a<=aV0V2aV0V3Ia<V3alengthV0Aa<=c0V3Aa<V2c0Aa<=c0V2FAapermut_allV0V0Aasorted_subV0c0c0Ia<=c0a+V1c1La-alengthV0c1F
loop invariant init
a<=aV2V4aV2V7Ia<V7V6Aa<=V3V7FAa<V4V6Aa<=V3V4Ia<=V6a+V5c1La+V3c1La-alengthV2c1Ia=V4V3FIa<=aV2V8aV2V9Ia<V9alengthV2Aa<=V3V9Aa<V8V3Aa<=c0V8FAapermut_allV0V2Aasorted_subV2c0V3Aa<=V3V1Aa<=c0V3FIa=alengthV2alengthV0FIa<=c0a+V1c1La-alengthV0c1F
a<V7alengthV2Aa<=c0V7Ia<=aV2V7aV2V9Ia<V9V8Aa<=V3V9FAa<V7V8Aa<=V3V7Aa<=V8V5Aa<=V6V8FFIa<=V6a+V5c1La+V3c1La-alengthV2c1Ia=V4V3FIa<=aV2V10aV2V11Ia<V11alengthV2Aa<=V3V11Aa<V10V3Aa<=c0V10FAapermut_allV0V2Aasorted_subV2c0V3Aa<=V3V1Aa<=c0V3FIa=alengthV2alengthV0FIa<=c0a+V1c1La-alengthV0c1F
index in array bounds
a<V8alengthV2Aa<=c0V8Ia<=aV2V7aV2V9Ia<V9V8Aa<=V3V9FAa<V7V8Aa<=V3V7Aa<=V8V5Aa<=V6V8FFIa<=V6a+V5c1La+V3c1La-alengthV2c1Ia=V4V3FIa<=aV2V10aV2V11Ia<V11alengthV2Aa<=V3V11Aa<V10V3Aa<=c0V10FAapermut_allV0V2Aasorted_subV2c0V3Aa<=V3V1Aa<=c0V3FIa=alengthV2alengthV0FIa<=c0a+V1c1La-alengthV0c1F
a<=aV2V9aV2V10Ia<V10a+V8c1Aa<=V3V10FAa<V9a+V8c1Aa<=V3V9Ia=V9V8FIa<aV2V8aV2V7Ia<=aV2V7aV2V11Ia<V11V8Aa<=V3V11FAa<V7V8Aa<=V3V7Aa<=V8V5Aa<=V6V8FFIa<=V6a+V5c1La+V3c1La-alengthV2c1Ia=V4V3FIa<=aV2V12aV2V13Ia<V13alengthV2Aa<=V3V13Aa<V12V3Aa<=c0V12FAapermut_allV0V2Aasorted_subV2c0V3Aa<=V3V1Aa<=c0V3FIa=alengthV2alengthV0FIa<=c0a+V1c1La-alengthV0c1F
loop invariant preservation
a<=aV2V7aV2V9Ia<V9a+V8c1Aa<=V3V9FAa<V7a+V8c1Aa<=V3V7INa<aV2V8aV2V7Ia<=aV2V7aV2V10Ia<V10V8Aa<=V3V10FAa<V7V8Aa<=V3V7Aa<=V8V5Aa<=V6V8FFIa<=V6a+V5c1La+V3c1La-alengthV2c1Ia=V4V3FIa<=aV2V11aV2V12Ia<V12alengthV2Aa<=V3V12Aa<V11V3Aa<=c0V11FAapermut_allV0V2Aasorted_subV2c0V3Aa<=V3V1Aa<=c0V3FIa=alengthV2alengthV0FIa<=c0a+V1c1La-alengthV0c1F
a<V3alengthV2Aa<=c0V3Aa<V7alengthV2Aa<=c0V7INa=V7V3Ia<=aV2V7aV2V8Ia<V8a+V5c1Aa<=V3V8FAa<V7a+V5c1Aa<=V3V7FIa<=V6a+V5c1La+V3c1La-alengthV2c1Ia=V4V3FIa<=aV2V9aV2V10Ia<V10alengthV2Aa<=V3V10Aa<V9V3Aa<=c0V9FAapermut_allV0V2Aasorted_subV2c0V3Aa<=V3V1Aa<=c0V3FIa=alengthV2alengthV0FIa<=c0a+V1c1La-alengthV0c1F
precondition
apermut_allV2V8IaexchangeV2V8V7V3Ia=alengthV8alengthV2FINa=V7V3Ia<=aV2V7aV2V9Ia<V9a+V5c1Aa<=V3V9FAa<V7a+V5c1Aa<=V3V7FIa<=V6a+V5c1La+V3c1La-alengthV2c1Ia=V4V3FIa<=aV2V10aV2V11Ia<V11alengthV2Aa<=V3V11Aa<V10V3Aa<=c0V10FAapermut_allV0V2Aasorted_subV2c0V3Aa<=V3V1Aa<=c0V3FIa=alengthV2alengthV0FIa<=c0a+V1c1La-alengthV0c1F
assertion
a<=aV8V9aV8V10Ia<V10alengthV8Aa<=a+V3c1V10Aa<V9a+V3c1Aa<=c0V9FAapermut_allV0V8Aasorted_subV8c0a+V3c1Iapermut_allV2V8IaexchangeV2V8V7V3Ia=alengthV8alengthV2FINa=V7V3Ia<=aV2V7aV2V11Ia<V11a+V5c1Aa<=V3V11FAa<V7a+V5c1Aa<=V3V7FIa<=V6a+V5c1La+V3c1La-alengthV2c1Ia=V4V3FIa<=aV2V12aV2V13Ia<V13alengthV2Aa<=V3V13Aa<V12V3Aa<=c0V12FAapermut_allV0V2Aasorted_subV2c0V3Aa<=V3V1Aa<=c0V3FIa=alengthV2alengthV0FIa<=c0a+V1c1La-alengthV0c1F
apermut_allV2V2INNa=V7V3Ia<=aV2V7aV2V8Ia<V8a+V5c1Aa<=V3V8FAa<V7a+V5c1Aa<=V3V7FIa<=V6a+V5c1La+V3c1La-alengthV2c1Ia=V4V3FIa<=aV2V9aV2V10Ia<V10alengthV2Aa<=V3V10Aa<V9V3Aa<=c0V9FAapermut_allV0V2Aasorted_subV2c0V3Aa<=V3V1Aa<=c0V3FIa=alengthV2alengthV0FIa<=c0a+V1c1La-alengthV0c1F
a<=aV2V8aV2V9Ia<V9alengthV2Aa<=a+V3c1V9Aa<V8a+V3c1Aa<=c0V8FAapermut_allV0V2Aasorted_subV2c0a+V3c1Iapermut_allV2V2INNa=V7V3Ia<=aV2V7aV2V10Ia<V10a+V5c1Aa<=V3V10FAa<V7a+V5c1Aa<=V3V7FIa<=V6a+V5c1La+V3c1La-alengthV2c1Ia=V4V3FIa<=aV2V11aV2V12Ia<V12alengthV2Aa<=V3V12Aa<V11V3Aa<=c0V11FAapermut_allV0V2Aasorted_subV2c0V3Aa<=V3V1Aa<=c0V3FIa=alengthV2alengthV0FIa<=c0a+V1c1La-alengthV0c1F
ia<=aV2V7aV2V8Ia<V8alengthV2Aa<=a+V3c1V8Aa<V7a+V3c1Aa<=c0V7FAapermut_allV0V2Aasorted_subV2c0a+V3c1Aapermut_allV2V2a<=aV9V10aV9V11Ia<V11alengthV9Aa<=a+V3c1V11Aa<V10a+V3c1Aa<=c0V10FAapermut_allV0V9Aasorted_subV9c0a+V3c1Aapermut_allV2V9IaexchangeV2V9V4V3Ia=alengthV9alengthV2FAa<V3alengthV2Aa<=c0V3Aa<V4alengthV2Aa<=c0V4Na=V4V3Ia>V6a+V5c1La+V3c1La-alengthV2c1Ia=V4V3FIa<=aV2V12aV2V13Ia<V13alengthV2Aa<=V3V13Aa<V12V3Aa<=c0V12FAapermut_allV0V2Aasorted_subV2c0V3Aa<=V3V1Aa<=c0V3FIa=alengthV2alengthV0FIa<=c0a+V1c1La-alengthV0c1F
out of loop bounds
apermut_allV0V2AasortedV2Ia<=aV2V3aV2V4Ia<V4alengthV2Aa<=a+V1c1V4Aa<V3a+V1c1Aa<=c0V3FAapermut_allV0V2Aasorted_subV2c0a+V1c1Ia=alengthV2alengthV0FIa<=c0a+V1c1La-alengthV0c1F
postcondition
apermut_allV0V0AasortedV0Ia>c0a+V1c1La-alengthV0c1F
apermut_allV0V0AasortedV0Ia>c0a+V1c1Aapermut_allV0V2AasortedV2Ia<=aV2V3aV2V4Ia<V4alengthV2Aa<=a+V1c1V4Aa<V3a+V1c1Aa<=c0V3FAapermut_allV0V2Aasorted_subV2c0a+V1c1Aia<=aV2V9aV2V10Ia<V10alengthV2Aa<=a+V5c1V10Aa<V9a+V5c1Aa<=c0V9FAapermut_allV0V2Aasorted_subV2c0a+V5c1Aapermut_allV2V2a<=aV11V12aV11V13Ia<V13alengthV11Aa<=a+V5c1V13Aa<V12a+V5c1Aa<=c0V12FAapermut_allV0V11Aasorted_subV11c0a+V5c1Aapermut_allV2V11IaexchangeV2V11V6V5Ia=alengthV11alengthV2FAa<V5alengthV2Aa<=c0V5Aa<V6alengthV2Aa<=c0V6Na=V6V5Ia>V8a+V7c1Aia<=aV2V15aV2V16Ia<V16alengthV2Aa<=a+V5c1V16Aa<V15a+V5c1Aa<=c0V15FAapermut_allV0V2Aasorted_subV2c0a+V5c1Aapermut_allV2V2a<=aV17V18aV17V19Ia<V19alengthV17Aa<=a+V5c1V19Aa<V18a+V5c1Aa<=c0V18FAapermut_allV0V17Aasorted_subV17c0a+V5c1Aapermut_allV2V17IaexchangeV2V17V14V5Ia=alengthV17alengthV2FAa<V5alengthV2Aa<=c0V5Aa<V14alengthV2Aa<=c0V14Na=V14V5Ia<=aV2V14aV2V20Ia<V20a+V7c1Aa<=V5V20FAa<V14a+V7c1Aa<=V5V14Aia<=aV2V14aV2V22Ia<V22a+V21c1Aa<=V5V22FAa<V14a+V21c1Aa<=V5V14a<=aV2V23aV2V24Ia<V24a+V21c1Aa<=V5V24FAa<V23a+V21c1Aa
VC for selection_sort
a<c2alengthV2Aa<=c0c2Ia=V2aV1c1c3Aa=aeltsV2asetaeltsV1c1c3Ia=alengthV2alengthV1FAa<c1alengthV1Aa<=c0c1Ia=V1aV0c0c7Aa=aeltsV1asetaeltsV0c0c7Ia=alengthV1alengthV0FAa<c0alengthV0Aa<=c0c0Ia=alengthV0c3Aa=aV0V3c0Ia<V3c3Aa<=c0V3FFAa>=c3c0
VC for test1
a=alengthV9c8Iapermut_allV8V9AasortedV9Ia=alengthV9alengthV8FIa=V8aV7c7c6Aa=aeltsV8asetaeltsV7c7c6Ia=alengthV8alengthV7FAa<c7alengthV7Aa<=c0c7Ia=V7aV6c6c69Aa=aeltsV7asetaeltsV6c6c69Ia=alengthV7alengthV6FAa<c6alengthV6Aa<=c0c6Ia=V6aV5c5c42Aa=aeltsV6asetaeltsV5c5c42Ia=alengthV6alengthV5FAa<c5alengthV5Aa<=c0c5Ia=V5aV4c4c413Aa=aeltsV5asetaeltsV4c4c413Ia=alengthV5alengthV4FAa<c4alengthV4Aa<=c0c4Ia=V4aV3c3c-5Aa=aeltsV4asetaeltsV3c3c-5Ia=alengthV4alengthV3FAa<c3alengthV3Aa<=c0c3Ia=V3aV2c2c17Aa=aeltsV3asetaeltsV2c2c17Ia=alengthV3alengthV2FAa<c2alengthV2Aa<=c0c2Ia=V2aV1c1c91Aa=aeltsV2asetaeltsV1c1c91Ia=alengthV2alengthV1FAa<c1alengthV1Aa<=c0c1Ia=V1aV0c0c53Aa=aeltsV1asetaeltsV0c0c53Ia=alengthV1alengthV0FAa<c0alengthV0Aa<=c0c0Ia=alengthV0c8Aa=aV0V10c0Ia<V10c8Aa<=c0V10FFAa>=c8c0
VC for test2
iiiiiiitAa<c7alengthV0Aa<=c0c7tNa=aV0c6c91Aa<c6alengthV0Aa<=c0c6tNa=aV0c5c69Aa<c5alengthV0Aa<=c0c5tNa=aV0c4c53Aa<c4alengthV0Aa<=c0c4tNa=aV0c3c42Aa<c3alengthV0Aa<=c0c3tNa=aV0c2c17Aa<c2alengthV0Aa<=c0c2tNa=aV0c1c6Aa<c1alengthV0Aa<=c0c1tNa=aV0c0c-5Aa<c0alengthV0Aa<=c0c0Ia=alengthV0c8F
VC for bench

a11750fac924117c3efe33c8c5ff2be0 22H21
65d24626e92ac03f2701383044be5401 1H0
4decb053b32345fe3141664509789572 1H2
a771704d99624ef34a0cd781038a116c 4H3
a3b3e9c86666e3bd90773610414d2788 4H5
d96d5c398c0a4ed0ed99d612400ae462 7H6
480d5a9aceb5a9123aa54bfaaa9e85d5 7H8
8f8948fb8f92f6eefff95b0eec7100bd 10H9
ace0f2725fddd77cb97d68e45d755926 12H11
3619c9570ba9cb282a2ac5789eaaef5e 7H13
f0f510a5d1e23d8806347117f3d9923a 12H14
d090c12ff454fc973b2d3045e77456da 7H15
50f2058c0f2783aba752738f0c5bf13b 17H16
daa05f6fa000f317580eeaff17c1af98 19H18
02f3eef6b0be08a42e304ce87fd0d331 19H20
e0adcea4105311a07b7b8e6d5c480bd9 24H23
17402e6f789caca6ff95c4522f035a34 26H25
acc28d9bf24a88cb3a0bb5970ee0899d 28H27
