why3session.xml 176 KB
Newer Older
1 2 3 4 5 6 7 8 9
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE why3session PUBLIC "-//Why3//proof session v5//EN"
"http://why3.lri.fr/why3session.dtd">
<why3session shape_version="4">
<prover id="0" name="Eprover" version="1.9.1-001" timelimit="5" steplimit="0" memlimit="1000"/>
<prover id="1" name="CVC3" version="2.4.1" timelimit="5" steplimit="0" memlimit="1000"/>
<prover id="2" name="CVC4" version="1.4" timelimit="5" steplimit="0" memlimit="1000"/>
<prover id="3" name="Alt-Ergo" version="1.01" timelimit="5" steplimit="0" memlimit="1000"/>
<prover id="4" name="Z3" version="4.4.1" timelimit="5" steplimit="0" memlimit="1000"/>
10
<prover id="5" name="CVC4" version="1.4" alternative="noBV" timelimit="5" steplimit="0" memlimit="1000"/>
11
<prover id="6" name="Vampire" version="0.6" timelimit="5" steplimit="0" memlimit="1000"/>
12
<file name="../mp2.mlw" expanded="true">
13
<theory name="M" sum="0603561430b9544178c14214fd469819" expanded="true">
14
 <goal name="VC incr" expl="VC for incr">
15
 <proof prover="3"><result status="valid" time="0.02" steps="69"/></proof>
16 17
 </goal>
 <goal name="VC get_ofs" expl="VC for get_ofs">
18
 <proof prover="3"><result status="valid" time="0.02" steps="78"/></proof>
19 20
 </goal>
 <goal name="VC set_ofs" expl="VC for set_ofs">
21
 <proof prover="3"><result status="valid" time="0.04" steps="81"/></proof>
22
 </goal>
23
 <goal name="VC valid_itv_to_shift" expl="VC for valid_itv_to_shift">
24
 <proof prover="3"><result status="valid" time="0.04" steps="77"/></proof>
25
 </goal>
26
</theory>
27
<theory name="N" sum="35626f1aeac1eb590f4fe0c42e90ce44" expanded="true">
28 29 30 31 32 33
 <goal name="limb_max_bound">
 <proof prover="3"><result status="valid" time="0.02" steps="69"/></proof>
 </goal>
 <goal name="VC value_sub" expl="VC for value_sub">
 <proof prover="3"><result status="valid" time="0.02" steps="71"/></proof>
 </goal>
34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62
 <goal name="VC from_limb" expl="VC for from_limb">
 <transf name="split_goal_wp">
  <goal name="VC from_limb.1" expl="1. integer overflow">
  <proof prover="3"><result status="valid" time="0.03" steps="71"/></proof>
  </goal>
  <goal name="VC from_limb.2" expl="2. precondition">
  <transf name="split_goal_wp">
   <goal name="VC from_limb.2.1" expl="1. VC for from_limb">
   <proof prover="3"><result status="valid" time="0.03" steps="75"/></proof>
   </goal>
   <goal name="VC from_limb.2.2" expl="2. VC for from_limb">
   <proof prover="3"><result status="valid" time="0.04" steps="75"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="VC from_limb.3" expl="3. postcondition">
  <proof prover="3"><result status="valid" time="0.03" steps="82"/></proof>
  </goal>
  <goal name="VC from_limb.4" expl="4. postcondition">
  <proof prover="3"><result status="valid" time="0.07" steps="116"/></proof>
  </goal>
  <goal name="VC from_limb.5" expl="5. postcondition">
  <proof prover="3"><result status="valid" time="0.02" steps="74"/></proof>
  </goal>
  <goal name="VC from_limb.6" expl="6. postcondition">
  <proof prover="3"><result status="valid" time="0.02" steps="74"/></proof>
  </goal>
 </transf>
 </goal>
63 64 65 66 67 68
 <goal name="VC map_eq_shift" expl="VC for map_eq_shift">
 <proof prover="3"><result status="valid" time="0.02" steps="74"/></proof>
 </goal>
 <goal name="VC map_eq_shift_zero" expl="VC for map_eq_shift_zero">
 <transf name="split_goal_wp">
  <goal name="VC map_eq_shift_zero.1" expl="1. assertion">
69
  <proof prover="3"><result status="valid" time="0.02" steps="75"/></proof>
70 71
  </goal>
  <goal name="VC map_eq_shift_zero.2" expl="2. assertion">
72
  <proof prover="3"><result status="valid" time="0.03" steps="77"/></proof>
73 74
  </goal>
  <goal name="VC map_eq_shift_zero.3" expl="3. variant decrease">
75
  <proof prover="3"><result status="valid" time="0.04" steps="72"/></proof>
76 77
  </goal>
  <goal name="VC map_eq_shift_zero.4" expl="4. precondition">
78
  <proof prover="3"><result status="valid" time="5.95" steps="511"/></proof>
79
  </goal>
80 81
  <goal name="VC map_eq_shift_zero.5" expl="5. assertion">
  <proof prover="3"><result status="valid" time="0.02" steps="72"/></proof>
82
  </goal>
83
  <goal name="VC map_eq_shift_zero.6" expl="6. postcondition">
84
  <proof prover="3"><result status="valid" time="1.40" steps="492"/></proof>
85
  </goal>
86 87
  <goal name="VC map_eq_shift_zero.7" expl="7. postcondition">
  <proof prover="3"><result status="valid" time="0.03" steps="74"/></proof>
88 89 90
  </goal>
 </transf>
 </goal>
91 92 93
 <goal name="VC value_sub_frame" expl="VC for value_sub_frame">
 <proof prover="3"><result status="valid" time="0.09" steps="119"/></proof>
 </goal>
94 95 96
 <goal name="VC value_sub_frame_shift" expl="VC for value_sub_frame_shift">
 <transf name="split_goal_wp">
  <goal name="VC value_sub_frame_shift.1" expl="1. precondition">
97
  <proof prover="4"><result status="valid" time="0.01"/></proof>
98 99
  </goal>
  <goal name="VC value_sub_frame_shift.2" expl="2. precondition">
100
  <proof prover="4"><result status="valid" time="0.01"/></proof>
101 102
  </goal>
  <goal name="VC value_sub_frame_shift.3" expl="3. assertion">
103
  <proof prover="4"><result status="valid" time="0.01"/></proof>
104 105
  </goal>
  <goal name="VC value_sub_frame_shift.4" expl="4. variant decrease">
106
  <proof prover="4"><result status="valid" time="0.02"/></proof>
107 108
  </goal>
  <goal name="VC value_sub_frame_shift.5" expl="5. precondition">
109
  <proof prover="3"><result status="valid" time="0.68" steps="163"/></proof>
110 111
  </goal>
  <goal name="VC value_sub_frame_shift.6" expl="6. assertion">
112
  <proof prover="4"><result status="valid" time="0.01"/></proof>
113 114
  </goal>
  <goal name="VC value_sub_frame_shift.7" expl="7. postcondition">
115
  <proof prover="4"><result status="valid" time="0.03"/></proof>
116 117
  </goal>
  <goal name="VC value_sub_frame_shift.8" expl="8. postcondition">
118
  <proof prover="4"><result status="valid" time="0.02"/></proof>
119 120 121 122 123 124
  </goal>
 </transf>
 </goal>
 <goal name="VC value_sub_tail" expl="VC for value_sub_tail">
 <transf name="split_goal_wp">
  <goal name="VC value_sub_tail.1" expl="1. variant decrease">
125 126
  <proof prover="3"><result status="valid" time="0.03" steps="72"/></proof>
  <proof prover="4"><result status="valid" time="0.02"/></proof>
127 128
  </goal>
  <goal name="VC value_sub_tail.2" expl="2. precondition">
129 130
  <proof prover="3"><result status="valid" time="0.02" steps="72"/></proof>
  <proof prover="4"><result status="valid" time="0.02"/></proof>
131 132 133 134 135 136 137 138 139
  </goal>
  <goal name="VC value_sub_tail.3" expl="3. postcondition">
  <proof prover="3"><result status="valid" time="0.13" steps="118"/></proof>
  </goal>
 </transf>
 </goal>
 <goal name="VC value_sub_concat" expl="VC for value_sub_concat">
 <transf name="split_goal_wp">
  <goal name="VC value_sub_concat.1" expl="1. assertion">
140
  <proof prover="4"><result status="valid" time="0.01"/></proof>
141 142
  </goal>
  <goal name="VC value_sub_concat.2" expl="2. variant decrease">
143
  <proof prover="4"><result status="valid" time="0.03"/></proof>
144 145
  </goal>
  <goal name="VC value_sub_concat.3" expl="3. precondition">
146
  <proof prover="4"><result status="valid" time="0.02"/></proof>
147 148
  </goal>
  <goal name="VC value_sub_concat.4" expl="4. postcondition">
149
  <proof prover="1"><result status="valid" time="0.12"/></proof>
150 151 152
  </goal>
 </transf>
 </goal>
153 154 155 156 157 158 159 160 161 162
 <goal name="VC value_sub_head" expl="VC for value_sub_head">
 <transf name="split_goal_wp">
  <goal name="VC value_sub_head.1" expl="1. precondition">
  <proof prover="3"><result status="valid" time="0.04" steps="71"/></proof>
  </goal>
  <goal name="VC value_sub_head.2" expl="2. postcondition">
  <proof prover="3"><result status="valid" time="0.12" steps="81"/></proof>
  </goal>
 </transf>
 </goal>
163 164 165
 <goal name="VC value_sub_update" expl="VC for value_sub_update">
 <transf name="split_goal_wp">
  <goal name="VC value_sub_update.1" expl="1. assertion">
166
  <proof prover="4"><result status="valid" time="0.03"/></proof>
167 168
  </goal>
  <goal name="VC value_sub_update.2" expl="2. assertion">
169
  <proof prover="4"><result status="valid" time="0.03"/></proof>
170 171
  </goal>
  <goal name="VC value_sub_update.3" expl="3. precondition">
172
  <proof prover="4"><result status="valid" time="0.02"/></proof>
173 174
  </goal>
  <goal name="VC value_sub_update.4" expl="4. precondition">
175
  <proof prover="4"><result status="valid" time="0.02"/></proof>
176 177
  </goal>
  <goal name="VC value_sub_update.5" expl="5. postcondition">
178
  <proof prover="1"><result status="valid" time="0.05"/></proof>
179 180 181 182 183 184
  </goal>
 </transf>
 </goal>
 <goal name="VC value_zero" expl="VC for value_zero">
 <transf name="split_goal_wp">
  <goal name="VC value_zero.1" expl="1. variant decrease">
185
  <proof prover="4"><result status="valid" time="0.02"/></proof>
186 187
  </goal>
  <goal name="VC value_zero.2" expl="2. precondition">
188
  <proof prover="4"><result status="valid" time="0.02"/></proof>
189 190
  </goal>
  <goal name="VC value_zero.3" expl="3. postcondition">
191
  <proof prover="4"><result status="valid" time="0.02"/></proof>
192 193 194
  </goal>
 </transf>
 </goal>
195
 <goal name="VC value_sub_update_no_change" expl="VC for value_sub_update_no_change">
196
 <proof prover="4"><result status="valid" time="0.03"/></proof>
197 198
 </goal>
 <goal name="VC value_sub_shift_no_change" expl="VC for value_sub_shift_no_change">
199
 <proof prover="4"><result status="valid" time="0.03"/></proof>
200
 </goal>
201
 <goal name="VC value_sub_lower_bound" expl="VC for value_sub_lower_bound">
202
 <proof prover="4"><result status="valid" time="0.04"/></proof>
203 204 205 206
 </goal>
 <goal name="VC value_sub_upper_bound" expl="VC for value_sub_upper_bound">
 <transf name="split_goal_wp">
  <goal name="VC value_sub_upper_bound.1" expl="1. assertion">
207
  <proof prover="1"><result status="valid" time="0.88"/></proof>
208 209
  </goal>
  <goal name="VC value_sub_upper_bound.2" expl="2. variant decrease">
210
  <proof prover="4"><result status="valid" time="0.02"/></proof>
211 212
  </goal>
  <goal name="VC value_sub_upper_bound.3" expl="3. precondition">
213
  <proof prover="4"><result status="valid" time="0.04"/></proof>
214 215
  </goal>
  <goal name="VC value_sub_upper_bound.4" expl="4. postcondition">
216
  <proof prover="2"><result status="valid" time="0.07"/></proof>
217 218 219 220 221 222
  </goal>
 </transf>
 </goal>
 <goal name="VC value_sub_lower_bound_tight" expl="VC for value_sub_lower_bound_tight">
 <transf name="split_goal_wp">
  <goal name="VC value_sub_lower_bound_tight.1" expl="1. assertion">
223
  <proof prover="4"><result status="valid" time="0.03"/></proof>
224 225
  </goal>
  <goal name="VC value_sub_lower_bound_tight.2" expl="2. postcondition">
226
  <proof prover="4"><result status="valid" time="0.02"/></proof>
227 228 229 230 231 232
  </goal>
 </transf>
 </goal>
 <goal name="VC value_sub_upper_bound_tight" expl="VC for value_sub_upper_bound_tight">
 <transf name="split_goal_wp">
  <goal name="VC value_sub_upper_bound_tight.1" expl="1. precondition">
233
  <proof prover="4"><result status="valid" time="0.02"/></proof>
234 235
  </goal>
  <goal name="VC value_sub_upper_bound_tight.2" expl="2. postcondition">
236
  <proof prover="4"><result status="valid" time="0.03"/></proof>
237 238 239
  </goal>
 </transf>
 </goal>
240 241 242
 <goal name="VC prod_compat_strict_r" expl="VC for prod_compat_strict_r">
 <proof prover="1"><result status="valid" time="0.05"/></proof>
 </goal>
243 244 245
 <goal name="VC compare_same_size" expl="VC for compare_same_size">
 <transf name="split_goal_wp">
  <goal name="VC compare_same_size.1" expl="1. integer overflow">
246
  <proof prover="4"><result status="valid" time="0.02"/></proof>
247 248
  </goal>
  <goal name="VC compare_same_size.2" expl="2. integer overflow">
249
  <proof prover="4"><result status="valid" time="0.04"/></proof>
250 251
  </goal>
  <goal name="VC compare_same_size.3" expl="3. loop invariant init">
252
  <proof prover="4"><result status="valid" time="0.02"/></proof>
253 254
  </goal>
  <goal name="VC compare_same_size.4" expl="4. loop invariant init">
255
  <proof prover="4"><result status="valid" time="0.01"/></proof>
256
  </goal>
257
  <goal name="VC compare_same_size.5" expl="5. integer overflow">
258
  <proof prover="4"><result status="valid" time="0.03"/></proof>
259
  </goal>
260
  <goal name="VC compare_same_size.6" expl="6. assertion">
261
  <proof prover="3"><result status="valid" time="0.09" steps="104"/></proof>
262
  </goal>
263
  <goal name="VC compare_same_size.7" expl="7. precondition">
264
  <proof prover="3"><result status="valid" time="0.03" steps="93"/></proof>
265
  </goal>
266
  <goal name="VC compare_same_size.8" expl="8. integer overflow">
267
  <proof prover="4"><result status="valid" time="0.02"/></proof>
268
  </goal>
269
  <goal name="VC compare_same_size.9" expl="9. integer overflow">
270
  <proof prover="4"><result status="valid" time="0.04"/></proof>
271
  </goal>
272 273
  <goal name="VC compare_same_size.10" expl="10. assertion">
  <proof prover="3"><result status="valid" time="0.04" steps="82"/></proof>
274 275
  </goal>
  <goal name="VC compare_same_size.11" expl="11. precondition">
276
  <proof prover="3"><result status="valid" time="0.03" steps="90"/></proof>
277 278
  </goal>
  <goal name="VC compare_same_size.12" expl="12. precondition">
279
  <proof prover="3"><result status="valid" time="0.03" steps="91"/></proof>
280 281
  </goal>
  <goal name="VC compare_same_size.13" expl="13. precondition">
282
  <proof prover="4"><result status="valid" time="0.02"/></proof>
283 284
  </goal>
  <goal name="VC compare_same_size.14" expl="14. precondition">
285
  <proof prover="4"><result status="valid" time="0.03"/></proof>
286
  </goal>
287 288
  <goal name="VC compare_same_size.15" expl="15. assertion">
  <proof prover="3"><result status="valid" time="0.06" steps="105"/></proof>
289
  </goal>
290
  <goal name="VC compare_same_size.16" expl="16. precondition">
291
  <proof prover="4"><result status="valid" time="0.02"/></proof>
292
  </goal>
293 294
  <goal name="VC compare_same_size.17" expl="17. precondition">
  <proof prover="4"><result status="valid" time="0.05"/></proof>
295 296
  </goal>
  <goal name="VC compare_same_size.18" expl="18. precondition">
297
  <proof prover="4"><result status="valid" time="0.03"/></proof>
298
  </goal>
299 300
  <goal name="VC compare_same_size.19" expl="19. assertion">
  <proof prover="3"><result status="valid" time="0.32" steps="116"/></proof>
301
  </goal>
302
  <goal name="VC compare_same_size.20" expl="20. assertion">
303
  <transf name="split_goal_wp">
304
   <goal name="VC compare_same_size.20.1" expl="1. VC for compare_same_size">
305
   <proof prover="1"><result status="valid" time="0.96"/></proof>
306
   </goal>
307 308
   <goal name="VC compare_same_size.20.2" expl="2. VC for compare_same_size">
   <proof prover="3"><result status="valid" time="0.18" steps="107"/></proof>
309 310
   </goal>
  </transf>
311
  </goal>
312 313
  <goal name="VC compare_same_size.21" expl="21. integer overflow">
  <proof prover="4"><result status="valid" time="0.03"/></proof>
314
  </goal>
315 316
  <goal name="VC compare_same_size.22" expl="22. postcondition">
  <proof prover="4"><result status="valid" time="0.04"/></proof>
317
  </goal>
318 319
  <goal name="VC compare_same_size.23" expl="23. assertion">
  <proof prover="4"><result status="valid" time="0.03"/></proof>
320
  </goal>
321 322
  <goal name="VC compare_same_size.24" expl="24. precondition">
  <proof prover="4"><result status="valid" time="0.02"/></proof>
323
  </goal>
324 325
  <goal name="VC compare_same_size.25" expl="25. assertion">
  <proof prover="3"><result status="valid" time="0.26" steps="117"/></proof>
326
  </goal>
327
  <goal name="VC compare_same_size.26" expl="26. assertion">
328
  <transf name="split_goal_wp">
329
   <goal name="VC compare_same_size.26.1" expl="1. VC for compare_same_size">
330
   <proof prover="1"><result status="valid" time="1.08"/></proof>
331
   </goal>
332 333
   <goal name="VC compare_same_size.26.2" expl="2. VC for compare_same_size">
   <proof prover="4"><result status="valid" time="0.03"/></proof>
334 335
   </goal>
  </transf>
336
  </goal>
337 338
  <goal name="VC compare_same_size.27" expl="27. integer overflow">
  <proof prover="4"><result status="valid" time="0.04"/></proof>
339
  </goal>
340 341
  <goal name="VC compare_same_size.28" expl="28. postcondition">
  <proof prover="4"><result status="valid" time="0.04"/></proof>
342
  </goal>
343 344
  <goal name="VC compare_same_size.29" expl="29. loop invariant preservation">
  <proof prover="4"><result status="valid" time="0.03"/></proof>
345
  </goal>
346 347
  <goal name="VC compare_same_size.30" expl="30. loop invariant preservation">
  <proof prover="3"><result status="valid" time="0.04" steps="100"/></proof>
348
  </goal>
349 350
  <goal name="VC compare_same_size.31" expl="31. loop variant decrease">
  <proof prover="4"><result status="valid" time="0.03"/></proof>
351
  </goal>
352 353
  <goal name="VC compare_same_size.32" expl="32. precondition">
  <proof prover="3"><result status="valid" time="0.05" steps="90"/></proof>
354
  </goal>
355 356
  <goal name="VC compare_same_size.33" expl="33. postcondition">
  <proof prover="4"><result status="valid" time="0.03"/></proof>
357 358 359 360 361 362
  </goal>
 </transf>
 </goal>
 <goal name="VC is_zero" expl="VC for is_zero">
 <transf name="split_goal_wp">
  <goal name="VC is_zero.1" expl="1. integer overflow">
363
  <proof prover="4"><result status="valid" time="0.02"/></proof>
364 365
  </goal>
  <goal name="VC is_zero.2" expl="2. loop invariant init">
366
  <proof prover="4"><result status="valid" time="0.03"/></proof>
367 368
  </goal>
  <goal name="VC is_zero.3" expl="3. loop invariant init">
369
  <proof prover="4"><result status="valid" time="0.03"/></proof>
370
  </goal>
371
  <goal name="VC is_zero.4" expl="4. integer overflow">
372
  <proof prover="4"><result status="valid" time="0.02"/></proof>
373
  </goal>
374
  <goal name="VC is_zero.5" expl="5. integer overflow">
375
  <proof prover="4"><result status="valid" time="0.03"/></proof>
376
  </goal>
377
  <goal name="VC is_zero.6" expl="6. integer overflow">
378
  <proof prover="4"><result status="valid" time="0.03"/></proof>
379
  </goal>
380
  <goal name="VC is_zero.7" expl="7. assertion">
381
  <proof prover="3"><result status="valid" time="0.02" steps="80"/></proof>
382 383
  </goal>
  <goal name="VC is_zero.8" expl="8. precondition">
384 385
  <proof prover="3"><result status="valid" time="0.04" steps="86"/></proof>
  <proof prover="4"><result status="valid" time="0.03"/></proof>
386 387
  </goal>
  <goal name="VC is_zero.9" expl="9. precondition">
388
  <proof prover="4"><result status="valid" time="0.02"/></proof>
389
  </goal>
390
  <goal name="VC is_zero.10" expl="10. precondition">
391
  <proof prover="4"><result status="valid" time="0.03"/></proof>
392
  </goal>
393 394
  <goal name="VC is_zero.11" expl="11. integer overflow">
  <proof prover="4"><result status="valid" time="0.02"/></proof>
395
  </goal>
396 397
  <goal name="VC is_zero.12" expl="12. postcondition">
  <proof prover="4"><result status="valid" time="0.02"/></proof>
398
  </goal>
399
  <goal name="VC is_zero.13" expl="13. postcondition">
400
  <proof prover="3"><result status="valid" time="0.21" steps="150"/></proof>
401
  </goal>
402 403
  <goal name="VC is_zero.14" expl="14. assertion">
  <proof prover="4"><result status="valid" time="0.02"/></proof>
404
  </goal>
405 406
  <goal name="VC is_zero.15" expl="15. loop invariant preservation">
  <proof prover="4"><result status="valid" time="0.03"/></proof>
407 408
  </goal>
  <goal name="VC is_zero.16" expl="16. loop invariant preservation">
409
  <proof prover="3"><result status="valid" time="0.06" steps="103"/></proof>
410
  </goal>
411 412
  <goal name="VC is_zero.17" expl="17. loop variant decrease">
  <proof prover="4"><result status="valid" time="0.02"/></proof>
413
  </goal>
414 415
  <goal name="VC is_zero.18" expl="18. integer overflow">
  <proof prover="4"><result status="valid" time="0.03"/></proof>
416
  </goal>
417 418
  <goal name="VC is_zero.19" expl="19. postcondition">
  <proof prover="4"><result status="valid" time="0.02"/></proof>
419
  </goal>
420
  <goal name="VC is_zero.20" expl="20. postcondition">
421
  <proof prover="3"><result status="valid" time="0.04" steps="85"/></proof>
422 423 424
  </goal>
 </transf>
 </goal>
425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464
 <goal name="VC zero" expl="VC for zero">
 <transf name="split_goal_wp">
  <goal name="VC zero.1" expl="1. integer overflow">
  <proof prover="3"><result status="valid" time="0.03" steps="76"/></proof>
  </goal>
  <goal name="VC zero.2" expl="2. integer overflow">
  <proof prover="3"><result status="valid" time="0.03" steps="77"/></proof>
  </goal>
  <goal name="VC zero.3" expl="3. loop invariant init">
  <proof prover="3"><result status="valid" time="0.03" steps="74"/></proof>
  </goal>
  <goal name="VC zero.4" expl="4. loop invariant init">
  <proof prover="3"><result status="valid" time="0.06" steps="91"/></proof>
  </goal>
  <goal name="VC zero.5" expl="5. precondition">
  <proof prover="3"><result status="valid" time="0.04" steps="90"/></proof>
  </goal>
  <goal name="VC zero.6" expl="6. precondition">
  <proof prover="3"><result status="valid" time="0.04" steps="82"/></proof>
  </goal>
  <goal name="VC zero.7" expl="7. integer overflow">
  <proof prover="3"><result status="valid" time="0.05" steps="88"/></proof>
  </goal>
  <goal name="VC zero.8" expl="8. integer overflow">
  <proof prover="3"><result status="valid" time="0.04" steps="90"/></proof>
  </goal>
  <goal name="VC zero.9" expl="9. loop invariant preservation">
  <proof prover="3"><result status="valid" time="0.04" steps="86"/></proof>
  </goal>
  <goal name="VC zero.10" expl="10. loop invariant preservation">
  <proof prover="3"><result status="valid" time="0.24" steps="176"/></proof>
  </goal>
  <goal name="VC zero.11" expl="11. loop variant decrease">
  <proof prover="3"><result status="valid" time="0.03" steps="86"/></proof>
  </goal>
  <goal name="VC zero.12" expl="12. postcondition">
  <proof prover="3"><result status="valid" time="0.03" steps="79"/></proof>
  </goal>
 </transf>
 </goal>
465 466
 <goal name="VC add_limb" expl="VC for add_limb">
 <transf name="split_goal_wp">
467
  <goal name="VC add_limb.1" expl="1. integer overflow">
468
  <proof prover="4"><result status="valid" time="0.02"/></proof>
469
  </goal>
470
  <goal name="VC add_limb.2" expl="2. integer overflow">
471
  <proof prover="4"><result status="valid" time="0.03"/></proof>
472 473
  </goal>
  <goal name="VC add_limb.3" expl="3. loop invariant init">
474
  <proof prover="4"><result status="valid" time="0.03"/></proof>
475 476
  </goal>
  <goal name="VC add_limb.4" expl="4. loop invariant init">
477
  <proof prover="4"><result status="valid" time="0.02"/></proof>
478 479
  </goal>
  <goal name="VC add_limb.5" expl="5. loop invariant init">
480
  <proof prover="3"><result status="valid" time="0.12" steps="107"/></proof>
481
  </goal>
482 483 484
  <goal name="VC add_limb.6" expl="6. precondition">
  <proof prover="3"><result status="valid" time="0.03" steps="91"/></proof>
  <proof prover="4"><result status="valid" time="0.03"/></proof>
485 486
  </goal>
  <goal name="VC add_limb.7" expl="7. precondition">
487
  <proof prover="4"><result status="valid" time="0.02"/></proof>
488 489
  </goal>
  <goal name="VC add_limb.8" expl="8. precondition">
490
  <proof prover="3"><result status="valid" time="0.05" steps="101"/></proof>
491
  </goal>
492 493
  <goal name="VC add_limb.9" expl="9. assertion">
  <proof prover="3"><result status="valid" time="0.36" steps="176"/></proof>
494
  </goal>
495 496
  <goal name="VC add_limb.10" expl="10. integer overflow">
  <proof prover="4"><result status="valid" time="0.02"/></proof>
497
  </goal>
498 499
  <goal name="VC add_limb.11" expl="11. integer overflow">
  <proof prover="4"><result status="valid" time="0.03"/></proof>
500
  </goal>
501
  <goal name="VC add_limb.12" expl="12. precondition">
502
  <proof prover="4"><result status="valid" time="0.03"/></proof>
503 504
  </goal>
  <goal name="VC add_limb.13" expl="13. precondition">
505
  <proof prover="4"><result status="valid" time="0.04"/></proof>
506
  </goal>
507 508 509 510 511
  <goal name="VC add_limb.14" expl="14. assertion">
  <transf name="inline_all">
   <goal name="VC add_limb.14.1" expl="1. assertion">
   <transf name="split_goal_wp">
    <goal name="VC add_limb.14.1.1" expl="1. VC for add_limb">
512 513
    <proof prover="1"><result status="valid" time="0.07"/></proof>
    </goal>
514 515
    <goal name="VC add_limb.14.1.2" expl="2. VC for add_limb">
    <proof prover="1"><result status="valid" time="0.09"/></proof>
516
    </goal>
517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536
    <goal name="VC add_limb.14.1.3" expl="3. VC for add_limb">
    <proof prover="1"><result status="valid" time="0.08"/></proof>
    </goal>
    <goal name="VC add_limb.14.1.4" expl="4. VC for add_limb">
    <proof prover="1"><result status="valid" time="0.07"/></proof>
    </goal>
    <goal name="VC add_limb.14.1.5" expl="5. VC for add_limb">
    <proof prover="1"><result status="valid" time="0.08"/></proof>
    <proof prover="4"><result status="valid" time="0.04"/></proof>
    </goal>
    <goal name="VC add_limb.14.1.6" expl="6. VC for add_limb">
    <proof prover="0"><result status="valid" time="0.09"/></proof>
    <proof prover="1"><result status="valid" time="0.09"/></proof>
    </goal>
    <goal name="VC add_limb.14.1.7" expl="7. VC for add_limb">
    <proof prover="1"><result status="valid" time="0.07"/></proof>
    </goal>
    <goal name="VC add_limb.14.1.8" expl="8. VC for add_limb">
    <proof prover="1"><result status="valid" time="0.09"/></proof>
    <proof prover="4"><result status="valid" time="0.01"/></proof>
537 538 539 540 541
    </goal>
   </transf>
   </goal>
  </transf>
  </goal>
542 543
  <goal name="VC add_limb.15" expl="15. loop invariant preservation">
  <proof prover="4"><result status="valid" time="0.04"/></proof>
544
  </goal>
545 546
  <goal name="VC add_limb.16" expl="16. loop invariant preservation">
  <proof prover="4"><result status="valid" time="0.03"/></proof>
547
  </goal>
548 549
  <goal name="VC add_limb.17" expl="17. loop invariant preservation">
  <proof prover="4"><result status="valid" time="0.01"/></proof>
550
  </goal>
551 552
  <goal name="VC add_limb.18" expl="18. loop variant decrease">
  <proof prover="4"><result status="valid" time="0.03"/></proof>
553
  </goal>
Raphaël Rieu-Helft's avatar
Raphaël Rieu-Helft committed
554
  <goal name="VC add_limb.19" expl="19. postcondition">
555
  <proof prover="3"><result status="valid" time="0.04" steps="85"/></proof>
556
  </goal>
Raphaël Rieu-Helft's avatar
Raphaël Rieu-Helft committed
557
  <goal name="VC add_limb.20" expl="20. postcondition">
558
  <proof prover="4"><result status="valid" time="0.03"/></proof>
559
  </goal>
Raphaël Rieu-Helft's avatar
Raphaël Rieu-Helft committed
560
  <goal name="VC add_limb.21" expl="21. loop invariant init">
561
  <proof prover="4"><result status="valid" time="0.03"/></proof>
562
  </goal>
Raphaël Rieu-Helft's avatar
Raphaël Rieu-Helft committed
563
  <goal name="VC add_limb.22" expl="22. loop invariant init">
564
  <proof prover="4"><result status="valid" time="0.03"/></proof>
565
  </goal>
Raphaël Rieu-Helft's avatar
Raphaël Rieu-Helft committed
566
  <goal name="VC add_limb.23" expl="23. loop invariant init">
567
  <proof prover="4"><result status="valid" time="0.02"/></proof>
568
  </goal>
Raphaël Rieu-Helft's avatar
Raphaël Rieu-Helft committed
569
  <goal name="VC add_limb.24" expl="24. precondition">
570
  <proof prover="4"><result status="valid" time="0.04"/></proof>
571
  </goal>
Raphaël Rieu-Helft's avatar
Raphaël Rieu-Helft committed
572
  <goal name="VC add_limb.25" expl="25. precondition">
573
  <proof prover="3"><result status="valid" time="0.04" steps="107"/></proof>
574
  </goal>
Raphaël Rieu-Helft's avatar
Raphaël Rieu-Helft committed
575
  <goal name="VC add_limb.26" expl="26. assertion">
576
  <proof prover="3"><result status="valid" time="0.15" steps="144"/></proof>
577
  </goal>
Raphaël Rieu-Helft's avatar
Raphaël Rieu-Helft committed
578
  <goal name="VC add_limb.27" expl="27. integer overflow">
579
  <proof prover="4"><result status="valid" time="0.03"/></proof>
580
  </goal>
Raphaël Rieu-Helft's avatar
Raphaël Rieu-Helft committed
581
  <goal name="VC add_limb.28" expl="28. integer overflow">
582
  <proof prover="4"><result status="valid" time="0.03"/></proof>
583
  </goal>
Raphaël Rieu-Helft's avatar
Raphaël Rieu-Helft committed
584
  <goal name="VC add_limb.29" expl="29. precondition">
585
  <proof prover="4"><result status="valid" time="0.03"/></proof>
586
  </goal>
Raphaël Rieu-Helft's avatar
Raphaël Rieu-Helft committed
587
  <goal name="VC add_limb.30" expl="30. precondition">
588
  <proof prover="4"><result status="valid" time="0.03"/></proof>
589
  </goal>
Raphaël Rieu-Helft's avatar
Raphaël Rieu-Helft committed
590
  <goal name="VC add_limb.31" expl="31. loop invariant preservation">
591
  <proof prover="4"><result status="valid" time="0.02"/></proof>
592
  </goal>
Raphaël Rieu-Helft's avatar
Raphaël Rieu-Helft committed
593
  <goal name="VC add_limb.32" expl="32. loop invariant preservation">
594
  <proof prover="4"><result status="valid" time="0.06"/></proof>
595
  </goal>
Raphaël Rieu-Helft's avatar
Raphaël Rieu-Helft committed
596
  <goal name="VC add_limb.33" expl="33. loop invariant preservation">
597
  <proof prover="1"><result status="valid" time="0.33"/></proof>
598
  </goal>
Raphaël Rieu-Helft's avatar
Raphaël Rieu-Helft committed
599
  <goal name="VC add_limb.34" expl="34. loop variant decrease">
600
  <proof prover="4"><result status="valid" time="0.03"/></proof>
601
  </goal>
Raphaël Rieu-Helft's avatar
Raphaël Rieu-Helft committed
602
  <goal name="VC add_limb.35" expl="35. postcondition">
603
  <proof prover="3"><result status="valid" time="0.04" steps="90"/></proof>
604
  </goal>
Raphaël Rieu-Helft's avatar
Raphaël Rieu-Helft committed
605
  <goal name="VC add_limb.36" expl="36. postcondition">
606
  <proof prover="4"><result status="valid" time="0.02"/></proof>
607 608 609
  </goal>
 </transf>
 </goal>
610 611
 <goal name="VC add_limbs" expl="VC for add_limbs">
 <transf name="split_goal_wp">
612
  <goal name="VC add_limbs.1" expl="1. integer overflow">
613 614
  <proof prover="3"><result status="valid" time="0.03" steps="82"/></proof>
  <proof prover="4"><result status="valid" time="0.03"/></proof>
615
  </goal>
616
  <goal name="VC add_limbs.2" expl="2. integer overflow">
617 618
  <proof prover="3"><result status="valid" time="0.04" steps="83"/></proof>
  <proof prover="4"><result status="valid" time="0.04"/></proof>
619 620
  </goal>
  <goal name="VC add_limbs.3" expl="3. loop invariant init">
621 622
  <proof prover="3"><result status="valid" time="0.03" steps="76"/></proof>
  <proof prover="4"><result status="valid" time="0.02"/></proof>
623 624
  </goal>
  <goal name="VC add_limbs.4" expl="4. loop invariant init">
625
  <proof prover="3"><result status="valid" time="0.11" steps="110"/></proof>
626 627
  </goal>
  <goal name="VC add_limbs.5" expl="5. loop invariant init">
628 629
  <proof prover="3"><result status="valid" time="0.04" steps="75"/></proof>
  <proof prover="4"><result status="valid" time="0.02"/></proof>
630
  </goal>
631 632 633
  <goal name="VC add_limbs.6" expl="6. precondition">
  <proof prover="3"><result status="valid" time="0.04" steps="91"/></proof>
  <proof prover="4"><result status="valid" time="0.03"/></proof>
634 635
  </goal>
  <goal name="VC add_limbs.7" expl="7. precondition">
636 637
  <proof prover="3"><result status="valid" time="0.05" steps="92"/></proof>
  <proof prover="4"><result status="valid" time="0.03"/></proof>
638 639
  </goal>
  <goal name="VC add_limbs.8" expl="8. precondition">
640 641
  <proof prover="3"><result status="valid" time="0.05" steps="85"/></proof>
  <proof prover="4"><result status="valid" time="0.02"/></proof>
642 643
  </goal>
  <goal name="VC add_limbs.9" expl="9. precondition">
644
  <proof prover="3"><result status="valid" time="0.05" steps="103"/></proof>
645
  </goal>
646
  <goal name="VC add_limbs.10" expl="10. assertion">
647
  <proof prover="3"><result status="valid" time="1.03" steps="137"/></proof>
648
  </goal>
649 650 651
  <goal name="VC add_limbs.11" expl="11. integer overflow">
  <proof prover="3"><result status="valid" time="0.04" steps="102"/></proof>
  <proof prover="4"><result status="valid" time="0.02"/></proof>
652
  </goal>
653 654 655
  <goal name="VC add_limbs.12" expl="12. integer overflow">
  <proof prover="3"><result status="valid" time="0.07" steps="104"/></proof>
  <proof prover="4"><result status="valid" time="0.03"/></proof>
656
  </goal>
657 658 659
  <goal name="VC add_limbs.13" expl="13. precondition">
  <proof prover="3"><result status="valid" time="0.08" steps="96"/></proof>
  <proof prover="4"><result status="valid" time="0.03"/></proof>
660
  </goal>
661
  <goal name="VC add_limbs.14" expl="14. precondition">
662 663
  <proof prover="3"><result status="valid" time="0.09" steps="97"/></proof>
  <proof prover="4"><result status="valid" time="0.04"/></proof>
664
  </goal>
665
  <goal name="VC add_limbs.15" expl="15. precondition">
666 667
  <proof prover="3"><result status="valid" time="0.18" steps="98"/></proof>
  <proof prover="4"><result status="valid" time="0.04"/></proof>
668
  </goal>
669
  <goal name="VC add_limbs.16" expl="16. assertion">
670
  <transf name="inline_all">
671
   <goal name="VC add_limbs.16.1" expl="1. assertion">
672
   <transf name="split_goal_wp">
673 674
    <goal name="VC add_limbs.16.1.1" expl="1. VC for add_limbs">
    <proof prover="1"><result status="valid" time="0.12"/></proof>
675
    </goal>
676 677
    <goal name="VC add_limbs.16.1.2" expl="2. VC for add_limbs">
    <proof prover="1"><result status="valid" time="0.08"/></proof>
678
    </goal>
679 680
    <goal name="VC add_limbs.16.1.3" expl="3. VC for add_limbs">
    <proof prover="2"><result status="valid" time="0.04"/></proof>
681
    </goal>
682 683
    <goal name="VC add_limbs.16.1.4" expl="4. VC for add_limbs">
    <proof prover="0"><result status="valid" time="0.07"/></proof>
684
    </goal>
685 686
    <goal name="VC add_limbs.16.1.5" expl="5. VC for add_limbs">
    <proof prover="1"><result status="valid" time="0.07"/></proof>
687
    </goal>
688 689
    <goal name="VC add_limbs.16.1.6" expl="6. VC for add_limbs">
    <proof prover="2"><result status="valid" time="0.09"/></proof>
690
    </goal>
691 692
    <goal name="VC add_limbs.16.1.7" expl="7. VC for add_limbs">
    <proof prover="1"><result status="valid" time="0.12"/></proof>
693
    </goal>
694 695
    <goal name="VC add_limbs.16.1.8" expl="8. VC for add_limbs">
    <proof prover="1"><result status="valid" time="0.08"/></proof>
696
    </goal>
697 698
    <goal name="VC add_limbs.16.1.9" expl="9. VC for add_limbs">
    <proof prover="2"><result status="valid" time="0.05"/></proof>
699
    </goal>
700 701
    <goal name="VC add_limbs.16.1.10" expl="10. VC for add_limbs">
    <proof prover="1"><result status="valid" time="0.08"/></proof>
702
    </goal>
703 704
    <goal name="VC add_limbs.16.1.11" expl="11. VC for add_limbs">
    <proof prover="1"><result status="valid" time="0.06"/></proof>
705 706 707 708
    </goal>
   </transf>
   </goal>
  </transf>
709
  </goal>
710 711 712
  <goal name="VC add_limbs.17" expl="17. loop invariant preservation">
  <proof prover="3"><result status="valid" time="0.31" steps="100"/></proof>
  <proof prover="4"><result status="valid" time="0.06"/></proof>
713
  </goal>
714 715 716
  <goal name="VC add_limbs.18" expl="18. loop invariant preservation">
  <proof prover="3"><result status="valid" time="0.31" steps="100"/></proof>
  <proof prover="4"><result status="valid" time="0.01"/></proof>
717
  </goal>
718 719 720
  <goal name="VC add_limbs.19" expl="19. loop invariant preservation">
  <proof prover="3"><result status="valid" time="0.31" steps="100"/></proof>
  <proof prover="4"><result status="valid" time="0.04"/></proof>
721
  </goal>
722 723 724
  <goal name="VC add_limbs.20" expl="20. loop variant decrease">
  <proof prover="3"><result status="valid" time="0.34" steps="100"/></proof>
  <proof prover="4"><result status="valid" time="0.03"/></proof>
725
  </goal>
726 727 728
  <goal name="VC add_limbs.21" expl="21. postcondition">
  <proof prover="3"><result status="valid" time="0.03" steps="83"/></proof>
  <proof prover="4"><result status="valid" time="0.03"/></proof>
729
  </goal>
730 731
  <goal name="VC add_limbs.22" expl="22. postcondition">
  <proof prover="3"><result status="valid" time="0.03" steps="83"/></proof>
732 733 734 735 736 737
  </goal>
 </transf>
 </goal>
 <goal name="VC add" expl="VC for add">
 <transf name="split_goal_wp">
  <goal name="VC add.1" expl="1. integer overflow">
738
  <proof prover="4"><result status="valid" time="0.03"/></proof>
739 740
  </goal>
  <goal name="VC add.2" expl="2. integer overflow">
741
  <proof prover="4"><result status="valid" time="0.04"/></proof>
742 743
  </goal>
  <goal name="VC add.3" expl="3. loop invariant init">
744
  <proof prover="4"><result status="valid" time="0.03"/></proof>