1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
|
FunctionSpecifications.dfy(29,9): Error BP5003: A postcondition might not hold on this return path.
FunctionSpecifications.dfy(31,12): Related location: This is the postcondition that might not hold.
Execution trace:
(0,0): anon0
(0,0): anon10_Else
(0,0): anon11_Else
(0,0): anon12_Then
(0,0): anon13_Else
(0,0): anon9
FunctionSpecifications.dfy(38,9): Error BP5003: A postcondition might not hold on this return path.
FunctionSpecifications.dfy(40,23): Related location: This is the postcondition that might not hold.
Execution trace:
(0,0): anon0
(0,0): anon15_Else
(0,0): anon18_Else
(0,0): anon19_Then
(0,0): anon14
FunctionSpecifications.dfy(53,10): Error: cannot prove termination; try supplying a decreases clause
Execution trace:
(0,0): anon0
(0,0): anon11_Then
(0,0): anon5
FunctionSpecifications.dfy(59,9): Error BP5003: A postcondition might not hold on this return path.
FunctionSpecifications.dfy(60,21): Related location: This is the postcondition that might not hold.
Execution trace:
(0,0): anon0
(0,0): anon7_Else
FunctionSpecifications.dfy(108,22): Error: assertion violation
Execution trace:
(0,0): anon0
FunctionSpecifications.dfy(111,22): Error: assertion violation
Execution trace:
(0,0): anon0
FunctionSpecifications.dfy(126,26): Error: assertion violation
Execution trace:
(0,0): anon0
(0,0): anon3_Then
FunctionSpecifications.dfy(130,26): Error: assertion violation
Execution trace:
(0,0): anon0
(0,0): anon3_Else
FunctionSpecifications.dfy(158,2): Error: cannot prove termination; try supplying a decreases clause
Execution trace:
(0,0): anon0
(0,0): anon4_Else
FunctionSpecifications.dfy(167,10): Error: cannot prove termination; try supplying a decreases clause
Execution trace:
(0,0): anon0
(0,0): anon4_Else
FunctionSpecifications.dfy(135,19): Error BP5003: A postcondition might not hold on this return path.
FunctionSpecifications.dfy(137,28): Related location: This is the postcondition that might not hold.
Execution trace:
(0,0): anon0
(0,0): anon4_Else
FunctionSpecifications.dfy(146,2): Error: failure to decrease termination measure
Execution trace:
(0,0): anon0
(0,0): anon4_Else
FunctionSpecifications.dfy(153,2): Error: failure to decrease termination measure
Execution trace:
(0,0): anon0
(0,0): anon4_Else
FunctionSpecifications.dfy(174,2): Error: cannot prove termination; try supplying a decreases clause
Execution trace:
(0,0): anon0
(0,0): anon4_Else
FunctionSpecifications.dfy(171,19): Error: cannot prove termination; try supplying a decreases clause
Execution trace:
(0,0): anon0
Dafny program verifier finished with 17 verified, 15 errors
|
