scripts/cpa.sh -heap 10000M -setprop specification=/home/stahlbau/benchmarking/bench_regression_ea_safe_inproc/LDVErrorLabel.spc -explicitAnalysis -setprop analysis.summaryEdges=true -setprop cpa.callstack.skipRecursion=true -disable-java-assertions -noout -setprop analysis.entryFunction=ldv_main0_sequence_infinite_withcheck_stateful -setprop cpa.explicit.initialPrecisionFile=/home/stahlbau/benchmarking/bench_regression_ea_safe_inproc/precisions/ea.regression.32_7a.media--video--cx231xx--cx231xx-dvb.ko.prec -setprop cpa.explicit.precisionFile=/home/stahlbau/benchmarking/bench_regression_ea_safe_inproc/precisions/ea.regression.32_7a.media--video--cx231xx--cx231xx-dvb.ko.prec -64 -stats /home/stahlbau/benchmarking/bench_regression_ea_safe_inproc/programs/drivers--media--video--cx231xx--cx231xx-dvb.ko/012.7572f9c.32_7a.cil_safe.i -------------------------------------------------------------------------------- Running JavaVM with special heap size: 10000M CPAchecker 1.2-svn started (CPAchecker.run, INFO) Dead code detected at line 7666: [size > 8192UL] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 7666: [!(size > 8192UL)] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 7668: tmp = kmalloc_large(size, flags); (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 7675: [(flags & 1U) == 0U] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 7675: [!((flags & 1U) == 0U)] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 7677: tmp___0 = kmalloc_slab(size); (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 7681: [!(((unsigned long)s) == ((unsigned long)((struct kmem_cache *)0)))] (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 7683: return (16); (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 7688: ret = kmem_cache_alloc_notrace(s, flags); (CFACreationUtils.addEdgeToCFA, INFO) Dead code detected at line 9569: return (ldv_func_res); (CFACreationUtils.addEdgeToCFA, INFO) Function pointer *((void (*)(void *, unsigned long, const void *, size_t , size_t , gfp_t ))it_func) with type void (*)(void *, unsigned long int, const void *, size_t , size_t , gfp_t ) is called in line 7403, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a with type struct dvb_frontend * (*)(const struct s5h1432_config *, struct i2c_adapter *) is called in line 8711, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___1 with type struct dvb_frontend * (*)(const struct s5h1411_config *, struct i2c_adapter *) is called in line 8824, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___3 with type struct dvb_frontend * (*)(const struct s5h1432_config *, struct i2c_adapter *) is called in line 8937, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___5 with type struct dvb_frontend * (*)(const struct s5h1411_config *, struct i2c_adapter *) is called in line 9052, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___7 with type struct dvb_frontend * (*)(const struct lgdt3305_config *, struct i2c_adapter *) is called in line 9171, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___9 with type struct dvb_frontend * (*)(const struct mb86a20s_config *, struct i2c_adapter *) is called in line 9281, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___0 with type struct dvb_frontend * (*)(struct dvb_frontend *, struct i2c_adapter *, const struct xc5000_config *) is called in line 8770, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___2 with type struct dvb_frontend * (*)(struct dvb_frontend *, struct i2c_adapter *, const struct xc5000_config *) is called in line 8884, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___4 with type struct dvb_frontend * (*)(struct dvb_frontend *, u8 , struct i2c_adapter *, struct tda18271_config *) is called in line 8999, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___6 with type struct dvb_frontend * (*)(struct dvb_frontend *, u8 , struct i2c_adapter *, struct tda18271_config *) is called in line 9114, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___8 with type struct dvb_frontend * (*)(struct dvb_frontend *, u8 , struct i2c_adapter *, struct tda18271_config *) is called in line 9233, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Function pointer *__a___10 with type struct dvb_frontend * (*)(struct dvb_frontend *, u8 , struct i2c_adapter *, struct tda18271_config *) is called in line 9342, but no possible target functions were found. (CFunctionPointerResolver.replaceFunctionPointerCall, WARNING) Analyzing with the following global conditions: timeout (walltime): 900 s (GlobalConditionsCPA., INFO) Starting analysis ... (CPAchecker.runAlgorithm, INFO) Ignoring call via function pointer dvb_init::__a___9 for which no suitable target was found in line 9281: tmp___67 = (*__a___9)(&pv_mb86a20s_config, &(((dev->i2c_bus)[(int)(dev->board.demod_i2c_master)]).i2c_adap)); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___10 for which no suitable target was found in line 9342: tmp___73 = (*__a___10)(dev->dvb->frontend, 96, &(((dev->i2c_bus)[(int)(dev->board.tuner_i2c_master)]).i2c_adap), &pv_tda18271_config); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___7 for which no suitable target was found in line 9171: tmp___54 = (*__a___7)((const struct lgdt3305_config *)(&hcw_lgdt3305_config), &(((dev->i2c_bus)[(int)(dev->board.tuner_i2c_master)]).i2c_adap)); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___8 for which no suitable target was found in line 9233: tmp___60 = (*__a___8)(dev->dvb->frontend, 96, &(((dev->i2c_bus)[(int)(dev->board.tuner_i2c_master)]).i2c_adap), &hcw_tda18271_config); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___5 for which no suitable target was found in line 9052: tmp___41 = (*__a___5)((const struct s5h1411_config *)(&tda18271_s5h1411_config), &(((dev->i2c_bus)[(int)(dev->board.demod_i2c_master)]).i2c_adap)); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___6 for which no suitable target was found in line 9114: tmp___47 = (*__a___6)(dev->dvb->frontend, 96, &(((dev->i2c_bus)[(int)(dev->board.tuner_i2c_master)]).i2c_adap), &cnxt_rde253s_tunerconfig); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___3 for which no suitable target was found in line 8937: tmp___29 = (*__a___3)((const struct s5h1432_config *)(&dvico_s5h1432_config), &(((dev->i2c_bus)[(int)(dev->board.demod_i2c_master)]).i2c_adap)); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___4 for which no suitable target was found in line 8999: tmp___35 = (*__a___4)(dev->dvb->frontend, 96, &(((dev->i2c_bus)[(int)(dev->board.tuner_i2c_master)]).i2c_adap), &cnxt_rde253s_tunerconfig); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___1 for which no suitable target was found in line 8824: tmp___17 = (*__a___1)((const struct s5h1411_config *)(&xc5000_s5h1411_config), &(((dev->i2c_bus)[(int)(dev->board.demod_i2c_master)]).i2c_adap)); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___2 for which no suitable target was found in line 8884: tmp___23 = (*__a___2)(dev->dvb->frontend, &(((dev->i2c_bus)[(int)(dev->board.tuner_i2c_master)]).i2c_adap), (const struct xc5000_config *)(&cnxt_rdu250_tunerconfig)); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a for which no suitable target was found in line 8711: tmp___5 = (*__a)((const struct s5h1432_config *)(&dvico_s5h1432_config), &(((dev->i2c_bus)[(int)(dev->board.demod_i2c_master)]).i2c_adap)); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Ignoring call via function pointer dvb_init::__a___0 for which no suitable target was found in line 8770: tmp___11 = (*__a___0)(dev->dvb->frontend, &(((dev->i2c_bus)[(int)(dev->board.tuner_i2c_master)]).i2c_adap), (const struct xc5000_config *)(&cnxt_rde250_tunerconfig)); (FunctionPointerTransferRelation.getAbstractSuccessorForEdge, WARNING) Stopping analysis ... (CPAchecker.runAlgorithm, INFO) ExplicitCPA statistics ---------------------- Max. number of variables: 6 Max. number of globals variables: 0 Avg. number of variables: 0.0046 Avg. number of global variables: 0.0 AutomatonAnalysis (SVCOMP) statistics ------------------------------------- Number of states: 1 Total time for successor computation: 0.160s OmniscientCompositePrecisionAdjustment Stats statistics ------------------------------------------------------- Total time: 0.308s Total time for composite: 0.013s Total time for abstraction: 0.264s Total time for reached set: 0.003s Total time for path: 0.004s abstractions: 1696 CPA algorithm statistics ------------------------ Number of iterations: 1290 Max size of waitlist: 31 Average size of waitlist: 17 Number of computed successors: 1696 Max successors for one state: 2 Number of times merged: 0 Number of times stopped: 407 Number of times breaked: 0 Total time for CPA algorithm: 0.832s (Max: 0.832s) Time for choose from waitlist: 0.009s Time for precision adjustment: 0.336s Time for transfer relation: 0.432s Time for stop operator: 0.017s Time for adding to reached set: 0.009s Explicit Interpolation-Based Refiner statistics ----------------------------------------------- number of explicit refinements: 0 number of successful explicit refinements: 0 number of explicit interpolations: 0 max. time for singe interpolation: 0.000s total time for interpolation: 0.000s CEGAR algorithm statistics -------------------------- Number of refinements: 0 Counterexample-Check Algorithm statistics ----------------------------------------- Number of counterexample checks: 0 CPAchecker general statistics ----------------------------- Size of reached set: 1290 Number of locations: 464 Avg states per loc.: 2 Max states per loc.: 21 (at node N245) Number of partitions: 1290 Avg size of partitions: 1 Max size of partitions: 1 Number of target states: 0 Number of program locations: 1293 Number of functions: 89 Number of loops: 5 Time for analysis setup: 6.694s Time for loading CPAs: 1.624s Time for loading C parser: 0.303s Time for CFA construction: 2.660s Time for parsing C file: 0.837s Time for AST to CFA: 1.316s Time for CFA sanity check: 0.000s Time for post-processing: 0.290s Time for Analysis: 0.832s CPU time for analysis: 0.650s Total time for CPAchecker: 7.614s Total CPU time for CPAchecker: 3.620s Time for Garbage Collector: 0.000s (in 0 runs) Garbage Collector(s) used: PS MarkSweep, PS Scavenge Used heap memory: 94MB max ( 66MB avg, 107MB peak) Used non-heap memory: 16MB max ( 13MB avg, 16MB peak) Used in PS Old Gen pool: 0MB max ( 0MB avg, 0MB peak) Allocated heap memory: 480MB max ( 480MB avg) Allocated non-heap memory: 23MB max ( 23MB avg) Total process virtual memory: 11934MB max ( 11922MB avg) Verification result: SAFE. No error path found by chosen configuration. More details about the verification run can be found in the directory "./output".