apermut_allV0V0Ia>=V1a-c1c1La-alengthV0c1F
loop invariant init
asorted_subV0V1alengthV0Iapermut_allV0V0Ia>=V1a-c1c1La-alengthV0c1F
a<=aV0V2aV0V3Ia<V3alengthV0Aa<V1V3Aa<=V2V1Aa<=c0V2FIasorted_subV0V1alengthV0Iapermut_allV0V0Ia>=V1a-c1c1La-alengthV0c1F
apermut_allV0V2Ia<=c0a+V4c1La-V3c1Ia<=aV2V5aV2V6Ia<V6alengthV2Aa<V3V6Aa<=V5V3Aa<=c0V5FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
asorted_subV2V3alengthV2Iapermut_allV0V2Ia<=c0a+V4c1La-V3c1Ia<=aV2V5aV2V6Ia<V6alengthV2Aa<V3V6Aa<=V5V3Aa<=c0V5FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
a<=aV2V5aV2V6Ia<V6alengthV2Aa<V3V6Aa<=V5V3Aa<=c0V5FIasorted_subV2V3alengthV2Iapermut_allV0V2Ia<=c0a+V4c1La-V3c1Ia<=aV2V7aV2V8Ia<V8alengthV2Aa<V3V8Aa<=V7V3Aa<=c0V7FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
a<=aV2V5aV2c0Ia<=V5c0Aa<=c0V5FIa<=aV2V6aV2V7Ia<V7alengthV2Aa<V3V7Aa<=V6V3Aa<=c0V6FIasorted_subV2V3alengthV2Iapermut_allV0V2Ia<=c0a+V4c1La-V3c1Ia<=aV2V8aV2V9Ia<V9alengthV2Aa<V3V9Aa<=V8V3Aa<=c0V8FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
a<V7alengthV5Aa<=c0V7La+V6c1Ia<=aV5V8aV5V6Ia<=V8V6Aa<=c0V8FAa<=aV5V9aV5V10Ia<V10alengthV5Aa<V3V10Aa<=V9V3Aa<=c0V9FAasorted_subV5V3alengthV5Aapermut_allV0V5Aa<=V6V4Aa<=c0V6FIa=alengthV5alengthV2FIa<=c0a+V4c1La-V3c1Ia<=aV2V11aV2V12Ia<V12alengthV2Aa<V3V12Aa<=V11V3Aa<=c0V11FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
index in array bounds
a<V6alengthV5Aa<=c0V6La+V6c1Ia<=aV5V8aV5V6Ia<=V8V6Aa<=c0V8FAa<=aV5V9aV5V10Ia<V10alengthV5Aa<V3V10Aa<=V9V3Aa<=c0V9FAasorted_subV5V3alengthV5Aapermut_allV0V5Aa<=V6V4Aa<=c0V6FIa=alengthV5alengthV2FIa<=c0a+V4c1La-V3c1Ia<=aV2V11aV2V12Ia<V12alengthV2Aa<V3V12Aa<=V11V3Aa<=c0V11FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
a<V8alengthV5Aa<=c0V8Aa<V6alengthV5Aa<=c0V6La+V6c1Ia>aV5V6aV5V7La+V6c1Ia<=aV5V9aV5V6Ia<=V9V6Aa<=c0V9FAa<=aV5V10aV5V11Ia<V11alengthV5Aa<V3V11Aa<=V10V3Aa<=c0V10FAasorted_subV5V3alengthV5Aapermut_allV0V5Aa<=V6V4Aa<=c0V6FIa=alengthV5alengthV2FIa<=c0a+V4c1La-V3c1Ia<=aV2V12aV2V13Ia<V13alengthV2Aa<V3V13Aa<=V12V3Aa<=c0V12FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
precondition
apermut_allV0V9IaexchangeV5V9V6V8Ia=alengthV9alengthV5FLa+V6c1Ia>aV5V6aV5V7La+V6c1Ia<=aV5V10aV5V6Ia<=V10V6Aa<=c0V10FAa<=aV5V11aV5V12Ia<V12alengthV5Aa<V3V12Aa<=V11V3Aa<=c0V11FAasorted_subV5V3alengthV5Aapermut_allV0V5Aa<=V6V4Aa<=c0V6FIa=alengthV5alengthV2FIa<=c0a+V4c1La-V3c1Ia<=aV2V13aV2V14Ia<V14alengthV2Aa<V3V14Aa<=V13V3Aa<=c0V13FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
loop invariant preservation
asorted_subV9V3alengthV9Iapermut_allV0V9IaexchangeV5V9V6V8Ia=alengthV9alengthV5FLa+V6c1Ia>aV5V6aV5V7La+V6c1Ia<=aV5V10aV5V6Ia<=V10V6Aa<=c0V10FAa<=aV5V11aV5V12Ia<V12alengthV5Aa<V3V12Aa<=V11V3Aa<=c0V11FAasorted_subV5V3alengthV5Aapermut_allV0V5Aa<=V6V4Aa<=c0V6FIa=alengthV5alengthV2FIa<=c0a+V4c1La-V3c1Ia<=aV2V13aV2V14Ia<V14alengthV2Aa<V3V14Aa<=V13V3Aa<=c0V13FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
a<=aV9V10aV9V11Ia<V11alengthV9Aa<V3V11Aa<=V10V3Aa<=c0V10FIasorted_subV9V3alengthV9Iapermut_allV0V9IaexchangeV5V9V6V8Ia=alengthV9alengthV5FLa+V6c1Ia>aV5V6aV5V7La+V6c1Ia<=aV5V12aV5V6Ia<=V12V6Aa<=c0V12FAa<=aV5V13aV5V14Ia<V14alengthV5Aa<V3V14Aa<=V13V3Aa<=c0V13FAasorted_subV5V3alengthV5Aapermut_allV0V5Aa<=V6V4Aa<=c0V6FIa=alengthV5alengthV2FIa<=c0a+V4c1La-V3c1Ia<=aV2V15aV2V16Ia<V16alengthV2Aa<V3V16Aa<=V15V3Aa<=c0V15FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
a<=aV9V10aV9a+V6c1Ia<=V10a+V6c1Aa<=c0V10FIa<=aV9V11aV9V12Ia<V12alengthV9Aa<V3V12Aa<=V11V3Aa<=c0V11FIasorted_subV9V3alengthV9Iapermut_allV0V9IaexchangeV5V9V6V8Ia=alengthV9alengthV5FLa+V6c1Ia>aV5V6aV5V7La+V6c1Ia<=aV5V13aV5V6Ia<=V13V6Aa<=c0V13FAa<=aV5V14aV5V15Ia<V15alengthV5Aa<V3V15Aa<=V14V3Aa<=c0V14FAasorted_subV5V3alengthV5Aapermut_allV0V5Aa<=V6V4Aa<=c0V6FIa=alengthV5alengthV2FIa<=c0a+V4c1La-V3c1Ia<=aV2V16aV2V17Ia<V17alengthV2Aa<V3V17Aa<=V16V3Aa<=c0V16FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
apermut_allV0V5INa>aV5V6aV5V7La+V6c1Ia<=aV5V8aV5V6Ia<=V8V6Aa<=c0V8FAa<=aV5V9aV5V10Ia<V10alengthV5Aa<V3V10Aa<=V9V3Aa<=c0V9FAasorted_subV5V3alengthV5Aapermut_allV0V5Aa<=V6V4Aa<=c0V6FIa=alengthV5alengthV2FIa<=c0a+V4c1La-V3c1Ia<=aV2V11aV2V12Ia<V12alengthV2Aa<V3V12Aa<=V11V3Aa<=c0V11FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
asorted_subV5V3alengthV5Iapermut_allV0V5INa>aV5V6aV5V7La+V6c1Ia<=aV5V8aV5V6Ia<=V8V6Aa<=c0V8FAa<=aV5V9aV5V10Ia<V10alengthV5Aa<V3V10Aa<=V9V3Aa<=c0V9FAasorted_subV5V3alengthV5Aapermut_allV0V5Aa<=V6V4Aa<=c0V6FIa=alengthV5alengthV2FIa<=c0a+V4c1La-V3c1Ia<=aV2V11aV2V12Ia<V12alengthV2Aa<V3V12Aa<=V11V3Aa<=c0V11FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
a<=aV5V8aV5V9Ia<V9alengthV5Aa<V3V9Aa<=V8V3Aa<=c0V8FIasorted_subV5V3alengthV5Iapermut_allV0V5INa>aV5V6aV5V7La+V6c1Ia<=aV5V10aV5V6Ia<=V10V6Aa<=c0V10FAa<=aV5V11aV5V12Ia<V12alengthV5Aa<V3V12Aa<=V11V3Aa<=c0V11FAasorted_subV5V3alengthV5Aapermut_allV0V5Aa<=V6V4Aa<=c0V6FIa=alengthV5alengthV2FIa<=c0a+V4c1La-V3c1Ia<=aV2V13aV2V14Ia<V14alengthV2Aa<V3V14Aa<=V13V3Aa<=c0V13FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
a<=aV5V8aV5a+V6c1Ia<=V8a+V6c1Aa<=c0V8FIa<=aV5V9aV5V10Ia<V10alengthV5Aa<V3V10Aa<=V9V3Aa<=c0V9FIasorted_subV5V3alengthV5Iapermut_allV0V5INa>aV5V6aV5V7La+V6c1Ia<=aV5V11aV5V6Ia<=V11V6Aa<=c0V11FAa<=aV5V12aV5V13Ia<V13alengthV5Aa<V3V13Aa<=V12V3Aa<=c0V12FAasorted_subV5V3alengthV5Aapermut_allV0V5Aa<=V6V4Aa<=c0V6FIa=alengthV5alengthV2FIa<=c0a+V4c1La-V3c1Ia<=aV2V14aV2V15Ia<V15alengthV2Aa<V3V15Aa<=V14V3Aa<=c0V14FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
apermut_allV0V5Ia<=aV5V6aV5a+V4c1Ia<=V6a+V4c1Aa<=c0V6FAa<=aV5V7aV5V8Ia<V8alengthV5Aa<V3V8Aa<=V7V3Aa<=c0V7FAasorted_subV5V3alengthV5Aapermut_allV0V5Ia=alengthV5alengthV2FIa<=c0a+V4c1La-V3c1Ia<=aV2V9aV2V10Ia<V10alengthV2Aa<V3V10Aa<=V9V3Aa<=c0V9FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
asorted_subV5a-V3c1alengthV5Iapermut_allV0V5Ia<=aV5V6aV5a+V4c1Ia<=V6a+V4c1Aa<=c0V6FAa<=aV5V7aV5V8Ia<V8alengthV5Aa<V3V8Aa<=V7V3Aa<=c0V7FAasorted_subV5V3alengthV5Aapermut_allV0V5Ia=alengthV5alengthV2FIa<=c0a+V4c1La-V3c1Ia<=aV2V9aV2V10Ia<V10alengthV2Aa<V3V10Aa<=V9V3Aa<=c0V9FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
a<=aV5V6aV5V7Ia<V7alengthV5Aa<a-V3c1V7Aa<=V6a-V3c1Aa<=c0V6FIasorted_subV5a-V3c1alengthV5Iapermut_allV0V5Ia<=aV5V8aV5a+V4c1Ia<=V8a+V4c1Aa<=c0V8FAa<=aV5V9aV5V10Ia<V10alengthV5Aa<V3V10Aa<=V9V3Aa<=c0V9FAasorted_subV5V3alengthV5Aapermut_allV0V5Ia=alengthV5alengthV2FIa<=c0a+V4c1La-V3c1Ia<=aV2V11aV2V12Ia<V12alengthV2Aa<V3V12Aa<=V11V3Aa<=c0V11FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
a<=aV2V5aV2V6Ia<V6alengthV2Aa<a-V3c1V6Aa<=V5a-V3c1Aa<=c0V5FAasorted_subV2a-V3c1alengthV2Aapermut_allV0V2Ia>c0a+V4c1La-V3c1Ia<=aV2V7aV2V8Ia<V8alengthV2Aa<V3V8Aa<=V7V3Aa<=c0V7FAasorted_subV2V3alengthV2Aapermut_allV0V2Aa>=V3c1Aa>=V1V3FIa=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
out of loop bounds
apermut_allV0V2Ia<=aV2V3aV2V4Ia<V4alengthV2Aa<a-c1c1V4Aa<=V3a-c1c1Aa<=c0V3FAasorted_subV2a-c1c1alengthV2Aapermut_allV0V2Ia=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
postcondition
asortedV2Iapermut_allV0V2Ia<=aV2V3aV2V4Ia<V4alengthV2Aa<a-c1c1V4Aa<=V3a-c1c1Aa<=c0V3FAasorted_subV2a-c1c1alengthV2Aapermut_allV0V2Ia=alengthV2alengthV0FIa>=V1a-c1c1La-alengthV0c1F
asortedV0Aapermut_allV0V0Ia<V1a-c1c1La-alengthV0c1F
asortedV0Aapermut_allV0V0Ia<V1a-c1c1AasortedV2Aapermut_allV0V2Ia<=aV2V3aV2V4Ia<V4alengthV2Aa<a-c1c1V4Aa<=V3a-c1c1Aa<=c0V3FAasorted_subV2a-c1c1alengthV2Aapermut_allV0V2Aa<=aV2V7aV2V8Ia<V8alengthV2Aa<a-V5c1V8Aa<=V7a-V5c1Aa<=c0V7FAasorted_subV2a-V5c1alengthV2Aapermut_allV0V2Ia>c0a+V6c1Aa<=aV9V10aV9V11Ia<V11alengthV9Aa<a-V5c1V11Aa<=V10a-V5c1Aa<=c0V10FAasorted_subV9a-V5c1alengthV9Aapermut_allV0V9Ia<=aV9V12aV9a+V6c1Ia<=V12a+V6c1Aa<=c0V12FAa<=aV9V13aV9V14Ia<V14alengthV9Aa<V5V14Aa<=V13V5Aa<=c0V13FAasorted_subV9V5alengthV9Aapermut_allV0V9Aia<=aV9V17aV9a+V15c1Ia<=V17a+V15c1Aa<=c0V17FAa<=aV9V18aV9V19Ia<V19alengthV9Aa<V5V19Aa<=V18V5Aa<=c0V18FAasorted_subV9V5alengthV9Aapermut_allV0V9a<=aV21V22aV21a+V15c1Ia<=V22a+V15c1Aa<=c0V22FAa<=aV21V23aV21V24Ia<V24alengthV21Aa<V5V24Aa<=V23V5Aa<=c0V23FAasorted_subV21V5alengthV21Aapermut_allV0V21IaexchangeV9V21V15V20Ia=alengthV21alengthV9FAa<V20alengthV9Aa<=c0V20Aa<V15alengthV9Aa<=c0V15La+V15c1a>aV9V15aV9V16Aa<V15alengthV9Aa<=c0V15Aa<V16alengthV9Aa<=c0V16La+V15c1Ia<=aV9V25aV9V15Ia<=V25V15
VC for bubble_sort
a<c2alengthV2Aa<=c0c2Ia=V2aV1c1c3Aa=aeltsV2asetaeltsV1c1c3Ia=alengthV2alengthV1FAa<c1alengthV1Aa<=c0c1Ia=V1aV0c0c7Aa=aeltsV1asetaeltsV0c0c7Ia=alengthV1alengthV0FAa<c0alengthV0Aa<=c0c0Ia=alengthV0c3Aa=aV0V3c0Ia<V3c3Aa<=c0V3FFAa>=c3c0
VC for test1
a=alengthV9c8IasortedV9Aapermut_allV8V9Ia=alengthV9alengthV8FIa=V8aV7c7c6Aa=aeltsV8asetaeltsV7c7c6Ia=alengthV8alengthV7FAa<c7alengthV7Aa<=c0c7Ia=V7aV6c6c69Aa=aeltsV7asetaeltsV6c6c69Ia=alengthV7alengthV6FAa<c6alengthV6Aa<=c0c6Ia=V6aV5c5c42Aa=aeltsV6asetaeltsV5c5c42Ia=alengthV6alengthV5FAa<c5alengthV5Aa<=c0c5Ia=V5aV4c4c413Aa=aeltsV5asetaeltsV4c4c413Ia=alengthV5alengthV4FAa<c4alengthV4Aa<=c0c4Ia=V4aV3c3c-5Aa=aeltsV4asetaeltsV3c3c-5Ia=alengthV4alengthV3FAa<c3alengthV3Aa<=c0c3Ia=V3aV2c2c17Aa=aeltsV3asetaeltsV2c2c17Ia=alengthV3alengthV2FAa<c2alengthV2Aa<=c0c2Ia=V2aV1c1c91Aa=aeltsV2asetaeltsV1c1c91Ia=alengthV2alengthV1FAa<c1alengthV1Aa<=c0c1Ia=V1aV0c0c53Aa=aeltsV1asetaeltsV0c0c53Ia=alengthV1alengthV0FAa<c0alengthV0Aa<=c0c0Ia=alengthV0c8Aa=aV0V10c0Ia<V10c8Aa<=c0V10FFAa>=c8c0
VC for test2
iiiiiiitAa<c7alengthV0Aa<=c0c7tNa=aV0c6c91Aa<c6alengthV0Aa<=c0c6tNa=aV0c5c69Aa<c5alengthV0Aa<=c0c5tNa=aV0c4c53Aa<c4alengthV0Aa<=c0c4tNa=aV0c3c42Aa<c3alengthV0Aa<=c0c3tNa=aV0c2c17Aa<c2alengthV0Aa<=c0c2tNa=aV0c1c6Aa<c1alengthV0Aa<=c0c1tNa=aV0c0c-5Aa<c0alengthV0Aa<=c0c0Ia=alengthV0c8F
VC for bench

ce753ee567eb4e3fc65579c2515b105f 32H31
319a1bc5d33909f5cf53a8e8f6e8b34c 1H0
eec5a4ebe3631f92dbf1e7264309395d 1H2
668bbe8d6b286f092523f27586927c2a 1H3
384a64a29d9d82f5f5fe30645cbc2cd9 1H4
0cfb19796fe0eb80853bcd91d4e7f49f 1H5
14240d15899dbe4c5a4526debb60e465 1H6
e2c7cb92a2e6c62f50ac15493373caf4 1H7
af8bb92b88f9923305e1727bd7be11fd 9H8
ec04cd0ea4887121a1bb570a38a1e24d 9H10
1b264b43388f6cf23c5018f575b95dad 12H11
ec092577b176f80ec14122d57d1fbaaf 14H13
b60df010ae09e5d36ea1898abf0503cf 14H15
ebdda124b52d2ff2ea5a545f80e09842 14H16
58bb6cb75e3c82c5eeba6510cd309b6c 14H17
2dc85bfebbfbbbb80dcff9c10354848a 14H18
8f8cee4a6f2b03069d86e039e3e96d15 14H19
7af01f219eda67f34b4ea0e75c063a5c 14H20
e0508a169c7683ce6d9abb9f050c02d7 14H21
f6db6dfadafed4ccdd86f6864f2f1bb7 14H22
f2de348171f67f2db79133ae9c80a9fb 14H23
923c56c3836c3083339fec7261297797 14H24
128f34d1aaa1e0e1b3f170a3376f4776 26H25
c20f79afb882a60c6edd23276c1570a9 28H27
4cc389c7049afc81d97dd6b640cc90b4 28H29
62e4842ccdfc873c77405bc8bcbb5d44 26H30
e0adcea4105311a07b7b8e6d5c480bd9 34H33
0d0331fe43b3828bc679fc8afd979aed 36H35
acc28d9bf24a88cb3a0bb5970ee0899d 38H37
