271s Time for loading C parser: 0.239s Time for CFA construction: 2.266s Time for parsing C file: 0.711s Time for AST to CFA: 0.942s Time for CFA sanity check: 0.000s Time for post-processing: 0.565s Time for Analysis: 1.681s CPU time for analysis: 3.560s Total time for CPAchecker: 5.093s Total CPU time for CPAchecker: 6.500s Time for Garbage Collector: 0.046s (in 3 runs) Garbage Collector(s) used: PS MarkSweep, PS Scavenge Used heap memory: 139MB max ( 66MB avg, 142MB peak) Used non-heap memory: 17MB max ( 14MB avg, 18MB peak) Used in PS Old Gen pool: 0MB max ( 0MB avg, 0MB peak) Allocated heap memory: 480MB max ( 480MB avg) Allocated non-heap memory: 23MB max ( 23MB avg) Total process virtual memory: 11934MB max ( 11924MB avg) Verification result: SAFE. No error path found by chosen configuration. More details about the verification run can be found in the directory "./output".