f2.bpl(21,4): Error BP5001: This assertion might not hold. Execution trace: f2.bpl(17,4): anon0 Boogie program verifier finished with 0 verified, 1 error