a=aV1aV0V4V4Ia<V4c0Aa<=c0V4FIa<=c0a+V3c1La-V2c1IarangeV0V2AainjectiveV0V2Aa=alengthV0alengthV1Aa=V2alengthV0F
loop invariant init
a<V5alengthV0Aa<=c0V5Ia=aV4aV0V6V6Ia<V6V5Aa<=c0V6FAa<=V5V3Aa<=c0V5FIa=alengthV4alengthV1FIa<=c0a+V3c1La-V2c1IarangeV0V2AainjectiveV0V2Aa=alengthV0alengthV1Aa=V2alengthV0F
index in array bounds
a<V6alengthV4Aa<=c0V6LaV0V5Ia=aV4aV0V7V7Ia<V7V5Aa<=c0V7FAa<=V5V3Aa<=c0V5FIa=alengthV4alengthV1FIa<=c0a+V3c1La-V2c1IarangeV0V2AainjectiveV0V2Aa=alengthV0alengthV1Aa=V2alengthV0F
a=aV7aV0V8V8Ia<V8a+V5c1Aa<=c0V8FIa=V7aV4V6V5Aa=aeltsV7asetaeltsV4V6V5Ia=alengthV7alengthV4FLaV0V5Ia=aV4aV0V9V9Ia<V9V5Aa<=c0V9FAa<=V5V3Aa<=c0V5FIa=alengthV4alengthV1FIa<=c0a+V3c1La-V2c1IarangeV0V2AainjectiveV0V2Aa=alengthV0alengthV1Aa=V2alengthV0F
loop invariant preservation
ainjectiveV4V2Ia=aV4aV0V5V5Ia<V5a+V3c1Aa<=c0V5FIa=alengthV4alengthV1FIa<=c0a+V3c1La-V2c1IarangeV0V2AainjectiveV0V2Aa=alengthV0alengthV1Aa=V2alengthV0F
postcondition
ainjectiveV1V2Ia>c0a+V3c1La-V2c1IarangeV0V2AainjectiveV0V2Aa=alengthV0alengthV1Aa=V2alengthV0F
ainjectiveV1V2Ia>c0a+V3c1AainjectiveV4V2Ia=aV4aV0V5V5Ia<V5a+V3c1Aa<=c0V5FAa=aV8aV0V9V9Ia<V9a+V6c1Aa<=c0V9FIa=V8aV4V7V6Aa=aeltsV8asetaeltsV4V7V6Ia=alengthV8alengthV4FAa<V7alengthV4Aa<=c0V7LaV0V6Aa<V6alengthV0Aa<=c0V6Ia=aV4aV0V10V10Ia<V10V6Aa<=c0V10FAa<=V6V3Aa<=c0V6FIa=alengthV4alengthV1FAa=aV1aV0V11V11Ia<V11c0Aa<=c0V11FIa<=c0a+V3c1La-V2c1IarangeV0V2AainjectiveV0V2Aa=alengthV0alengthV1Aa=V2alengthV0F
VC for inverting
a>=V1c0IarangeV0V1AainjectiveV0V1Aa=V1alengthV0F
array creation size
a=aV2aV0V4V4Ia<V4c0Aa<=c0V4FIa<=c0a+V3c1La-V1c1Ia=alengthV2V1Aa=aV2V5c0Ia<V5V1Aa<=c0V5FFIarangeV0V1AainjectiveV0V1Aa=V1alengthV0F
a<V5alengthV0Aa<=c0V5Ia=aV4aV0V6V6Ia<V6V5Aa<=c0V6FAa<=V5V3Aa<=c0V5FIa=alengthV4alengthV2FIa<=c0a+V3c1La-V1c1Ia=alengthV2V1Aa=aV2V7c0Ia<V7V1Aa<=c0V7FFIarangeV0V1AainjectiveV0V1Aa=V1alengthV0F
a<V6alengthV4Aa<=c0V6LaV0V5Ia=aV4aV0V7V7Ia<V7V5Aa<=c0V7FAa<=V5V3Aa<=c0V5FIa=alengthV4alengthV2FIa<=c0a+V3c1La-V1c1Ia=alengthV2V1Aa=aV2V8c0Ia<V8V1Aa<=c0V8FFIarangeV0V1AainjectiveV0V1Aa=V1alengthV0F
a=aV7aV0V8V8Ia<V8a+V5c1Aa<=c0V8FIa=V7aV4V6V5Aa=aeltsV7asetaeltsV4V6V5Ia=alengthV7alengthV4FLaV0V5Ia=aV4aV0V9V9Ia<V9V5Aa<=c0V9FAa<=V5V3Aa<=c0V5FIa=alengthV4alengthV2FIa<=c0a+V3c1La-V1c1Ia=alengthV2V1Aa=aV2V10c0Ia<V10V1Aa<=c0V10FFIarangeV0V1AainjectiveV0V1Aa=V1alengthV0F
a=alengthV4V1Ia=aV4aV0V5V5Ia<V5a+V3c1Aa<=c0V5FIa=alengthV4alengthV2FIa<=c0a+V3c1La-V1c1Ia=alengthV2V1Aa=aV2V6c0Ia<V6V1Aa<=c0V6FFIarangeV0V1AainjectiveV0V1Aa=V1alengthV0F
VC for inverting2
ainjectiveV4V1Ia=aV4aV0V5V5Ia<V5a+V3c1Aa<=c0V5FIa=alengthV4alengthV2FIa<=c0a+V3c1La-V1c1Ia=alengthV2V1Aa=aV2V6c0Ia<V6V1Aa<=c0V6FFIarangeV0V1AainjectiveV0V1Aa=V1alengthV0F
a=aV4aV0V5V5Ia<V5V1Aa<=c0V5FIa=aV4aV0V6V6Ia<V6a+V3c1Aa<=c0V6FIa=alengthV4alengthV2FIa<=c0a+V3c1La-V1c1Ia=alengthV2V1Aa=aV2V7c0Ia<V7V1Aa<=c0V7FFIarangeV0V1AainjectiveV0V1Aa=V1alengthV0F
a=aV4aV0V5V5Ia<V5V1Aa<=c0V5FAainjectiveV4V1Aa=alengthV4V1Ia=aV4aV0V6V6Ia<V6a+V3c1Aa<=c0V6FIa=alengthV4alengthV2FIa<=c0a+V3c1La-V1c1Ia=alengthV2V1Aa=aV2V7c0Ia<V7V1Aa<=c0V7FFIarangeV0V1AainjectiveV0V1Aa=V1alengthV0F
a=aV2aV0V4V4Ia<V4V1Aa<=c0V4FAainjectiveV2V1Aa=alengthV2V1Ia>c0a+V3c1La-V1c1Ia=alengthV2V1Aa=aV2V5c0Ia<V5V1Aa<=c0V5FFIarangeV0V1AainjectiveV0V1Aa=V1alengthV0F
a=aV2aV0V4V4Ia<V4V1Aa<=c0V4FAainjectiveV2V1Aa=alengthV2V1Ia>c0a+V3c1Aa=aV5aV0V6V6Ia<V6V1Aa<=c0V6FAainjectiveV5V1Aa=alengthV5V1Ia=aV5aV0V7V7Ia<V7a+V3c1Aa<=c0V7FAa=aV10aV0V11V11Ia<V11a+V8c1Aa<=c0V11FIa=V10aV5V9V8Aa=aeltsV10asetaeltsV5V9V8Ia=alengthV10alengthV5FAa<V9alengthV5Aa<=c0V9LaV0V8Aa<V8alengthV0Aa<=c0V8Ia=aV5aV0V12V12Ia<V12V8Aa<=c0V12FAa<=V8V3Aa<=c0V8FIa=alengthV5alengthV2FAa=aV2aV0V13V13Ia<V13c0Aa<=c0V13FIa<=c0a+V3c1La-V1c1Ia=alengthV2V1Aa=aV2V14c0Ia<V14V1Aa<=c0V14FFAa>=V1c0IarangeV0V1AainjectiveV0V1Aa=V1alengthV0F
a>=c10c0
a<c0alengthV0Aa<=c0c0Ia=alengthV0c10Aa=aV0V1c0Ia<V1c10Aa<=c0V1FF
a<c1alengthV1Aa<=c0c1Ia=V1aV0c0c9Aa=aeltsV1asetaeltsV0c0c9Ia=alengthV1alengthV0FIa=alengthV0c10Aa=aV0V2c0Ia<V2c10Aa<=c0V2FF
a<c2alengthV2Aa<=c0c2Ia=V2aV1c1c3Aa=aeltsV2asetaeltsV1c1c3Ia=alengthV2alengthV1FIa=V1aV0c0c9Aa=aeltsV1asetaeltsV0c0c9Ia=alengthV1alengthV0FIa=alengthV0c10Aa=aV0V3c0Ia<V3c10Aa<=c0V3FF
a<c3alengthV3Aa<=c0c3Ia=V3aV2c2c8Aa=aeltsV3asetaeltsV2c2c8Ia=alengthV3alengthV2FIa=V2aV1c1c3Aa=aeltsV2asetaeltsV1c1c3Ia=alengthV2alengthV1FIa=V1aV0c0c9Aa=aeltsV1asetaeltsV0c0c9Ia=alengthV1alengthV0FIa=alengthV0c10Aa=aV0V4c0Ia<V4c10Aa<=c0V4FF
a<c4alengthV4Aa<=c0c4Ia=V4aV3c3c2Aa=aeltsV4asetaeltsV3c3c2Ia=alengthV4alengthV3FIa=V3aV2c2c8Aa=aeltsV3asetaeltsV2c2c8Ia=alengthV3alengthV2FIa=V2aV1c1c3Aa=aeltsV2asetaeltsV1c1c3Ia=alengthV2alengthV1FIa=V1aV0c0c9Aa=aeltsV1asetaeltsV0c0c9Ia=alengthV1alengthV0FIa=alengthV0c10Aa=aV0V5c0Ia<V5c10Aa<=c0V5FF
a<c5alengthV5Aa<=c0c5Ia=V5aV4c4c7Aa=aeltsV5asetaeltsV4c4c7Ia=alengthV5alengthV4FIa=V4aV3c3c2Aa=aeltsV4asetaeltsV3c3c2Ia=alengthV4alengthV3FIa=V3aV2c2c8Aa=aeltsV3asetaeltsV2c2c8Ia=alengthV3alengthV2FIa=V2aV1c1c3Aa=aeltsV2asetaeltsV1c1c3Ia=alengthV2alengthV1FIa=V1aV0c0c9Aa=aeltsV1asetaeltsV0c0c9Ia=alengthV1alengthV0FIa=alengthV0c10Aa=aV0V6c0Ia<V6c10Aa<=c0V6FF
a<c6alengthV6Aa<=c0c6Ia=V6aV5c5c4Aa=aeltsV6asetaeltsV5c5c4Ia=alengthV6alengthV5FIa=V5aV4c4c7Aa=aeltsV5asetaeltsV4c4c7Ia=alengthV5alengthV4FIa=V4aV3c3c2Aa=aeltsV4asetaeltsV3c3c2Ia=alengthV4alengthV3FIa=V3aV2c2c8Aa=aeltsV3asetaeltsV2c2c8Ia=alengthV3alengthV2FIa=V2aV1c1c3Aa=aeltsV2asetaeltsV1c1c3Ia=alengthV2alengthV1FIa=V1aV0c0c9Aa=aeltsV1asetaeltsV0c0c9Ia=alengthV1alengthV0FIa=alengthV0c10Aa=aV0V7c0Ia<V7c10Aa<=c0V7FF
a<c7alengthV7Aa<=c0c7Ia=V7aV6c6c0Aa=aeltsV7asetaeltsV6c6c0Ia=alengthV7alengthV6FIa=V6aV5c5c4Aa=aeltsV6asetaeltsV5c5c4Ia=alengthV6alengthV5FIa=V5aV4c4c7Aa=aeltsV5asetaeltsV4c4c7Ia=alengthV5alengthV4FIa=V4aV3c3c2Aa=aeltsV4asetaeltsV3c3c2Ia=alengthV4alengthV3FIa=V3aV2c2c8Aa=aeltsV3asetaeltsV2c2c8Ia=alengthV3alengthV2FIa=V2aV1c1c3Aa=aeltsV2asetaeltsV1c1c3Ia=alengthV2alengthV1FIa=V1aV0c0c9Aa=aeltsV1asetaeltsV0c0c9Ia=alengthV1alengthV0FIa=alengthV0c10Aa=aV0V8c0Ia<V8c10Aa<=c0V8FF
a<c8alengthV8Aa<=c0c8Ia=V8aV7c7c1Aa=aeltsV8asetaeltsV7c7c1Ia=alengthV8alengthV7FIa=V7aV6c6c0Aa=aeltsV7asetaeltsV6c6c0Ia=alengthV7alengthV6FIa=V6aV5c5c4Aa=aeltsV6asetaeltsV5c5c4Ia=alengthV6alengthV5FIa=V5aV4c4c7Aa=aeltsV5asetaeltsV4c4c7Ia=alengthV5alengthV4FIa=V4aV3c3c2Aa=aeltsV4asetaeltsV3c3c2Ia=alengthV4alengthV3FIa=V3aV2c2c8Aa=aeltsV3asetaeltsV2c2c8Ia=alengthV3alengthV2FIa=V2aV1c1c3Aa=aeltsV2asetaeltsV1c1c3Ia=alengthV2alengthV1FIa=V1aV0c0c9Aa=aeltsV1asetaeltsV0c0c9Ia=alengthV1alengthV0FIa=alengthV0c10Aa=aV0V9c0Ia<V9c10Aa<=c0V9FF
a<c9alengthV9Aa<=c0c9Ia=V9aV8c8c5Aa=aeltsV9asetaeltsV8c8c5Ia=alengthV9alengthV8FIa=V8aV7c7c1Aa=aeltsV8asetaeltsV7c7c1Ia=alengthV8alengthV7FIa=V7aV6c6c0Aa=aeltsV7asetaeltsV6c6c0Ia=alengthV7alengthV6FIa=V6aV5c5c4Aa=aeltsV6asetaeltsV5c5c4Ia=alengthV6alengthV5FIa=V5aV4c4c7Aa=aeltsV5asetaeltsV4c4c7Ia=alengthV5alengthV4FIa=V4aV3c3c2Aa=aeltsV4asetaeltsV3c3c2Ia=alengthV4alengthV3FIa=V3aV2c2c8Aa=aeltsV3asetaeltsV2c2c8Ia=alengthV3alengthV2FIa=V2aV1c1c3Aa=aeltsV2asetaeltsV1c1c3Ia=alengthV2alengthV1FIa=V1aV0c0c9Aa=aeltsV1asetaeltsV0c0c9Ia=alengthV1alengthV0FIa=alengthV0c10Aa=aV0V10c0Ia<V10c10Aa<=c0V10FF
a=aV10c9c6Aa=aV10c8c5Aa=aV10c7c1Aa=aV10c6c0Aa=aV10c5c4Aa=aV10c4c7Aa=aV10c3c2Aa=aV10c2c8Aa=aV10c1c3Aa=aV10c0c9Ia=V10aV9c9c6Aa=aeltsV10asetaeltsV9c9c6Ia=alengthV10alengthV9FIa=V9aV8c8c5Aa=aeltsV9asetaeltsV8c8c5Ia=alengthV9alengthV8FIa=V8aV7c7c1Aa=aeltsV8asetaeltsV7c7c1Ia=alengthV8alengthV7FIa=V7aV6c6c0Aa=aeltsV7asetaeltsV6c6c0Ia=alengthV7alengthV6FIa=V6aV5c5c4Aa=aeltsV6asetaeltsV5c5c4Ia=alengthV6alengthV5FIa=V5aV4c4c7Aa=aeltsV5asetaeltsV4c4c7Ia=alengthV5alengthV4FIa=V4aV3c3c2Aa=aeltsV4asetaeltsV3c3c2Ia=alengthV4alengthV3FIa=V3aV2c2c8Aa=aeltsV3asetaeltsV2c2c8Ia=alengthV3alengthV2FIa=V2aV1c1c3Aa=aeltsV2asetaeltsV1c1c3Ia=alengthV2alengthV1FIa=V1aV0c0c9Aa=aeltsV1asetaeltsV0c0c9Ia=alengthV1alengthV0FIa=alengthV0c10Aa=aV0V11c0Ia<V11c10Aa<=c0V11FF
assertion
arangeV10c10AainjectiveV10c10Aa=c10alengthV10Ia=aV10c9c6Aa=aV10c8c5Aa=aV10c7c1Aa=aV10c6c0Aa=aV10c5c4Aa=aV10c4c7Aa=aV10c3c2Aa=aV10c2c8Aa=aV10c1c3Aa=aV10c0c9Ia=V10aV9c9c6Aa=aeltsV10asetaeltsV9c9c6Ia=alengthV10alengthV9FIa=V9aV8c8c5Aa=aeltsV9asetaeltsV8c8c5Ia=alengthV9alengthV8FIa=V8aV7c7c1Aa=aeltsV8asetaeltsV7c7c1Ia=alengthV8alengthV7FIa=V7aV6c6c0Aa=aeltsV7asetaeltsV6c6c0Ia=alengthV7alengthV6FIa=V6aV5c5c4Aa=aeltsV6asetaeltsV5c5c4Ia=alengthV6alengthV5FIa=V5aV4c4c7Aa=aeltsV5asetaeltsV4c4c7Ia=alengthV5alengthV4FIa=V4aV3c3c2Aa=aeltsV4asetaeltsV3c3c2Ia=alengthV4alengthV3FIa=V3aV2c2c8Aa=aeltsV3asetaeltsV2c2c8Ia=alengthV3alengthV2FIa=V2aV1c1c3Aa=aeltsV2asetaeltsV1c1c3Ia=alengthV2alengthV1FIa=V1aV0c0c9Aa=aeltsV1asetaeltsV0c0c9Ia=alengthV1alengthV0FIa=alengthV0c10Aa=aV0V11c0Ia<V11c10Aa<=c0V11FF
precondition
a=aV11c9c0Aa=aV11c8c2Aa=aV11c7c4Aa=aV11c6c9Aa=aV11c5c8Aa=aV11c4c5Aa=aV11c3c1Aa=aV11c2c3Aa=aV11c1c7Aa=aV11c0c6Ia=aV11aV10V12V12Ia<V12c10Aa<=c0V12FAainjectiveV11c10Aa=alengthV11c10FIa=aV10c9c6Aa=aV10c8c5Aa=aV10c7c1Aa=aV10c6c0Aa=aV10c5c4Aa=aV10c4c7Aa=aV10c3c2Aa=aV10c2c8Aa=aV10c1c3Aa=aV10c0c9Ia=V10aV9c9c6Aa=aeltsV10asetaeltsV9c9c6Ia=alengthV10alengthV9FIa=V9aV8c8c5Aa=aeltsV9asetaeltsV8c8c5Ia=alengthV9alengthV8FIa=V8aV7c7c1Aa=aeltsV8asetaeltsV7c7c1Ia=alengthV8alengthV7FIa=V7aV6c6c0Aa=aeltsV7asetaeltsV6c6c0Ia=alengthV7alengthV6FIa=V6aV5c5c4Aa=aeltsV6asetaeltsV5c5c4Ia=alengthV6alengthV5FIa=V5aV4c4c7Aa=aeltsV5asetaeltsV4c4c7Ia=alengthV5alengthV4FIa=V4aV3c3c2Aa=aeltsV4asetaeltsV3c3c2Ia=alengthV4alengthV3FIa=V3aV2c2c8Aa=aeltsV3asetaeltsV2c2c8Ia=alengthV3alengthV2FIa=V2aV1c1c3Aa=aeltsV2asetaeltsV1c1c3Ia=alengthV2alengthV1FIa=V1aV0c0c9Aa=aeltsV1asetaeltsV0c0c9Ia=alengthV1alengthV0FIa=alengthV0c10Aa=aV0V13c0Ia<V13c10Aa<=c0V13FF
a=aV11c9c0Aa=aV11c8c2Aa=aV11c7c4Aa=aV11c6c9Aa=aV11c5c8Aa=aV11c4c5Aa=aV11c3c1Aa=aV11c2c3Aa=aV11c1c7Aa=aV11c0c6Ia=aV11aV10V12V12Ia<V12c10Aa<=c0V12FAainjectiveV11c10Aa=alengthV11c10FAarangeV10c10AainjectiveV10c10Aa=c10alengthV10Aa=aV10c9c6Aa=aV10c8c5Aa=aV10c7c1Aa=aV10c6c0Aa=aV10c5c4Aa=aV10c4c7Aa=aV10c3c2Aa=aV10c2c8Aa=aV10c1c3Aa=aV10c0c9Ia=V10aV9c9c6Aa=aeltsV10asetaeltsV9c9c6Ia=alengthV10alengthV9FAa<c9alengthV9Aa<=c0c9Ia=V9aV8c8c5Aa=aeltsV9asetaeltsV8c8c5Ia=alengthV9alengthV8FAa<c8alengthV8Aa<=c0c8Ia=V8aV7c7c1Aa=aeltsV8asetaeltsV7c7c1Ia=alengthV8alengthV7FAa<c7alengthV7Aa<=c0c7Ia=V7aV6c6c0Aa=aeltsV7asetaeltsV6c6c0Ia=alengthV7alengthV6FAa<c6alengthV6Aa<=c0c6Ia=V6aV5c5c4Aa=aeltsV6asetaeltsV5c5c4Ia=alengthV6alengthV5FAa<c5alengthV5Aa<=c0c5Ia=V5aV4c4c7Aa=aeltsV5asetaeltsV4c4c7Ia=alengthV5alengthV4FAa<c4alengthV4Aa<=c0c4Ia=V4aV3c3c2Aa=aeltsV4asetaeltsV3c3c2Ia=alengthV4alengthV3FAa<c3alengthV3Aa<=c0c3Ia=V3aV2c2c8Aa=aeltsV3asetaeltsV2c2c8Ia=alengthV3alengthV2FAa<c2alengthV2Aa<=c0c2Ia=V2aV1c1c3Aa=aeltsV2asetaeltsV1c1c3I
VC for test

0c8450e77dd8c03ca1c3e3b8894b2bac 11H10
d98f6b2765d3756dc01f160e53fa2cc4 1H0
1a6e7733c15901a56f318cd2e2f09b6f 3H2
de7d3f681fe43891eff66c7af7489826 3H4
ca6b964a617c30bf453b694b76d9c41f 6H5
56de6d30a8adcbfc2d064f9d4bf07dbb 8H7
0e3b5849fd5dfb686d80c38620c8c21e 8H9
5fdb0cdb92a5049642bb90958350aa58 19H24
4d5d66cb7c9381f764ceec51ce92e7cc 13H12
1ea0ee9afa017fbb168e4b7a9785b096 1H14
55bb7457e01ab2e12c3962dfb5e41a69 3H15
5620133e0ed1f3d1c7c5dfc42a3de114 3H16
0fb0ca66fb5eb0470e6c945062dcb545 6H17
be70400df6c5103895f7aafb250de3db 8H22
de0affa84f12241ee21477294b13ae51 19H18
6069fceaf0ac74aef7de7cb202ffebf0 19H20
11e7f71347c9a8178ec4fc2ffc1392ed 19H21
3562bdf78942d2b43401c121bb5318c6 8H23
70ca7d8091cf248b6189548afcc0d3dc 42H41
75a4ef20e6123e94fa491b6cd60f3778 13H25
9a22892258d5cc6ff485ddbea73967c6 3H26
173784e97015ca38d40f0db6556ec669 3H27
e74173617b9ac1a293df47a62b68281d 3H28
f140475bd76ee2281cb6ebf0d67c885e 3H29
30daa1846d33f7f61e1f71408c057b53 3H30
a1fc48fd8da13c26854e7ba976d88b50 3H31
137c9a757a268164dd4acab6c7f62e49 3H32
823680ae57bbcce363b9b6cc3345c94d 3H33
54e2895a4693a62d40e2c5de9a6b788a 3H34
5f91428a4980e52b7bc53e88499735bd 3H35
7a8bbc669b8bbd9814eea3a430407286 37H36
1ca29b2cb3968364d43c710a92e048c3 39H38
b9916d6b4d50de7a800240e1d3e3b922 37H40
