************************************************************ * IMITATOR 2.9.2-working "Butter Incaberry" * * * * Etienne Andre, Ulrich Kuehne et al. * * 2009 - 2017 * * LSV, ENS de Cachan & CNRS, France * * LIPN, Universite Paris 13, France * * www.imitator.fr * * * * Build: 2363 (2017-06-08 17:40:33 UTC) * * explorder/5c40e39 * ************************************************************ Analysis time: Fri Jun 16, 2017 12:52:08  Model: /media/gia/Data/Example-Models/AndOr/AndOr.imi Mode: EF-synthesis. Exploration order: layer-based BFS. Considering fixpoint variant with bidirectional inclusion of symbolic zones (instead of equality). The cartography will be drawn. The result will be written to a file. The trace set(s) will be generated in a graphical mode. Description of states will be output. This model is an L/U-PTA: - lower-bound parameters {dAnd_l, dA_High_l, dB_High_l, dOr_l, dA_Low_l, dB_Low_l} - upper-bound parameters {dA_High_u, dAnd_u, dOr_u, dB_High_u, dA_Low_u, dB_Low_u}  Abstract model built after 0.034 second. Memory for abstract model: 1088.585 KiB (i.e., 278678 words)  Starting running algorithm AGsafe…  Computing post^1 from 1 state. Computing post^2 from 1 state.  [AGsafe] Found a new state violating the property. Computing post^3 from 1 state. Computing post^4 from 1 state. Computing post^5 from 2 states.  [AGsafe] Found a new state violating the property. Computing post^6 from 3 states.  [AGsafe] Found a new state violating the property. Computing post^7 from 2 states.  [AGsafe] Found a new state violating the property.  [AGsafe] Found a new state violating the property. Computing post^8 from 2 states.  [AGsafe] Found a new state violating the property.  [AGsafe] Found a new state violating the property. Computing post^9 from 2 states.  Fixpoint reached at a depth of 10: 22 states with 24 transitions in the final state space.  [AGsafe] Algorithm completed after 1.276 seconds.  Final constraint such that the system is correct:  dAnd_l >= 0 & dA_High_l > dB_High_u + dB_Low_u & dOr_l >= 0 & dB_High_u >= dB_High_l & dA_High_u >= dA_High_l & dB_Low_l >= 0 & dB_Low_u >= dB_Low_l & dAnd_u >= dAnd_l & dOr_u >= dOr_l & dA_Low_l >= 0 & dA_Low_u >= dA_Low_l & dB_High_l >= 0 OR dAnd_l > dA_Low_u & dB_Low_l >= 0 & dA_High_l > dB_High_u + dAnd_u & dA_High_l + dA_Low_l + dB_High_l > dB_High_u + dB_Low_u + dAnd_u & dOr_l > dA_Low_u & dB_Low_u >= dB_Low_l & dOr_u >= dOr_l & dAnd_u >= dAnd_l & dB_High_u + dB_Low_u >= dA_High_l & dA_Low_l >= 0 & dB_High_u >= dB_High_l & dA_Low_u >= dA_Low_l & dA_High_u >= dA_High_l OR dAnd_l > dA_Low_u & dB_Low_l >= 0 & dB_High_l > dAnd_u & dOr_l > dA_Low_u & dA_High_l > dB_High_u + dAnd_u & dB_Low_u >= dB_Low_l & dA_Low_l >= 0 & dAnd_u >= dAnd_l & dOr_u >= dOr_l & dB_High_u + dB_Low_u + dAnd_u >= dA_High_l + dA_Low_l + dB_High_l & dB_High_u >= dB_High_l & dA_Low_u >= dA_Low_l & dA_High_u >= dA_High_l OR dOr_l > dA_Low_u & dB_High_l >= 0 & dAnd_l > dA_Low_u & dA_High_l > dB_High_u + dAnd_u & dB_High_l + dB_Low_l > dA_High_u + dA_Low_u & dB_Low_u + dAnd_u >= dOr_l + dAnd_l & dA_Low_l >= 0 & dA_Low_u >= dA_Low_l & dAnd_u >= dAnd_l & dAnd_u >= dB_High_l & dB_High_u >= dB_High_l & dA_High_u >= dA_High_l & dB_Low_u >= dB_Low_l & dOr_u >= dOr_l OR dB_Low_u + dAnd_u >= dOr_l + dAnd_l & dAnd_l >= 0 & dOr_u >= dOr_l & dB_High_l >= 0 & dA_Low_l >= 0 & dOr_u >= dA_Low_l & dA_Low_u >= dA_Low_l & dAnd_u >= dB_High_l & dOr_l >= 0 & dOr_u >= dAnd_l & dA_High_l > dB_High_u + dAnd_u & dA_Low_u >= dAnd_l & dB_High_l + dB_Low_l > dA_High_u + dA_Low_u & dAnd_u >= dAnd_l & dB_High_u >= dB_High_l & dA_High_u >= dA_High_l & dB_Low_u >= dB_Low_l OR dB_High_u + dB_Low_u + dAnd_u >= dA_High_l + dA_Low_l + dB_High_l & dB_High_l >= 0 & dA_High_l > dB_High_u + dAnd_u & dAnd_l > dOr_u & dB_High_l + dB_Low_l > dA_High_u + dA_Low_u & dA_Low_u >= dA_Low_l & dOr_u >= dA_Low_l & dOr_l >= 0 & dB_High_u >= dB_High_l & dA_High_u >= dA_High_l & dA_Low_u >= dOr_l & dB_Low_u >= dB_Low_l & dOr_u >= dOr_l & dA_Low_l >= 0 & dAnd_u >= dAnd_l OR dB_High_l >= 0 & dB_High_l + dB_Low_l > dA_High_u + dA_Low_u & dAnd_l > dA_Low_u & dA_High_l > dB_High_u + dAnd_u & dA_Low_l >= 0 & dOr_l >= 0 & dA_Low_u >= dOr_l & dA_Low_u >= dA_Low_l & dAnd_u >= dAnd_l & dB_High_u >= dB_High_l & dA_High_u >= dA_High_l & dB_Low_u >= dB_Low_l & dOr_u >= dAnd_l OR dB_Low_l >= 0 & dB_High_u + dB_Low_u >= dA_High_l & dAnd_l > dOr_u & dA_High_l > dB_High_u + dAnd_u & dA_High_u + dA_Low_u >= dB_High_l + dB_Low_l & dB_Low_u >= dB_Low_l & dB_High_l > dOr_u + dAnd_u & dOr_l >= 0 & dA_Low_l >= 0 & dA_Low_u >= dA_Low_l & dOr_u >= dOr_l & dA_Low_u >= dOr_l & dB_High_u >= dB_High_l & dA_High_u >= dA_High_l & dAnd_u >= dAnd_l OR dOr_l >= 0 & dA_Low_l >= 0 & dB_High_u >= dB_High_l & dB_High_l > dOr_u + dAnd_u & dA_High_l > dB_High_u + dAnd_u & dB_High_l + dB_Low_l + dAnd_l > dA_High_u + dA_Low_u & dOr_u >= dOr_l & dA_Low_u >= dOr_l & dA_High_u >= dA_High_l & dB_Low_u >= dB_Low_l & dA_Low_u >= dA_Low_l & dA_High_u + dA_Low_u >= dB_High_l + dB_Low_l & dA_Low_u >= dAnd_l & dOr_u >= dAnd_l & dAnd_u >= dAnd_l OR dAnd_l >= 0 & dA_Low_u >= dA_Low_l & dOr_l >= 0 & dA_High_l > dB_High_u + dAnd_u & dB_High_l + dB_Low_l + dAnd_l > dA_High_u + dOr_u & dB_High_l > dOr_u + dAnd_u & dOr_u >= dOr_l & dA_Low_l >= 0 & dOr_u >= dAnd_l & dA_High_u + dA_Low_u >= dB_High_l + dB_Low_l + dAnd_l & dB_High_u >= dB_High_l & dA_High_u >= dA_High_l & dB_Low_u >= dB_Low_l & dAnd_u >= dAnd_l OR dOr_l >= 0 & dB_High_l > dA_High_u & dAnd_l > dB_Low_u & dOr_u >= dOr_l & dA_High_l >= 0 & dA_Low_l >= 0 & dB_Low_l >= 0 & dAnd_u >= dAnd_l & dB_Low_u >= dB_Low_l & dB_High_u >= dB_High_l & dA_Low_u >= dA_Low_l & dA_High_u >= dA_High_l OR dAnd_l >= 0 & dOr_l >= 0 & dB_Low_l >= 0 & dB_High_l > dA_High_u & dB_High_u + dB_Low_u + dAnd_u > dB_High_l + dAnd_l & dA_Low_l > dOr_u & dOr_u >= dOr_l & dB_Low_u >= dB_Low_l & dB_High_u >= dB_High_l & dB_Low_u >= dAnd_l & dAnd_u >= dAnd_l & dB_High_u + dB_Low_u + dAnd_u >= dA_High_l + dA_Low_l + dB_High_l & dA_High_l >= 0 & dA_Low_u >= dA_Low_l & dA_High_u >= dA_High_l OR dB_High_u + dB_Low_u + dAnd_u >= dA_High_l + dA_Low_l + dB_High_l & dB_Low_l >= 0 & dAnd_l > dOr_u & dB_High_l > dA_High_u & dB_Low_u >= dB_Low_l & dOr_u >= dA_Low_l & dOr_l >= 0 & dOr_u >= dOr_l & dB_Low_u >= dAnd_l & dAnd_u >= dAnd_l & dA_High_l >= 0 & dA_Low_l >= 0 & dB_High_u >= dB_High_l & dA_Low_u >= dA_Low_l & dA_High_u >= dA_High_l OR dA_High_l >= 0 & dOr_l >= 0 & dA_Low_l + dB_High_l + dAnd_l > dB_Low_u + dAnd_u & dB_Low_l >= 0 & dAnd_l > dA_Low_u & dB_High_l > dA_High_u & dOr_u >= dOr_l & dB_Low_u >= dB_Low_l & dA_Low_u >= dA_Low_l & dA_High_u >= dA_High_l & dB_Low_u >= dAnd_l & dAnd_u >= dAnd_l & dA_Low_l >= 0 & dB_High_u >= dB_High_l & dOr_u >= dAnd_l OR dOr_l >= 0 & dA_Low_l >= 0 & dOr_u >= dAnd_l & dB_Low_l >= 0 & dB_Low_u >= dAnd_l & dOr_u >= dOr_l & dB_Low_u >= dB_Low_l & dAnd_u >= dAnd_l & dAnd_l >= 0 & dOr_u >= dA_Low_l & dA_Low_u >= dA_Low_l & dB_High_l > dA_High_u & dB_Low_u + dAnd_u >= dA_Low_l + dB_High_l + dAnd_l & dA_High_l >= 0 & dB_High_u >= dB_High_l & dA_High_u >= dA_High_l OR dAnd_l >= 0 & dA_High_l > dB_High_u + dAnd_u & dOr_l + dAnd_l > dB_Low_u + dAnd_u & dB_High_l + dB_Low_l > dA_High_u + dA_Low_u & dA_Low_l >= 0 & dA_Low_u >= dA_Low_l & dB_High_l >= 0 & dAnd_u >= dAnd_l & dOr_u >= dOr_l & dB_Low_u >= dB_Low_l & dB_High_u >= dB_High_l & dA_High_u >= dA_High_l & dAnd_u >= dB_High_l OR dOr_l > dA_Low_u & dB_High_l + dB_Low_l + dAnd_l > dA_High_u + dA_Low_u & dA_High_l > dB_High_u + dAnd_u & dA_High_l + dA_Low_l + dB_High_l > dB_High_u + dB_Low_u + dAnd_u & dB_High_u >= dB_High_l & dAnd_u >= dAnd_l & dA_High_u >= dA_High_l & dB_Low_u >= dB_Low_l & dA_Low_l >= 0 & dA_Low_u >= dAnd_l & dAnd_l >= 0 & dOr_u >= dOr_l & dA_Low_u >= dA_Low_l OR dB_High_u >= dB_High_l & dAnd_l >= 0 & dA_Low_l >= 0 & dA_High_u >= dA_High_l & dB_High_l + dB_Low_l + dAnd_l > dA_High_u + dA_Low_u & dB_Low_u >= dB_Low_l & dB_High_l > dAnd_u & dOr_l > dA_Low_u & dA_High_l > dB_High_u + dAnd_u & dAnd_u >= dAnd_l & dB_High_u + dB_Low_u + dAnd_u >= dA_High_l + dA_Low_l + dB_High_l & dA_Low_u >= dAnd_l & dOr_u >= dOr_l & dA_Low_u >= dA_Low_l OR dB_High_l >= 0 & dA_Low_l > dOr_u & dB_High_l + dB_Low_l > dA_High_u + dA_Low_u & dA_High_l > dB_High_u + dAnd_u & dAnd_l >= 0 & dB_High_u + dB_Low_u + dAnd_u >= dA_High_l + dA_Low_l + dB_High_l & dOr_l >= 0 & dOr_u >= dOr_l & dAnd_u >= dAnd_l & dB_Low_u >= dB_Low_l & dB_High_u >= dB_High_l & dA_Low_u >= dA_Low_l & dA_High_u >= dA_High_l OR dB_High_u + dB_Low_u >= dA_High_l & dB_High_u >= dB_High_l & dB_Low_l >= 0 & dB_High_l > dOr_u + dAnd_u & dA_High_l > dB_High_u + dAnd_u & dAnd_l > dA_Low_u & dA_High_u >= dA_High_l & dB_Low_u >= dB_Low_l & dA_High_u + dA_Low_u >= dB_High_l + dB_Low_l & dA_Low_l >= 0 & dA_Low_u >= dOr_l & dOr_l >= 0 & dOr_u >= dAnd_l & dAnd_u >= dAnd_l & dA_Low_u >= dA_Low_l OR dA_High_l + dA_Low_l + dB_High_l > dB_High_u + dB_Low_u + dAnd_u & dB_Low_u >= dAnd_l & dA_High_l >= 0 & dA_Low_l >= 0 & dB_Low_l >= 0 & dOr_l >= 0 & dAnd_u >= dAnd_l & dAnd_l > dOr_u & dOr_u >= dOr_l & dB_Low_u >= dB_Low_l & dB_High_u >= dB_High_l & dA_Low_u >= dA_Low_l & dB_High_l > dA_High_u & dA_High_u >= dA_High_l OR dA_High_l + dA_Low_l + dB_High_l > dB_High_u + dB_Low_u + dAnd_u & dA_High_l >= 0 & dA_Low_l >= 0 & dA_Low_u >= dAnd_l & dB_Low_l >= 0 & dB_Low_u >= dAnd_l & dOr_l >= 0 & dOr_u >= dAnd_l & dAnd_l >= 0 & dAnd_u >= dAnd_l & dOr_u >= dOr_l & dB_Low_u >= dB_Low_l & dB_High_u >= dB_High_l & dA_Low_u >= dA_Low_l & dB_High_l > dA_High_u & dA_High_u >= dA_High_l OR dA_Low_l + dB_High_l + dAnd_l > dB_Low_u + dAnd_u & dOr_u >= dA_Low_l & dB_High_u + dB_Low_u + dAnd_u >= dA_High_l + dA_Low_l + dB_High_l & dA_High_l >= 0 & dA_Low_l >= 0 & dA_Low_u >= dAnd_l & dB_Low_l >= 0 & dB_Low_u >= dAnd_l & dOr_l >= 0 & dOr_u >= dAnd_l & dAnd_l >= 0 & dAnd_u >= dAnd_l & dOr_u >= dOr_l & dB_Low_u >= dB_Low_l & dB_High_u >= dB_High_l & dA_Low_u >= dA_Low_l & dB_High_l > dA_High_u & dA_High_u >= dA_High_l OR dA_High_l > dB_High_u + dAnd_u & dA_Low_l >= 0 & dA_Low_u >= dOr_l & dA_High_l + dA_Low_l + dB_High_l > dB_High_u + dB_Low_u + dAnd_u & dOr_l >= 0 & dAnd_u >= dAnd_l & dAnd_l > dOr_u & dOr_u >= dOr_l & dB_Low_u >= dB_Low_l & dB_High_u >= dB_High_l & dA_Low_u >= dA_Low_l & dB_High_l + dB_Low_l > dA_High_u + dA_Low_u & dA_High_u >= dA_High_l OR dA_High_l > dB_High_u + dAnd_u & dA_Low_l >= 0 & dA_Low_u >= dAnd_l & dA_Low_u >= dOr_l & dA_High_l + dA_Low_l + dB_High_l > dB_High_u + dB_Low_u + dAnd_u & dOr_l >= 0 & dOr_u >= dAnd_l & dAnd_l >= 0 & dAnd_u >= dAnd_l & dOr_u >= dOr_l & dB_Low_u >= dB_Low_l & dB_High_u >= dB_High_l & dA_Low_u >= dA_Low_l & dB_High_l + dB_Low_l > dA_High_u + dA_Low_u & dA_High_u >= dA_High_l OR dOr_u >= dA_Low_l & dB_High_u + dB_Low_u + dAnd_u >= dA_High_l + dA_Low_l + dB_High_l & dA_High_l > dB_High_u + dAnd_u & dA_Low_l >= 0 & dA_Low_u >= dAnd_l & dA_Low_u >= dOr_l & dB_High_l > dAnd_u & dOr_l >= 0 & dOr_u >= dAnd_l & dAnd_l >= 0 & dAnd_u >= dAnd_l & dOr_u >= dOr_l & dB_Low_u >= dB_Low_l & dB_High_u >= dB_High_l & dA_Low_u >= dA_Low_l & dB_High_l + dB_Low_l > dA_High_u + dA_Low_u & dA_High_u >= dA_High_l This good constraint is exact (sound and complete) 3.554 MiB (i.e., 465846 words of size 8)  Result written to file '/media/gia/Data/Example-Models/AndOr/AndOr-layerBFS-incl2-EF.res'.  ------------------------------------------------------------ Statistics: State space ------------------------------------------------------------ Number of states : 22 Number of transitions : 24 Number of computed states : 25 Total computation time : 2.386 seconds States/second in state space : 9.2 (22/2.386 seconds) Computed states/second : 10.4 (25/2.386 seconds) Estimated memory : 4.226 MiB (i.e., 553954 words of size 8)  Generating graphical output to '/media/gia/Data/Example-Models/AndOr/AndOr-layerBFS-incl2-EF-statespace.jpg'… Writing the states description to file '/media/gia/Data/Example-Models/AndOr/AndOr-layerBFS-incl2-EF-statespace.states'…  Drawing the cartography… Plot cartography in 2D projected on parameters dA_High_l and dA_High_u to file '/media/gia/Data/Example-Models/AndOr/AndOr-layerBFS-incl2-EF_cart.png'.  ------------------------------------------------------------ Statistics: Algorithm counters ------------------------------------------------------------ main algorithm : 2.419 seconds ------------------------------------------------------------ Statistics: Parsing counters ------------------------------------------------------------ model parsing : 0.031 second ------------------------------------------------------------ Statistics: State computation counters ------------------------------------------------------------ number of state comparisons : 39 number of constraints comparisons : 27 number of new states <= old : 3 number of new states >= old : 0 StateSpace.merging attempts : 0 StateSpace.merges : 0 StatesMerging.merging attempts : 0 StatesMerging.merges : 0 ------------------------------------------------------------ Statistics: Graphics-related counters ------------------------------------------------------------ state space drawing : 0.141 second cartography drawing : 0.107 second ------------------------------------------------------------ Statistics: Global counter ------------------------------------------------------------ total : 2.759 seconds IMITATOR successfully terminated (after 2.762 seconds) Estimated memory used: 7.998 MiB (i.e., 1048397 words of size 8)